Skip to content

v2.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jun 15:59
· 61 commits to main since this release
v2.1.2
This tag was signed with the committer’s verified signature.
danielgtaylor Daniel G. Taylor
GPG key ID: 86BDECE71D7D2FA1
Verified
Learn about vigilant mode.
bfd9635
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Overview

Restish 2.1.2 is a focused patch release for smoother authenticated API setup, friendlier hardware-backed TLS signer configuration, and a sturdier release process. It includes the Linux OAuth and api sync improvements that were queued for this release, plus the discovery concurrency fix found during release QA.

OAuth and api sync polish

OAuth browser flows on Linux are more reliable, especially when BROWSER contains a command with arguments. Restish now handles whitespace-separated browser commands more carefully and avoids leaking desktop-session environment into the browser handoff where it can confuse xdg-open style launchers.

restish api sync is also quieter when existing OAuth configuration can be reused. Shared discovery transports and OAuth cache keys are hardened so syncing an API can refresh its spec without needlessly prompting or mixing token state between issuers.

Easier PKCS#11 setup

The PKCS#11 TLS signer plugin now auto-selects a token when exactly one token is available. That removes a small but annoying setup step for hardware-backed client certificate flows, while still keeping multi-token environments explicit.

Discovery race fix from release QA

Release QA found a race in parallel OpenAPI discovery: once one probe found a valid spec, canceled sibling probes could still be unwinding through fetch callbacks while api connect or api sync continued and mutated config. Discovery now waits for canceled probes to exit before returning, so callers regain ownership of mutable CLI state only after discovery is fully finished.

Docs, blog, and release readiness

This release adds the new Restish blog section and the first post on the v2 rebuild. Install and upgrade docs were refreshed, Homebrew paths were corrected, release packaging docs were tightened, and the repo now includes a reusable release QA skill with the checks used for this release.

Changelog

  • bfd9635 Merge pull request #365 from rest-sh/fix/release-qa-discovery-race
  • 06efa65 Merge pull request #359 from natalie-o-perret/fix/oauth-linux-reduce-prompts-api-sync
  • 0d60d1a Merge pull request #363 from rest-sh/blog
  • f413926 Merge pull request #360 from natalie-o-perret/feat/pkcs11-auto-detect-single-token
  • 7232c85 Merge pull request #364 from rest-sh/codex/release-qa-skill
  • b24a1ab fix: wait for canceled discovery probes
  • 50b8a64 feat(pkcs11): auto-select token when only one is present
  • ca4627a fix(auth+cli): fix OAuth browser flows on Linux; reduce prompts during api sync
  • 69d6b9c fix(auth): harden shared OAuth and sync reuse
  • 939f178 fix(oauth): split $BROWSER on whitespace; fix sharedDiscoveryTransport doc
  • f5ca3a1 docs: update generated api sync reference
  • 0064f50450643c09d3aca14934dfc53dc770c930 docs: add Restish blog
  • 76bc9f96c14af11c0aac4569832b65f37b9d79cc docs: add release QA skill

Full Changelog: v2.1.1...v2.1.2

Assets 32
Loading