What's Changed

Fixes

• tunnel: handle a 401 response by @backport-actions-token[bot] in #725

Full Changelog: v0.33.0...v0.33.1

What's Changed

New

• ENG-1929: add pomerium-cli auth command by @desimone in #662

Fixes

• fix: migrate ExecCredential API from v1beta1 to v1 by @wasaga in #641

Dependency Updates

• ci: update dependencies by @apparitor in #613
• ci: update dependencies by @apparitor in #614
• ci: update dependencies by @apparitor in #615
• build(deps): bump the go group with 5 updates by @dependabot[bot] in #617
• build(deps): bump the docker group with 3 updates by @dependabot[bot] in #616
• ci: update dependencies by @apparitor in #619
• build(deps): bump the github-actions group with 6 updates by @dependabot[bot] in #618
• ci: update dependencies by @apparitor in #620
• ci: update dependencies by @apparitor in #621
• ci: update dependencies by @apparitor in #622
• ci: update dependencies by @apparitor in #623
• ci: update dependencies by @apparitor in #624
• ci: upgrade to Go 1.26.0 by @wasaga in #625
• ci: update dependencies by @apparitor in #626
• ci: update dependencies by @apparitor in #627
• ci: update dependencies by @apparitor in #628
• ci: update dependencies by @apparitor in #629
• ci: update dependencies by @apparitor in #631
• ci: update dependencies by @apparitor in #632
• ci: update dependencies by @apparitor in #633
• build(deps): bump the github-actions group with 3 updates by @dependabot[bot] in #637
• build(deps): bump the go group with 5 updates by @dependabot[bot] in #636
• build(deps): bump the docker group with 3 updates by @dependabot[bot] in #635
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #634
• ci: update dependencies by @apparitor in #638
• ci: update dependencies by @apparitor in #639
• ci: update dependencies by @apparitor in #640
• ci: update dependencies by @apparitor in #642
• ci: update dependencies by @apparitor in #643
• ci: update dependencies by @apparitor in #644
• build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 by @dependabot[bot] in #645
• ci: update dependencies by @apparitor in #646
• ci: update dependencies by @apparitor in #647
• ci: update dependencies by @apparitor in #648
• chore: rotate Apple signing identity to bdd@pomerium.com by @desimone in #650
• ci: update dependencies by @apparitor in #649
• build(deps): bump the github-actions group with 7 updates by @dependabot[bot] in #654
• build(deps): bump the docker group with 2 updates by @dependabot[bot] in #652
• ci: update dependencies by @apparitor in #651
• ci: skip Cloudsmith publish for release candidates by @desimone in #656
• build(deps): bump the go group across 1 directory with 2 updates by @dependabot[bot] in #657
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #659
• ci: update dependencies by @apparitor in #658
• ci: update dependencies by @apparitor in #660
• ci: update dependencies by @apparitor in #661
• build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 by @dependabot[bot] in #664
• build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 by @dependabot[bot] in #663
• ci: update dependencies by @apparitor in #665
• ci: update dependencies by @apparitor in #668
• ci: update dependencies by @apparitor in #670
• ci: update dependencies by @apparitor in #671
• ci: update dependencies by @apparitor in #672
• ci: update dependencies by @apparitor in #673
• ci: update dependencies by @apparitor in #674
• cli: remove fresh token validation, use healthz endpoint by @calebdoxsey in #676
• ci: update dependencies by @apparitor in #675
• ci: update dependencies by @apparitor in #677
• build(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #681
• build(deps): bump the docker group with 2 updates by @dependabot[bot] in #679
• ci: update dependencies by @apparitor in #678
• ci: update dependencies by @apparitor in #683
• ci: update dependencies by @apparitor in #685
• build(deps): bump the go group across 1 directory with 5 updates by @dependabot[bot] in #686
• ci: update dependencies by @apparitor in #687
• ci: update dependencies by @apparitor in #688
• ci: update dependencies by @apparitor in #689
• ci: update dependencies by @apparitor in #690
• build(deps): bump the docker group with 3 updates by @dependabot[bot] in #695
• build(deps): bump the github-actions group with 7 updates by @dependabot[bot] in #694
• build(deps): bump the go group with 4 updates by @dependabot[bot] in #693
• ci: update dependencies by @apparitor in #692
• fix: update core reference to use separate sub-modules, upgrade core to latest by @calebdoxsey in #696
• ci: update dependencies by @apparitor in #697
• ci: update dependencies by @apparitor in #698
• ci: update dependencies by @apparitor in #699
• ci: update dependencies by @apparitor in #700
• ci: update dependencies by @apparitor in #701
• ci: update dependencies by @apparitor in #705
• ci: update Go toolchain to 1.26.5 by @desimone in #710

Full Changelog: v0.32.0...v0.33.0

What's Changed

Fixes to mac CI for publishing binaries:

• chore: rotate Apple signing identity to bdd@pomerium.com by @backport-actions-token[bot] in #667

Full Changelog: v0.32.1...v0.32.2

⚠️ Mac binaries were not published for 0.32.1, for mac users seeking the latest release of pomerium/cli, use 0.32.2 .

What's Changed

• chore: bump pomerium to v0.32.5 / go 1.25.9 by @alexandreLamarre in #666

New Contributors

• @alexandreLamarre made their first contribution in #666

Full Changelog: v0.32.0...v0.32.1

Test pre-release for Apple certificate rotation verification (OPE-244)

This release tests the new Developer ID Application cert (247F4DF4...) and
Developer ID Installer cert (4CCCBFF1...) under bdd@pomerium.com.

Do not use in production. This will be deleted after verification.

What's Changed

• tcp: add fallback tunneler for tcp by @calebdoxsey in #566
• upgrade go and golangci-lint by @calebdoxsey in #595

Full Changelog: v0.31.0...v0.32.0

What's Changed

• switch from pomerium.io to pomerium.com by @kenjenkins in #543
• update Core dependency by @kenjenkins in #544
• ci: do not include deb/rpm packages in docker image by @kenjenkins in #547
• build(deps): bump the go group with 7 updates by @dependabot[bot] in #548
• build(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 in the github-actions group by @dependabot[bot] in #549
• build(deps): bump the docker group with 2 updates by @dependabot[bot] in #550
• build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #553
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #551
• build(deps): bump the go group with 9 updates by @dependabot[bot] in #554
• build(deps): bump the docker group with 3 updates by @dependabot[bot] in #552
• add ci job to upgrade core by @calebdoxsey in #556
• ci: update core to latest commit in main by @apparitor in #557
• ci: update core to latest commit in main by @apparitor in #558
• build(deps): bump the docker group with 3 updates by @dependabot[bot] in #559
• build(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #561
• build(deps): bump the go group with 8 updates by @dependabot[bot] in #560
• ci: update core to latest commit in main by @apparitor in #562
• ci: update core to latest commit in main by @apparitor in #563
• ci: update core to latest commit in main by @apparitor in #564
• set core to v0.31.0 by @wasaga in #569

Full Changelog: v0.30.0...v0.31.0

Dependencies

• downgrade pomerium/pomerium to avoid cgo dependency by @kenjenkins in #542

Full Changelog: v0.30.0...v0.30.1

Security

• restrict file permissions for cached k8s credentials by @kenjenkins in #539

Changes

• sign and notarize macOS builds by @gaurdro
• docs: fixed install link by @nickytonline in #508

Dependencies

• build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by @dependabot in #502
• build(deps): bump the github-actions group with 6 updates by @dependabot in #512
• upgrade go to v1.24 by @calebdoxsey in #510
• build(deps): bump the go group across 1 directory with 6 updates by @dependabot in #515
• build(deps): bump the github-actions group with 2 updates by @dependabot in #522
• build(deps): bump the docker group with 3 updates by @dependabot in #521
• build(deps): bump the go group with 7 updates by @dependabot in #520
• build(deps): bump github.com/open-policy-agent/opa from 1.2.0 to 1.4.0 by @dependabot in #523
• build(deps): bump the go group with 7 updates by @dependabot in #528
• build(deps): bump the docker group with 3 updates by @dependabot in #526
• build(deps): bump the github-actions group across 1 directory with 2 updates by @dependabot in #529
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 by @dependabot in #534
• build(deps): bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 by @dependabot in #533
• build(deps): bump docker/setup-buildx-action from 3.10.0 to 3.11.1 in the github-actions group by @dependabot in #537
• build(deps): bump the docker group with 3 updates by @dependabot in #536
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot in #535
• build(deps): bump the go group with 6 updates by @dependabot in #538

Full Changelog: v0.29.1...v0.30.0

What's Changed

• upgrade core to remove log message by @calebdoxsey in #513

Full Changelog: v0.29.0...v0.29.1