v0.3.26

Fixes

• Fixed linear-cli history issue failing on relation-history activity by removing an invalid relationChanges.issue GraphQL field from the history query.

Fixes #29.

Distribution

• Published to crates.io as linear-cli 0.3.26.
• Binary GitHub release assets are not attached because the repository Release workflow failed before build steps started.

v0.3.25

Release v0.3.25. Fixes all-features builds and deflakes priority colored-output tests.

v0.3.24

What's Changed

• Harden setup so API keys are validated before being persisted.
• Use no-echo secret entry for interactive setup while preserving piped stdin support.
• Tighten behavioral CLI tests around dry-run parsing and hidden completions.
• Align Windows cargo-binstall metadata with the release asset naming contract.
• Ignore local Clawpatch state files.

Verification

• cargo fmt --check
• git diff --check
• cargo clippy -- -D warnings
• cargo test --quiet
• cargo audit -q
• cargo deny check advisories
• cargo package --allow-dirty --no-verify
• clawpatch status: openFindings 0

v0.3.23

What's Changed

• Harden terminal output sanitization across human-facing detail/render paths.
• Improve agent-facing CLI ergonomics for templates, bulk input, and missing-ID errors.
• Fix clippy release blockers and keep CI warning-clean.
• Pin privileged release workflow actions to full commit SHAs and pin cross installation.
• Update vulnerable/advisory dependencies reported by cargo-audit and cargo-deny.

Verification

• cargo fmt --check
• git diff --check
• cargo clippy -- -D warnings
• cargo test --quiet
• cargo audit -q
• cargo deny check advisories
• cargo package --allow-dirty --no-verify

v0.3.22

Security hardening release.

Highlights:

• removes argv-based API-key setup flows for safer secret handling
• keeps update/install on the explicit update command path
• expands terminal output sanitization across issues, comments, teams, and templates
• excludes local release archives from the published crate package

Manual release with Linux x86_64, Linux aarch64, and Windows x86_64 MSVC assets.

v0.3.21

Security hardening patch release.

Includes fixes for:

• PAGER allowlist bypass via path-based executable overrides
• remaining unsafe terminal output paths in issue and webhook rendering
• uncapped concurrent webhook listener connections

Assets in this manual release were built locally.

v0.3.20

Fix native certificate trust handling for HTTPS proxy environments.

Highlights:

• switch reqwest Rustls transport to platform-native certificate roots
• restore compatibility with environments that install local trusted proxy certificates in the OS trust store, including Claude Code for Web style setups

v0.3.19

Runtime security hardening release.

Highlights:

• sanitize terminal text before rendering untrusted Linear content
• harden config/API key masking in human-readable output
• sanitize dynamic completion values to strip shell metacharacters
• tighten OAuth callback and webhook listener route matching
• add explicit HTTP/connect timeouts for OAuth and update checks
• make export and upload file writes atomic to avoid partial-file exposure

v0.3.18

Add SECURITY.md and a repo-grounded threat model for linear-cli.

v0.3.17

Manual release.