- Add optional Azure CLI subscription selection via
--subscription(-s) by @Copilot in #767 - Return errors when cache cleanup fails by @pathei-kosmos in #760
- Bump golang.org/x/crypto to v0.52.0 and Go to 1.26.4 by @Copilot in #781
- Bump MSAL Go v1.4.2→v1.7.2 and azidentity v1.8.0→v1.14.0 to use form_post response mode by default for AcquireTokenInteractive by @vineeth-thumma in #778
- Bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in #779
- Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #777
- Bump mindsers/changelog-reader-action from 2.2.2 to 2.4.0 by @dependabot[bot] in #775
- Bump docker/login-action from 3.0.0 to 4.2.0 by @dependabot[bot] in #774
- Bump golangci/golangci-lint-action from 8.0.0 to 9.2.1 by @dependabot[bot] in #773
- Bump docker/build-push-action from 5.1.0 to 7.2.0 by @dependabot[bot] in #772
- Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #771
- Bump softprops/action-gh-release from 1 to 3 by @dependabot[bot] in #770
- Bump mukunku/tag-exists-action from 1.6.0 to 1.7.0 by @dependabot[bot] in #769
- Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #768
- Bump actions/checkout from 3.6.0 to 6.0.3 by @dependabot[bot] in #766
- Bump actions/setup-go from 4.1.0 to 6.4.0 by @dependabot[bot] in #765
- Bump peaceiris/actions-gh-pages from 3.9.3 to 4.1.0 by @dependabot[bot] in #764
- Bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #763
- Bump peter-evans/create-pull-request from 5 to 8 by @dependabot[bot] in #759
- Bump codecov/codecov-action from 5.1.2 to 6.0.1 by @dependabot[bot] in #758
- Bump docker/setup-buildx-action from 3.0.0 to 4.1.0 by @dependabot[bot] in #757
- Bump actions/dependency-review-action from 2.5.1 to 5.0.0 by @dependabot[bot] in #756
- @pathei-kosmos made their first contribution in #760
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.18...v0.2.19
- Add kubelogin-version.txt as a release asset to avoid GitHub API rate limits by @Copilot in #749
- Bump kubelogin build toolchain pins to Go 1.26.3 for CVE-2026-27137 remediation by @Copilot in #753
- Update README with official Azure kubelogin sources by @bcho in #751
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.17...v0.2.18
- fix: add cross-process lock around cache.New to prevent macOS keychain race by @weinong in #744
- chore: upgrade Go toolchain from 1.24 to 1.25.9 by @Copilot in #745
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.16...v0.2.17
- Bump Go to 1.24.13 to address CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730 by @Copilot in #741
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.15...v0.2.16
- PoP token flow crash with nil pointer in cache.Replace when running non-root by @vineeth-thumma in #736
- feat: automate CHANGELOG.md generation for releases by @Copilot in #737
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.14...v0.2.15
- Bump Go to 1.24.11 and golangci-lint to v2.7.2 to address CVE-2025-61727 and CVE-2025-61729 by @Copilot in #731
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.13...v0.2.14
- Mention PEM support for client certificates by @ijrsvt in #717
- added winget publish actions by @weinong in #718
- Fix PoP token keychain storage conflict by @fangluguomsft in #723
- docs(installation): add alternative mise installation method by @jylenhof in #724
- Bump Go to 1.24.9 to address stdlib CVEs by @Copilot in #726
- Bump golang.org/x/crypto from 0.40.0 to 0.45.0 by @dependabot[bot] in #727
- @ijrsvt made their first contribution in #717
- @fangluguomsft made their first contribution in #723
- @jylenhof made their first contribution in #724
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.12...v0.2.13
- Support Azure Pipelines Environment Variables for AzurePipelinesCredential by @Copilot in #713
- [PoP token Cache] Fallback to no caching when encrypted cache creation fails by @vineeth-thumma in #715
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.11...v0.2.12
- Add OpenContainers Image Spec labels to Docker image by @Copilot in #693
- Add AzurePipelinesCredential to authentication options by @Copilot in #703
- Add encrypted caching support for PoP token flow by @vineeth-thumma in #676
- update install doc by @weinong in #688
- Update asdf installation instructions by @o-farooq in #690
- docs: clarify sp login-mode precedence by @duduz in #692
- bumped go version by @weinong in #709
- @o-farooq made their first contribution in #690
- @duduz made their first contribution in #692
- @vineeth-thumma made their first contribution in #676
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.10...v0.2.11
- Add Docker Image Build and Publish Workflow by @Copilot in #680
- Fix Docker registry name case issue in GitHub Actions workflow by @Copilot in #682
- Fix CVE-2025-22871 and CVE-2025-22868: Update Go version and security dependencies by @Copilot in #678
- @Copilot made their first contribution in #678
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.9...v0.2.10
- added redirect-url to interactive mode by @weinong in #661
- added Interactive login hint by @weinong in #663
- Add caching support for PoP token acquisition by @JorgeDaboub in #662
- feat: update documentation by @jakangah in #669
- @jakangah made their first contribution in #669
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.8...v0.2.9
- Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #648
- Bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot in #651
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.7...v0.2.8
- fix missing prompt and increase default timeout to 60s by @weinong in #643
- ignore cache create failure by @weinong in #644
- fix missing build tag in --version by @weinong in #645
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.6...v0.2.7
- fixed the unneeded tenant id validation in azurecli login by @weinong in #637
- remove tenant id validation for azuredevops login by @weinong in #638
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.5...v0.2.6
- fixed a bug where server-id flag is always required by @weinong in #634
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.4...v0.2.5
- disable cgo for linux and windows by @weinong in #631
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.3...v0.2.4
- use tar to retain executable bit in released assets by @weinong in #628
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.2...v0.2.3
- fixed broken release assets by @weinong in #625
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.1...v0.2.2
- updated artifact actions by @weinong in #622
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.2.0...v0.2.1
- rewrote token implementation and added official cache support by @weinong in #608
This change includes breaking change so that the minor version is bumped:
- Previous caching implementation is removed. Now we are using caching provided by azidentity. This also means any credential flows not implemented by azidentity will not have any caching. Notably, interactive with pop, device code with legacy and ropc with pop will NOT have cache.
- The binary is now built with CGO enabled to allow secure token caching on the host
- Bump golang.org/x/net from 0.33.0 to 0.36.0 by @dependabot in #618
- added missing checkout to fix release by @weinong in #620
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.9...v0.2.0
- Add disable-instance-discovery option in interactive pop mode by @Aijing2333 in #593
- Bump codecov/codecov-action from 3.1.5 to 5.1.2 by @dependabot in #583
- Bump mukunku/tag-exists-action from 1.1.0 to 1.6.0 by @dependabot in #405
- Bump go.uber.org/mock from 0.4.0 to 0.5.0 by @dependabot in #545
- chore: bump go to 1.23.7 by @bcho in #611
- @Aijing2333 made their first contribution in #593
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.7...v0.1.9
- Improve shell completion for convert-config by @albers in #582
- Shell completion enhancements by @albers in #586
- Adding an option to disable instance discovery in AcquirePoPTokenConfidential by @bganapa in #595
- Add disable environment override option. by @dpersson in #594
- chore: bump golang.org/x/net to v0.33.0 to mitigate CVE-2024-45338 by @bcho in #584
- address codeql issues by @weinong in #588
- Update website.yaml by @weinong in #589
- Fix install link for golangci-lint by @albers in #585
- use bingo to manage golangci-lint by @weinong in #590
- default codeql does not allow uploading 3rd party scanning result by @weinong in #591
- fixed the default target in makefile by @weinong in #601
- @albers made their first contribution in #582
- @bganapa made their first contribution in #595
- @dpersson made their first contribution in #594
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.6...v0.1.7
- remove snap since it's unsupported by @weinong in #564
- Add x5c Header when Acquiring PoP Tokens by @JorgeDaboub in #568
- Bump golang.org/x/crypto from 0.27.0 to 0.31.0 by @dependabot in #576
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.5...v0.1.6
- support of environment variable KUBECACHEDIR #500 by @jjournet in #501
- Use AZURE_CONFIG_DIR in kubelogin command example by @tspearconquest in #522
- fix: fix fallback to Git tag if VCS is unavailable by @maxbrunet in #530
- Expose MSAL PoP for Consistent CSP Integration by @JorgeDaboub in #542
- Bump ossf/scorecard-action from 2.0.6 to 2.4.0 by @dependabot in #498
- Bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #490
- Bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #505
- Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @dependabot in #543
- Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.8.0 by @dependabot in #534
- Preemptive fix for the breaking GH Action. by @Tatsinnit in #546
- @jjournet made their first contribution in #501
- @tspearconquest made their first contribution in #522
- @maxbrunet made their first contribution in #530
- @JorgeDaboub made their first contribution in #542
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.4...v0.1.5
- Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.6.0 by @dependabot in #474
- feat: declare go version directive with patch version by @bcho in #476
- Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.1 to 1.12.0 by @dependabot in #478
- chore: upgrade go to v1.21.11 to fix CVE-2024-24790 by @strivedi-px in #485
- Bump k8s.io/klog/v2 from 2.110.1 to 2.130.1 by @dependabot in #483
- Bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #482
- Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in #444
- Bump gopkg.in/dnaeon/go-vcr.v3 from 3.1.2 to 3.2.0 by @dependabot in #459
- @strivedi-px made their first contribution in #485
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.3...v0.1.4
- Bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #451
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.2...v0.1.3
- Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 by @dependabot in #430
- Bump k8s.io/cli-runtime from 0.28.3 to 0.29.3 by @dependabot in #433
- fix: tidy go.mod and bump go version by @bcho in #448
- Bump golang.org/x/crypto from 0.18.0 to 0.22.0 by @dependabot in #445
- Bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in #406
- Bump github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1 by @dependabot in #443
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.1...v0.1.2
- Adds Azure Developer CLI (azd) as a new login method by @wbreza in #398
- Add PoP token support for ROPC flow by @rharpavat in #412
- Default branch is now main. by @Tatsinnit in #390
- Changes in correlation with new GH Action Permission Changes. by @Tatsinnit in #400
- Bump github.com/AzureAD/microsoft-authentication-library-for-go from 1.2.0 to 1.2.1 by @dependabot in #391
- Bump golang.org/x/crypto from 0.17.0 to 0.18.0 by @dependabot in #392
- [StepSecurity] Apply security best practices by @step-security-bot in #404
- @wbreza made their first contribution in #398
- @step-security-bot made their first contribution in #404
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.1.0...v0.1.1
- [library usage] Move modules under
pkgtopkg/internalby @bcho in #376 - [library usage] Update module version usages by @bcho in #377
- [library usage] Refine internal token types by @bcho in #379
- [library usage] Implement library token provider by @bcho in #380
- [library usage] fix: downgrade required go version to 1.20 by @bcho in #386
- Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 by @dependabot in #359
- Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in #378
- Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.0 by @dependabot in #370
- Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.8.0 to 1.9.1 by @dependabot in #372
- Bump go.uber.org/mock from 0.3.0 to 0.4.0 by @dependabot in #385
- Bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in #383
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.34...v0.1.0
- feat(timeout): Implement customizable timeout for Azure CLI token ret… by @Aricg in #362
- added github token support by @weinong in #366
- added armv7 support by @weinong in #367
- bump golang to 1.21 by @weinong in #356
- Bump k8s.io/klog/v2 from 2.100.1 to 2.110.1 by @dependabot in #357
- Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in #355
- @Aricg made their first contribution in #362
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.33...v0.0.34
- use the adal library for spn when --legacy is specified by @weinong in #338
- Bump github.com/google/uuid from 1.3.0 to 1.3.1 by @dependabot in #334
- Add 1P client/server app IDs to docs by @rharpavat in #336
- Update install.md by @torreymicrosoft in #342
- Bump golang.org/x/net from 0.10.0 to 0.17.0 by @dependabot in #347
- Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.1 to 1.8.0 by @dependabot in #344
- Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.3.0 to 1.4.0 by @dependabot in #346
- Bump k8s.io/cli-runtime from 0.27.2 to 0.28.2 by @dependabot in #340
- Bump k8s.io/cli-runtime from 0.28.2 to 0.28.3 by @dependabot in #351
- Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in #349
- Bump github.com/stretchr/testify from 1.8.2 to 1.8.4 by @dependabot in #348
- @torreymicrosoft made their first contribution in #342
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.32...v0.0.33
- Add PoP token support to interactive+spn get-token/convert-kubeconfig flows by @rharpavat in #319
- Fixed typo in top header for convert-kubeconfig documentation by @byk0t in #323
- Bump golang.org/x/crypto from 0.11.0 to 0.12.0 by @dependabot in #315
- Bump k8s.io/apimachinery from 0.27.3 to 0.27.4 by @dependabot in #310
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.31...v0.0.32
- upgrade klog from v1 to v2 by @peterbom in #306
- Bump k8s.io/apimachinery from 0.27.2 to 0.27.3 by @dependabot in #297
- Bump golang.org/x/crypto from 0.10.0 to 0.11.0 by @dependabot in #303
- Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.6.0 to 1.6.1 by @dependabot in #292
- Bump golang.org/x/crypto from 0.9.0 to 0.10.0 by @dependabot in #294
- docs: Use asdf-plugins index instead of hard coded repo #298
- Add chocolatey installation instructions #299
- @peterbom made their first contribution in #306
- @sechmann made their first contribution in #298
- @moredatapls made their first contribution in #299
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.30...v0.0.31
- added verbose logging in convert-kubeconfig by @weinong in #272
- Adding installHint field to kubeconfigs that have been converted to the exec format by @cirvine-MSFT in #282
- Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.1.1 to 1.5.0 by @dependabot in #249
- Bump github.com/AzureAD/microsoft-authentication-library-for-go from 0.9.0 to 1.0.0 by @dependabot in #259
- Bump k8s.io/cli-runtime from 0.26.3 to 0.27.1 by @dependabot in #262
- Bump github.com/Azure/go-autorest/autorest from 0.11.28 to 0.11.29 by @dependabot in #273
- add unit tests for
manualtoken_test.goby @khareyash05 in #268 - Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.5.0 to 1.6.0 by @dependabot in #274
- Bump golang.org/x/crypto from 0.8.0 to 0.9.0 by @dependabot in #277
- Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.2.2 to 1.3.0 by @dependabot in #278
- Bump k8s.io/apimachinery from 0.27.1 to 0.27.2 by @dependabot in #283
- Bump k8s.io/cli-runtime from 0.27.1 to 0.27.2 by @dependabot in #285
- Azidentity migration for service principal token by @ekoehn in #287
- update go to address CVE by @weinong in #290
- update doc for v0.0.29 by @weinong in #270
Full Changelog: https://github.com/Azure/kubelogin/compare/v0.0.29...v0.0.30
- add --context support in convert subcommand by @weinong in #260
- return error when specified context is not found by @weinong in #261
- add --azure-config-dir in convert-kubeconfig subcommand by @weinong in #263
- Enable Code Cov for this repo. by @Tatsinnit in #229
- Bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #230
- Bump k8s.io/client-go from 0.26.2 to 0.26.3 by @dependabot in #234
- Feature/addtests by @Tatsinnit in #238
- Bump k8s.io/cli-runtime from 0.26.2 to 0.26.3 by @dependabot in #237
- Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 by @dependabot in #245
- Bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #250
- Add codecov badge to this repo. by @Tatsinnit in #252
- Bump k8s.io/apimachinery from 0.26.3 to 0.27.1 by @dependabot in #257
- Bump k8s.io/client-go from 0.26.3 to 0.27.1 by @dependabot in #258
- Fix merge conflicts and breaking changes in PR 221 by @cirvine-MSFT in #264
- Fix merge conflicts in PR 232 updating adal from 0.9.22 to 0.9.23 by @cirvine-MSFT in #265
- refactor windows install doc by @weinong in #233
- adding github pages by @weinong in #241
- added inline toc by @weinong in #244
- Document scoop installation option by @goostleek in #242
- revamp the website by @weinong in #246
- update readme and docs by @weinong in #247
- ignore docs and readme on some workflows by @weinong in #248
- Add reference to a context. by @Tatsinnit in #253
- How to install kubelogin with asdf tool manager by @daveneeley in #256
- Update devicecode.md by @madhurgupta03 in #266