1Password CLI

Debug output now includes per-request timing. {ECO-971} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817}

Debug output now includes per-request timing. {ECO-971} 1Password Environments commands are now significantly faster on Apple silicon Macs. {DG-1398} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817}

Debug output now includes per-request timing. {ECO-971} 1Password Environments commands are now significantly faster on Apple silicon Macs. {DG-1398} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817}

op run help text for the --environment flag is now correct. {0} op environment read and op run --environment help text now includes note about start time on Apple silicon Macs. {TW-1603}

op run help text for the --environment flag is now correct. {0} op environment read and op run --environment help text now includes note about start time on Apple silicon Macs. {TW-1603}

Reading an item with op read or op item get is now faster, using one fewer network round-trip per read. {ECO-815} Reading an item or vault by name is now faster: op read, op item get, op item list, and op vault get use one fewer network round-trip when resolving a name. {ECO-816}

Reading an item with op read or op item get is now faster, using one fewer network round-trip per read. {ECO-815} Reading an item or vault by name is now faster: op read, op item get, op item list, and op vault get use one fewer network round-trip when resolving a name. {ECO-816}

You can now trigger a Google Workspace user provisioning sync with op provisioning google sync. {PROV-1718}

Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#613} Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#612} Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#611} Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#605} Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#604} Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#603} Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! { shell-plugins#589} Authenticate the Descope CLI as a Descope account admin using 1Password Shell Plugins. Thanks to @scottisloud for their contribution! { shell-plugins#570} Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! { shell-plugins#563} Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins. Thanks to @fproulx-boostsecurity for their contribution! { shell-plugins#560} Authenticate the OpenTofu CLI with any supported provider using 1Password Shell Plugins. Thanks to @gargakshit for their contribution! { shell-plugins#553} Authenticate the UpCloud CLI using 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#538} Authenticate the Exercism CLI using 1Password Shell Plugins. Thanks to @dethancosta for their contribution! { shell-plugins#404} Authenticate the CrateDB CLI using 1Password Shell Plugins. Thanks to @accraw for their contribution! { shell-plugins#394} The GitHub shell plugin now provisions GH_ENTERPRISE_TOKEN for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured. Thanks to @scottisloud for their contribution! { shell-plugins#610} The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning. Thanks to @arunsathiya for their contribution! { shell-plugins#276} Tab completion is now supported when using shell plugins with bash and zsh shells. { shell-plugins#433} op no longer hangs when running a shell plugin from outside $HOME. { shell-plugins#416} Terraform 'workspace' subcommands now trigger authentication via 1Password Shell Plugins. Thanks to @moraisph for their contribution! { shell-plugins#582} The Oh Dear shell plugin now checks for the ~/.ohdear/config.json file and attempts to import credentials. Thanks to @owenvoke for their contribution! { shell-plugins#577} The deprecated zsh.initExtra option has been replaced with zsh.initContent in the nix shell plugin. Thanks to @jbhannah for their contribution! { shell-plugins#550} The awslogsCLI function has been renamed to capitalize CLI for consistency. { shell-plugins#518} Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled. {TRUST-862}

Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#613} Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#612} Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#611} Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#605} Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#604} Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#603} Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! { shell-plugins#589} Authenticate into the Descope CLI as a Descope account admin. Thanks to @scottisloud for their contribution! { shell-plugins#570} Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! { shell-plugins#563}

The 'op vault edit' help text now better describes how the Travel Mode flag works.

You can now use op user create with Automated Provisioning configured. You can now use op user suspend with Automated Provisioning configured. You can now use op user reactivate with Automated Provisioning configured. You can now use op provisioning configure to set up Automated Provisioning. The 'op vault edit' help text now better describes how the Travel Mode flag works.

Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! The AWS shell plugin now supports the awslogs CLI. Thanks to @jonasws for their contribution! The AWS shell plugin now supports eksctl, the Amazon EKS CLI. Thanks to @skpaz for their contribution! The AWS shell plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! The OpenAI shell plugin now supports the Codex CLI. Thanks to @shyim for their contribution! The ngrok shell plugin no longer performs a version check on every op plugin command when it is not initialized. Thanks to @MOmarMiraj for their contribution! The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the --profile flag. Thanks to @waiteb3 for their contribution! op run now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C).

Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! The AWS plugin now supports the awslogs CLI. Thanks to @jonasws for their contribution! The AWS plugin now supports eksctl, the Amazon EKS CLI. Thanks to @skpaz for their contribution! The AWS plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! The OpenAI Shell Plugin now supports the Codex CLI. Thanks to @shyim for their contribution! The Terraform plugin now triggers authentication for all terraform state subcommands, not just terraform state list. Thanks to @frans-otogone for their contribution! The ngrok plugin no longer performs a version check on every op plugin command when it is not initialized. Thanks to @MOmarMiraj for their contribution! The AWS CDK plugin now supports AWS Profiles that assume a role when specified by the --profile flag. Thanks to @waiteb3 for their contribution! op run now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C).

op item edit help text now includes a warning that JSON item templates don't support passkeys. 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app.

1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app.

1Password CLI now correctly updates an account's Account Trust Log when the feature is enabled.

op environment help text now includes information about how to get the ID for a 1Password Environment.

1Password CLI now supports updating an account's Account Trust Log when the feature is enabled. The --tags flag on op item edit now replaces existing tags instead of appending them. An empty --tags value now properly clears all tags. Empty tag strings in templates are now filtered out during op item create and op item edit. Default values for Date and MonthYear fields are now unset instead of zero. Upgrade Go to 1.24.12 to resolve vulnerabilities. Upgrade Go to 1.25.7 to resolve vulnerabilities.

op environment read allows reading environment variables from 1Password Environments.

The op item delete help text now notes that deleted items remain in Recently Deleted for 30 days. {4377} Tags are now deduplicated when using op item edit. {4088} 'op run' help text now notes shell expansion order of operations. {2971} op item create help text example now works without error. {4246} 1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI. {DG-682}

You can now use 1Password CLI to recover accounts for family or team members. {4161}

The 1Password app integration with 1Password CLI now works again on Windows. {4325} A typo in the error message for 'op user confirm' has been fixed. {4329}

1Password CLI no longer causes direnv to halt when the two are used together. {4250} Following the deprecation of CLI 1, the 1password/op:latest DockerHub tag will now always point to the latest version of CLI 2. {4267} The Go version has been bumped to 1.23.8. {4305} op vault list --filter now returns all vaults you have access to, regardless of permission level, making it easier to discover and manage vaults beyond just those with read access. {4189} 'op group user grant' now works correctly in MSP accounts. {4244}

1Password CLI no longer causes direnv to halt when the two are used together. {4250} Following the deprecation of CLI 1, the 1password/op:latest DockerHub tag will now always point to the latest version of CLI 2. {4267} op vault list --filter now returns all vaults you have access to, regardless of permission level, making it easier to discover and manage vaults beyond just those with read access. {4189} 'op group user grant' now works correctly in MSP accounts. {4244}

The OP_RUN_NO_MASKING environment variable is now exposed to allow users to control the masking of the op run command output. {4089} For 1Password accounts that are managed by an MSP, 1Password CLI commands involving Service Accounts, Connect, or the Events API no longer occasionally return an error. {4033} The op read, op run and op inject commands no longer query archived items. {3893} On Windows, the CLI now checks each signature of the 1Password desktop app before connecting to it. {4136}

Sensitive values from item management commands' human-readable output are now concealed and can be displayed using the --reveal flag. {4158} Caching is now being used for service account sessions on macOS and Linux. {4133} The error message when the CLI can't connect with the 1Password desktop app now includes a link to troubleshooting documentation for more help. {3933} op whoami will now signal if the CLI is authenticated as a human user. {4104} The output of op vault list now contains the created date and item count for each vault. {4092} The op item move and op item delete commands now also work for SSH Key items. {3951} The op vault revoke user command will no longer allow you to revoke permissions in a Personal, Private, or Employee vault. {3844} When the same environment variable name exists both in the OS environment and the dotenv file, op run now correctly sources the value from the dotenv file. {3667} Windows Authenticode signature now uses the SHA256 hashing algorithm. {4135}

Beginning user recovery is now possible using the CLI. {4161} The error message when the CLI can't connect with the 1Password desktop app now includes a link to troubleshooting documentation for more help. {3933} The output of 'op vault list' now contains the created date and item count for each vault. {4092} The op item move and op item delete commands no longer error for SSH Key items. {3951} The op vault revoke user command will not allow you to revoke permissions in a Personal, Private, or Employee vault. {3844} When the same environment variable name exists both in the OS environment and the dotenv file, 'op run' now correctly sources the value from the dotenv file. {3667} Windows Authenticode signature now uses the SHA256 hashing algorithm. {4135}

On first run of the CLI, there is now a prompt to automatically open the settings dialogue in 1Password 8 to check the "Integrate with CLI" checkbox. {3694} It's now possible to provision a temporary FIFO file using the --inject-file flag in op run. {3773} op whoami now also outputs the user type when authenticated as a human user. {4104} The desktop app integration now again works with beta builds of the CLI. {4075}

Adjust service account creation functionality to support the new feature of enabling other users and groups to create service accounts. {3960} You can now use the op whoami command with a 1Password Connect server. {2636} Service account tokens now include device UUIDs for scalability purposes. {4009} The output when you create a service account can now be formatted as a json object by adding --format json to the command. {3996}

Private vaults have been renamed Employee vaults for 1Password Business accounts. {3810} 1Password can now retrieve PKCS1-formatted SSH keys using op read. {3993} The 1Password CLI package installer for macOS now correctly displays the CLI version in the package receipt. {4027}

op read will now output an error message consistent with the secret reference provided, when no matching field or section is found within the item. {3592} Output of SSH private keys on non-DOS OSes no longer includes the carriage return character in line-breaks. {3913} Users and groups can now grant and revoke permissions if they have the manage_vault permission. {3863}

The CLI build for Darwin now builds with Go 1.21.8. The previous version was built using an older version, which was causing alerts for certain customers.

op service-account create command allows you to create a new service account that you can use to automate secrets management. op service-account ratelimit command allows you to fetch information about service account rate limit usage. {3886} The op user provision command now clarifies that users will not be considered for billing until they accept their invitation. {3965} --expires-in flags now include support for days and weeks. {3298} The item share --expiry flag is now aliased to the standardized --expires-in flag. {3298} Corrected a typo in user suspend error message. {3298}

op vault list --permission now allows you to retrieve a list of vaults for which a user or group has specific permissions. {3879} When setting a non-generated password, 1Password CLI now always correctly updates the password strength. {3787}

The 1Password CLI MacOS installer now allows for custom location selection. {3731} Help text now uses present tense more consistently where actions in the present are described. {3768} Help text now refers to the 1Password app consistently. {3626} Help text now refers to Connect server instances and tokens consistently. {3476} op group user grant and op group user revoke no longer panic when the group doesn't exist. {3859} Duo MFA is no longer more often prompted for than required. {3907}

The 1Password CLI universal installer now allows for custom location selection. {3731} Terraform shell plugin now works as expected when using the ngrok provider. { shell-plugins#222} Terraform now requires authentication for init and state list. Thanks to @JustMaris for their contribution! { shell-plugins#380}

op item edit now accepts JSON input via the --template flag. {1849} op item edit now supports piping items as JSON via stdin. {1849} The CLI now returns a helpful error when a user is not an owner and tries to add the Team Members group to a vault when the feature flag limitGroupVaultAccess is enabled. {3830} Error message now suggests rebooting the app when the CLI cannot connect. {3835} Error for op item edit when duplicate fields are found now formats better the field label that isn't in a section. {3849} Creating a vault with --icon=name now works again, using the updated icons. {3833} Error for op item edit when duplicated fields are found by label no longer prints the field's value. {3848}

Authenticate the Hugging Face CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @bala-ceg for their contribution! { shell-plugins#393} Authenticate the InfluxDB CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @bala-ceg for their contribution! { shell-plugins#392} Authenticate the Binance CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @bala-ceg for their contribution! { shell-plugins#391} Authenticate the LocalStack CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @simonrw for their contribution! { shell-plugins#371} Authenticate the Crowdin CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @JoeKarow for their contribution! { shell-plugins#359} Authenticate the Axiom CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @rajapri28613 for their contribution! { shell-plugins#342} Authenticate the Kaggle CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @rajapri28613 for their contribution! { shell-plugins#341} Authenticate the Todoist CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @rajapri28613 for their contribution! { shell-plugins#340} Authenticate the Pipedream CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @rajapri28613 for their contribution! { shell-plugins#338} Authenticate the Zapier CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @rajapri28613 for their contribution! { shell-plugins#337} Authenticate the Vertica CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @parthiv11 for their contribution! { shell-plugins#327} Authenticate the Yugabyte CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @parthiv11 for their contribution! { shell-plugins#322} Authenticate the Upstash CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @siddhikhapare for their contribution! { shell-plugins#316} Authenticate the Civo CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @itsCheithanya for their contribution! { shell-plugins#296} Authenticate the MongoDB Atlas CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @joqim for their contribution! { shell-plugins#198} Authenticate the Flyctl CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @arunsathiya for their contribution! { shell-plugins#141} Help text for many commands is now simpler and uses active voice. {3676, 3768} op read help text now includes example for using ssh-format query parameter to get an SSH key's private key. {3795} Added a note to op run help text to explain access and option to use service accounts. {3804} Error messages in op item create and when provisioning actions fail are now more clear. {3263, 3766} op whoami for service accounts no longer asks to authenticate the service account token. Instead, it does it automatically. {3744} PostgreSQL plugin now also supports pgcli as an alternative to psql. Thanks to @szymon for their contribution! { shell-plugins#384} The Cachix plugin now checks for the ~/.config/cachix/cachix.dhall file and attempts to import an auth token using the specified file. Thanks to @dethancosta for their contribution! { shell-plugins#373} The Sentry CLI plugin now skips authentication when the --auth-token and --api-key are specified. Thanks to @roy9495 for their contribution! { shell-plugins#370} The Homebrew shell plugin now provides authentication for the upgrade, update, install and reinstall commands. Thanks to @cullenmcdermott for their contribution! { shell-plugins#369} The Sentry Plugin now has support for SENTRY_PROJECT & SENTRY_URL. Thanks to @JoeKarow for their contrib

Added a note to op run help text to explain access and option to use service accounts. Error messages in op item create and when provisioning actions fail are now more clear. op whoami for service accounts no longer asks to authenticate the service account token. Instead, it does it automatically. PostgreSQL plugin now also supports pgcli as an alternative to psql. The Cachix plugin now checks for the ~/.config/cachix/cachix.dhall file and attempts to import an auth token using the specified file. The Sentry CLI plugin now skips authentication when the --auth-token and --api-key are specified. The Homebrew shell plugin now provides authentication for the upgrade, update, install and reinstall commands. The Sentry Plugin now has support for SENTRY_PROJECT & SENTRY_URL. The PostgreSQL plugin now also supports the pg_dump and pg_restore CLI utilities. OpenAI now has updated docs and management URLs. When generating the plugin template, set only the last word of the credential name as the default 1Password field name, if it's longer than seven characters. The ngrok plugin now specifies the correct credential length. The ngrok plugin now uses envvars in ngrok version 3.2.1 and higher. Bring back deprecated JSON keys for op whoami output for service account for backwards-compatibility. op whoami throws the appropriate error if an invalid service account token is set. When searching for an item by title and vault where the title is 26 characters long, the item will now be returned. op vault list now only returns vaults the account has read access to.

SSH keys can now be generated with the op item create --category ssh command. The CLI can now be installed at any location and the desktop app integration will work as long as the latest version is being used. op, op signin and op account add help text is now simpler and less verbose. Secret references now support retrieving attributes of an item field, such as MFA codes and SSH private key formats, using query parameters. op item move moves an item between vaults. When retrieving items of type SSH key, the private key is displayed in OpenSSH format. Items created using the shell plugins' importers now also contain the plugin's management URL. The CLI now shows shell plugin setup instructions when no installed plugins are detected. The CLI will not prompt to authorize if there are no secret references in the environment. op whoami output for service accounts (both human readable and JSON) is now on par with the output for regular users. op whoami now tells the user if the service account is authenticated or not. It's now possible to create a favorite item with op item create. It's now possible to update an item's favorite status with op item edit. There is no longer an error returned for shell plugins initialized before version 2.19.0. Addressed a rare case where a secret would not correctly be masked by the "op run" command. Using a 26-character long item title no longer results in an error when retrieving the item. 1Password CLI no longer crashes when an invalid service account token is provided. op whoami JSON output for service account now has the keys in snake_case, matching the rest of the CLI JSON output.

Authenticate the Oh Dear CLI using Touch ID and other unlock options with 1Password Shell Plugins. Executables "oaieval" and "oaievalset" are now supported within the OpenAI shell plugin. Authenticate the Vercel CLI using Touch ID and other unlock options with 1Password Shell Plugins. op plugin clear more clearly displays credentials which are about to be cleared. AWS shell plugin now supports sourcing credentials from another profile. GitHub shell plugin skips authentication if it runs with shell completion flag __complete. Shell plugin help text now references plugin-executable instead of plugin-name for clarity. 1Password CLI will no longer return a "received unexpected response from 1Password app" for the first command that is executed when the 1Password app is locked. A typo in the op whoami help text has been fixed. AWS Shell Plugin no longer outputs aws-vault specific logs. AWS shell plugin no longer creates an .aws/config file when using the aws-vault importer.

Authenticate the Terraform CLI using Touch ID and other unlock options with 1Password Shell Plugins. Shell plugin help text now references plugin-executable instead of plugin-name for clarity. Deleting an SSH Key with the CLI now works as expected.

Users can now authenticate with the CLI using 1Password Service Accounts. Users can now create items of custom categories by providing a template. Executing op plugin run with a plugin that has not yet been configured no longer exits after the configuration steps.

Authenticate the Akamai CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate the Laravel Vapor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate the Laravel Forge CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate the Pulumi CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate the Zendesk CLI using Touch ID and other unlock options with 1Password Shell Plugins. AWS credentials stored in aws-vault can now be imported into 1Password. Authenticate the AWS CDK CLI using Touch ID and other unlock options with 1Password Shell Plugins. Assuming AWS roles and profiles is now supported with the AWS shell plugin. A deleted/restricted user that last updated an item will be displayed by name when running op item get. An error is thrown if a document is created/updated from the CLI through standard input but no content is provided. A description was added about configuring the CLI to use Connect / Service Account if no account is configured, in the help text of op signin. Users attempting to create new DOCUMENT items with Connect will now receive a friendlier error message. The --config and --session flags are now fully supported for op plugin and op whoami commands respectively. Typos in the help-text of document create and document edit concerning the misspelling of the --file-name flag have been corrected.

Generating SSH Keys with the CLI is now possible using the op ssh generate command. When no accounts are configured, the CLI also prints information about using it with Connect and Service Accounts.

The help text for op events-api now specifies that Events Reporting is only available for business accounts. When initializing the SourceGraph shell plugin an appropriate management url will be displayed. Treasure Data shell plugin no longer returns an error during the init step, as its executable now correctly references its API Key credential. When initializing the Gitea plugin, it now also checks the default configuration directory on MacOS to find a credential to import.

The default features list when creating new Events API tokens will now include Audit Events, in addition to Sign-In Attempts and Item Usages. Authenticate Gitea CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate Treasure Data CLI using Touch ID and other unlock options with 1Password Shell Plugins. ngrok is now aware of the --config flag and of any existing config files in the default location on the user's filesystem. The HomeBrew shell plugin now skips authentication for the bump sub-command as well. The --output flag of op document get is now doubled by --out-file, for consistency with other commands. To help with determining the 1Password item to use for a shell plugin, additional item metadata is now shown in the selection prompt. Shell plugins credential fields can now be identified by more than one name. document get now outputs the absolute file path on a successful file write and prompts to overwrite if the file already exists. Connect tokens with no vault access permissions can no longer be created using the 1Password CLI. Item count is now present in the JSON output of empty vaults' details. UpdatedAt and ItemCount attributes are now consistently up to date in the cached vaults. Item version is now up to date in the output of op item create and op item edit. Connect tokens can now be created when passing the --vault flag with the op connect token create. Items are now successfully returned by op item get even if they were last edited by a deleted or restricted user. The CLI will no longer silently succeed if the piped input is not handled properly. Item lookup by name will no longer fail when resource name is alphanumeric of length 26.

document get now outputs the absolute file path on a successful file write and prompts to overwrite if the file already exists. The stability of Service Accounts has been improved. Connect tokens with no vault access permissions can no longer be created using the 1Password CLI.

op item create and op item edit can now be used to perform CRUD operations on items' autofill URLs using the --autofill-urls flag. Items can now be consistently looked up by name.

Authenticate ngrok using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate Vultr CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate Snowflake CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate Fastly CLI using Touch ID and other unlock options with 1Password Shell Plugins. Authenticate Sourcegraph CLI using Touch ID and other unlock options with 1Password Shell Plugins. The AWS Shell Plugin now checks if the AWS_SHARED_CREDENTIALS_FILE environment variable is set and attempts to import credentials using the specified file. Error messages for shell plugin local builds now include link to troubleshooting documentation. Help text formatting is now more consistent across commands.

Authenticate the Cargo CLI using Touch ID and other unlock options with 1Password Shell Plugins. { shell-plugins#139} Authenticate the Argo CD CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @ssttehrani for their contribution! { shell-plugins

This release introduces three new Shell Plugins! Authenticate the ReadMe CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @kanadgupta for their contribution! { shell-plugins#106} Authenticate the Hcloud CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @shyim