# 1Password CLI changelog > 1Password CLI release notes. - Vendor: AgileBits - Category: Security & Privacy - Official site: https://developer.1password.com/docs/cli - Tracked by: What's New (https://whatsnew.fyi/product/1password-cli) - Harvested from: AI extracted - Entries below: 25 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### 2.40.0 - Date: 2026-10-01 - Version: 2.40.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.40.0 - **added** — Trigger a Google Workspace user provisioning sync with `op provisioning google sync` - **changed** — The full vault list is no longer re-fetched on every command in accounts with 1Password Environments or with no readable vaults - **security** — Updated Go to 1.26.8 and the golang.org/x/crypto, golang.org/x/net, and golang.org/x/text modules to fix known security vulnerabilities - **changed** — Clarified in `op run` help text that secret masking on stdout and stderr is best effort and does not guarantee concealment You can now trigger a Google Workspace user provisioning sync with `op provisioning google sync`. {PROV-1718} In accounts with 1Password Environments, or with no readable vaults, the full vault list is no longer re-fetched on every command. {DI-817} Updated Go to 1.26.8 and the "golang.org/x/crypto", "golang.org/x/net", and "golang.org/x/text" modules to fix known security vulnerabilities. {DEVECO-364} Clarified in `op run` help text that secret masking on stdout and stderr is best effort and does not guarantee concealment. {DI-1088} ### 2.41.0-beta.01 - Date: 2026-10-01 - Version: 2.41.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.41.0-beta.01 - **security** — Updated Go to 1.26.8 and the golang.org/x/crypto, golang.org/x/net, and golang.org/x/text modules to fix known security vulnerabilities Updated Go to 1.26.8 and the "golang.org/x/crypto", "golang.org/x/net", and "golang.org/x/text" modules to fix known security vulnerabilities. {DEVECO-364} ### 2.40.0-beta.02 - Date: 2026-09-23 - Version: 2.40.0-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.40.0-beta.02 - **fixed** — Accounts with 1Password Environments no longer re-fetch the full vault list from the server on every command - **fixed** — Accounts with no readable vaults no longer re-fetch the full vault list from the server on every command - **fixed** — On macOS, running op repeatedly from a coding agent, script, or other program no longer prompts for authorization on every command; successive invocations now share a single desktop app authorization - **changed** — Clarified in op run help and the CLI reference that secret masking on stdout and stderr is best effort and does not guarantee concealment Accounts with 1Password Environments no longer re-fetch the full vault list from the server on every command. {DI-817} Accounts with no readable vaults no longer re-fetch the full vault list from the server on every command. {DI-817} On macOS, running `op` repeatedly from a coding agent, script, or other program no longer prompts for authorization on every command; successive invocations now share a single desktop app authorization. {DI-1135} Clarified in `op run` help and the CLI reference that secret masking on stdout and stderr is best effort and does not guarantee concealment. {DI-1088} ### 2.39.0 - Date: 2026-08-14 - Version: 2.39.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.39.0 - **added** — Debug output now includes per-request timing - **changed** — Debug output now reports more information when a vault cannot be read - **changed** — Reporting item usage for cached items now sends usage data in the background instead of delaying secret reading - **fixed** — A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault is not in the account - **security** — Connection error messages no longer include the full request URL, which could contain the account's email address Debug output now includes per-request timing. {ECO-971} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817} ### 2.39.1-beta.01 - Date: 2026-08-13 - Version: 2.39.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.39.1-beta.01 - **added** — Debug output now includes per-request timing - **changed** — 1Password Environments commands are now significantly faster on Apple silicon Macs - **added** — Debug output now reports more information when a vault cannot be read - **changed** — Reporting item usage for cached items no longer delays reading secrets; usage data is now sent in the background - **fixed** — A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault is not in the account - **security** — Connection error messages no longer include the full request URL, which could contain the account's email address Debug output now includes per-request timing. {ECO-971} 1Password Environments commands are now significantly faster on Apple silicon Macs. {DG-1398} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817} ### 2.39.0-beta.02 - Date: 2026-08-11 - Version: 2.39.0-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.39.0-beta.02 - **added** — Debug output now includes per-request timing - **changed** — 1Password Environments commands are now significantly faster on Apple silicon Macs - **changed** — Debug output now reports more information when a vault cannot be read - **changed** — Reporting item usage for cached items no longer delays reading secrets, with usage data now sent in the background - **fixed** — A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account - **security** — Connection error messages no longer include the full request URL, which could contain the account's email address Debug output now includes per-request timing. {ECO-971} 1Password Environments commands are now significantly faster on Apple silicon Macs. {DG-1398} Debug output now reports more information when a vault cannot be read. {ECO-817} Reporting item usage for cached items no longer delays reading secrets: usage data is now sent in the background. {ECO-970} A vault lookup that fails on the server is now reported as an error instead of incorrectly saying the vault isn't in the account. {ECO-1017} Connection error messages no longer include the full request URL, which could contain the account's email address. {ECO-817} ### 2.38.2-beta.01 - Date: 2026-07-31 - Version: 2.38.2-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.2-beta.01 - **fixed** — op run help text for the --environment flag is now correct - **changed** — op environment read and op run --environment help text now includes note about start time on Apple silicon Macs `op run` help text for the `--environment` flag is now correct. {0} `op environment read` and `op run --environment` help text now includes note about start time on Apple silicon Macs. {TW-1603} ### 2.38.1-beta.02 - Date: 2026-07-31 - Version: 2.38.1-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1-beta.02 - **fixed** — op run help text for the --environment flag is now correct - **changed** — op environment read and op run --environment help text now includes note about start time on Apple silicon Macs `op run` help text for the `--environment` flag is now correct. {0} `op environment read` and `op run --environment` help text now includes note about start time on Apple silicon Macs. {TW-1603} ### 2.38.1 - Date: 2026-07-30 - Version: 2.38.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1 - **changed** — Reading an item with op read or op item get now uses one fewer network round-trip per read - **changed** — Reading an item or vault by name with op read, op item get, op item list, and op vault get now uses one fewer network round-trip when resolving a name Reading an item with `op read` or `op item get` is now faster, using one fewer network round-trip per read. {ECO-815} Reading an item or vault by name is now faster: `op read`, `op item get`, `op item list`, and `op vault get` use one fewer network round-trip when resolving a name. {ECO-816} ### 2.38.1-beta.01 - Date: 2026-07-24 - Version: 2.38.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1-beta.01 - **changed** — Reading an item with op read or op item get now uses one fewer network round-trip per read - **changed** — Reading an item or vault by name with op read, op item get, op item list, and op vault get now uses one fewer network round-trip when resolving a name Reading an item with `op read` or `op item get` is now faster, using one fewer network round-trip per read. {ECO-815} Reading an item or vault by name is now faster: `op read`, `op item get`, `op item list`, and `op vault get` use one fewer network round-trip when resolving a name. {ECO-816} ### 2.38.0-beta.01 - Date: 2026-07-14 - Version: 2.38.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.0-beta.01 - **added** — Add `op provisioning google sync` command to trigger a Google Workspace user provisioning sync You can now trigger a Google Workspace user provisioning sync with `op provisioning google sync`. {PROV-1718} ### 2.35.0 - Date: 2026-07-10 - Version: 2.35.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.35.0 - **added** — Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Kiro CLI with API keys using 1Password Shell Plugins - **added** — Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Descope CLI as a Descope account admin using 1Password Shell Plugins - **added** — Authenticate the Expo and EAS CLIs using 1Password Shell Plugins - **added** — Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins - **added** — Authenticate the OpenTofu CLI with any supported provider using 1Password Shell Plugins - **added** — Authenticate the UpCloud CLI using 1Password Shell Plugins - **added** — Authenticate the Exercism CLI using 1Password Shell Plugins - **added** — Authenticate the CrateDB CLI using 1Password Shell Plugins - **changed** — The GitHub shell plugin now provisions GH_ENTERPRISE_TOKEN for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured - **changed** — The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning - **added** — Tab completion is now supported when using shell plugins with bash and zsh shells Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#613} Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#612} Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#611} Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#605} Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#604} Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#603} Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! { shell-plugins#589} Authenticate the Descope CLI as a Descope account admin using 1Password Shell Plugins. Thanks to @scottisloud for their contribution! { shell-plugins#570} Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! { shell-plugins#563} Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins. Thanks to @fproulx-boostsecurity for their contribution! { shell-plugins#560} Authenticate the OpenTofu CLI with any supported provider using 1Password Shell Plugins. Thanks to @gargakshit for their contribution! { shell-plugins#553} Authenticate the UpCloud CLI using 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#538} Authenticate the Exercism CLI using 1Password Shell Plugins. Thanks to @dethancosta for their contribution! { shell-plugins#404} Authenticate the CrateDB CLI using 1Password Shell Plugins. Thanks to @accraw for their contribution! { shell-plugins#394} The GitHub shell plugin now provisions `GH_ENTERPRISE_TOKEN` for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured. Thanks to @scottisloud for their contribution! { shell-plugins#610} The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning. Thanks to @arunsathiya for their contribution! { shell-plugins#276} Tab completion is now supported when using shell plugins with bash and zsh shells. { shell-plugins#433} ### 2.37.0-beta.01 - Date: 2026-07-08 - Version: 2.37.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.37.0-beta.01 - **added** — Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Kiro CLI with API keys using 1Password Shell Plugins - **added** — Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate into the Descope CLI as a Descope account admin - **added** — Authenticate the Expo and EAS CLIs using 1Password Shell Plugins - **added** — Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins - **added** — Authenticate the OpenTofu CLI with any supported provider using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the UpCloud CLI using 1Password Shell Plugins - **added** — Authenticate the Exercism CLI using 1Password Shell Plugins - **added** — Authenticate the CrateDB CLI using 1Password Shell Plugins - **changed** — The GitHub shell plugin now provisions GH_ENTERPRISE_TOKEN for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured - **changed** — The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning - **added** — Tab completion is now supported when using shell plugins with bash and zsh shells - **fixed** — op no longer hangs when running a shell plugin from outside $HOME - **changed** — Terraform workspace subcommands now trigger authentication via 1Password Shell Plugins - **changed** — The Oh Dear shell plugin now checks for the ~/.ohdear/config.json file and attempts to import credentials - **fixed** — Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#613} Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#612} Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#611} Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#605} Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#604} Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! { shell-plugins#603} Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! { shell-plugins#589} Authenticate into the Descope CLI as a Descope account admin. Thanks to @scottisloud for their contribution! { shell-plugins#570} Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! { shell-plugins#563} Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins. Thanks to @fproulx-boostsecurity for their contribution! { shell-plugins#560} Authenticate the OpenTofu CLI with any supported provider using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @gargakshit for their contribution! { shell-plugins#553} Authenticate the UpCloud CLI using 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#538} Authenticate the Exercism CLI using 1Password Shell Plugins. Thanks to @dethancosta for their contribution! { shell-plugins#404} Authenticate the CrateDB CLI using 1Password Shell Plugins. Thanks to @accraw for their contribution! { shell-plugins#394} The GitHub shell plugin now provisions `GH_ENTERPRISE_TOKEN` for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured. Thanks to @scottisloud for their contribution! { shell-plugins#610} The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning. Thanks to @arunsathiya for their contribution! { shell-plugins#276} Tab completion is now supported when using shell plugins with bash and zsh shells. { shell-plugins#433} `op` no longer hangs when running a shell plugin from outside $HOME. { shell-plugins#416} Terraform 'workspace' subcommands now trigger authentication via 1Password Shell Plugins. Thanks to @moraisph for their contribution! { shell-plugins#582} The Oh Dear shell plugin now checks for the `~/.ohdear/config.json` file and attempts to import credentials. Thanks to @owenvoke for their contribution! { shell-plugins#577} The deprecated `zsh.initExtra` option has been replaced with `zsh.initContent` in the nix shell plugin. Thanks to @jbhannah for their contribution! { shell-plugins#550} The awslogsCLI function has been renamed to capitalize CLI for consistency. { shell-plugins#518} Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled. {TRUST-862} ### 2.34.1 - Date: 2026-06-10 - Version: 2.34.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.1 - **changed** — The 'op vault edit' help text now better describes how the Travel Mode flag works The 'op vault edit' help text now better describes how the Travel Mode flag works. {TW-1197} ### 2.36.0-beta.03 - Date: 2026-06-09 - Version: 2.36.0-beta.03 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.36.0-beta.03 - **added** — Use op user create with Automated Provisioning configured - **added** — Use op user suspend with Automated Provisioning configured - **added** — Use op user reactivate with Automated Provisioning configured - **added** — Use op provisioning configure to set up Automated Provisioning - **changed** — The op vault edit help text now better describes how the Travel Mode flag works You can now use `op user create` with Automated Provisioning configured. {PROV-1532} You can now use `op user suspend` with Automated Provisioning configured. {PROV-1544} You can now use `op user reactivate` with Automated Provisioning configured. {PROV-1545} You can now use `op provisioning configure` to set up Automated Provisioning. {PROV-1532} The 'op vault edit' help text now better describes how the Travel Mode flag works. {TW-1197} ### 2.34.0 - Date: 2026-04-16 - Version: 2.34.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0 - **added** — Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — The AWS shell plugin now supports the awslogs CLI - **added** — The AWS shell plugin now supports eksctl, the Amazon EKS CLI - **added** — The AWS shell plugin now supports the AWS SAM CLI - **added** — The OpenAI shell plugin now supports the Codex CLI - **added** — The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the --profile flag - **fixed** — The ngrok shell plugin no longer performs a version check on every op plugin command when it is not initialized - **fixed** — op run now properly terminates the subprocess it was called with when cancelled Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! { shell-plugins#519} Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#515} The AWS shell plugin now supports the `awslogs` CLI. Thanks to @jonasws for their contribution! { shell-plugins#504} The AWS shell plugin now supports `eksctl`, the Amazon EKS CLI. Thanks to @skpaz for their contribution! { shell-plugins#500} The AWS shell plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! { shell-plugins#473} The OpenAI shell plugin now supports the Codex CLI. Thanks to @shyim for their contribution! { shell-plugins#517} The ngrok shell plugin no longer performs a version check on every `op plugin` command when it is not initialized. Thanks to @MOmarMiraj for their contribution! { shell-plugins#474} The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the `--profile` flag. Thanks to @waiteb3 for their contribution! { shell-plugins#463} `op run` now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C). {284} ### 2.35.0-beta.01 - Date: 2026-04-15 - Version: 2.35.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.35.0-beta.01 - **added** — Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — The AWS plugin now supports the awslogs CLI - **added** — The AWS plugin now supports eksctl, the Amazon EKS CLI - **added** — The AWS plugin now supports the AWS SAM CLI - **added** — The OpenAI Shell Plugin now supports the Codex CLI - **changed** — The Terraform plugin now triggers authentication for all terraform state subcommands, not just terraform state list - **fixed** — The ngrok plugin no longer performs a version check on every op plugin command when it is not initialized - **added** — The AWS CDK plugin now supports AWS Profiles that assume a role when specified by the --profile flag - **fixed** — op run now properly terminates the subprocess it was called with when cancelled Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! { shell-plugins#519} Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#515} The AWS plugin now supports the `awslogs` CLI. Thanks to @jonasws for their contribution! { shell-plugins#504} The AWS plugin now supports `eksctl`, the Amazon EKS CLI. Thanks to @skpaz for their contribution! { shell-plugins#500} The AWS plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! { shell-plugins#473} The OpenAI Shell Plugin now supports the Codex CLI. Thanks to @shyim for their contribution! { shell-plugins#517} The Terraform plugin now triggers authentication for all `terraform state` subcommands, not just `terraform state list`. Thanks to @frans-otogone for their contribution! { shell-plugins#476} The ngrok plugin no longer performs a version check on every `op plugin` command when it is not initialized. Thanks to @MOmarMiraj for their contribution! { shell-plugins#474} The AWS CDK plugin now supports AWS Profiles that assume a role when specified by the `--profile` flag. Thanks to @waiteb3 for their contribution! { shell-plugins#463} `op run` now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C). {284} ### 2.34.1-beta.01 - Date: 2026-03-24 - Version: 2.34.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.1-beta.01 ### 2.33.1 - Date: 2026-03-24 - Version: 2.33.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.1 - **changed** — op item edit help text now includes a warning that JSON item templates don't support passkeys - **added** — 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app `op item edit` help text now includes a warning that JSON item templates don't support passkeys. {INTF-1083} 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app. {TRUST-628} ### 2.34.0-beta.04 - Date: 2026-03-23 - Version: 2.34.0-beta.04 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0-beta.04 - **fixed** — 1Password CLI now correctly updates an account's Account Trust Log when the feature is enabled 1Password CLI now correctly updates an account's Account Trust Log when the feature is enabled. {TRUST-628} ### 2.34.0-beta.03 - Date: 2026-03-16 - Version: 2.34.0-beta.03 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0-beta.03 - **changed** — The op environment help text now includes information about how to get the ID for a 1Password Environment op environment help text now includes information about how to get the ID for a 1Password Environment. {TW-551} ### 2.33.0 - Date: 2026-03-16 - Version: 2.33.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.0 - **added** — 1Password CLI now supports updating an account's Account Trust Log when the feature is enabled - **changed** — The --tags flag on op item edit now replaces existing tags instead of appending them - **changed** — An empty --tags value now properly clears all tags - **fixed** — Empty tag strings in templates are now filtered out during op item create and op item edit - **changed** — Default values for Date and MonthYear fields are now unset instead of zero - **security** — Upgrade Go to 1.24.12 to resolve vulnerabilities - **security** — Upgrade Go to 1.25.7 to resolve vulnerabilities 1Password CLI now supports updating an account's Account Trust Log when the feature is enabled. The `--tags` flag on `op item edit` now replaces existing tags instead of appending them. An empty `--tags` value now properly clears all tags. Empty tag strings in templates are now filtered out during `op item create` and `op item edit`. Default values for Date and MonthYear fields are now unset instead of zero. {INTF-189} Upgrade Go to 1.24.12 to resolve vulnerabilities. {0} Upgrade Go to 1.25.7 to resolve vulnerabilities. {0} ### 2.33.0-beta.02 - Date: 2026-02-09 - Version: 2.33.0-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.0-beta.02 - **added** — op environment read allows reading environment variables from 1Password Environments - **added** — op run now supports loading variables from 1Password Environments by passing the --environment flag op environment read allows reading environment variables from 1Password Environments. {DG-538} op run now supports loading variables from 1Password Environments by passing the `--environment` flag. {DG-31} ### 2.32.1 - Date: 2026-02-04 - Version: 2.32.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.32.1 - **changed** — The `op item delete` help text now notes that deleted items remain in Recently Deleted for 30 days - **changed** — Tags are now deduplicated when using `op item edit` - **changed** — The `op run` help text now notes shell expansion order of operations - **fixed** — The `op item create` help text example now works without error - **fixed** — 1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI The `op item delete` help text now notes that deleted items remain in Recently Deleted for 30 days. {4377} Tags are now deduplicated when using `op item edit`. {4088} 'op run' help text now notes shell expansion order of operations. {2971} op item create help text example now works without error. {4246} 1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI. {DG-682} ### 2.32.0 - Date: 2025-08-19 - Version: 2.32.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.32.0 - **added** — Use 1Password CLI to recover accounts for family or team members You can now use 1Password CLI to recover accounts for family or team members. {4161}