# 1Password CLI changelog > 1Password CLI release notes. - Vendor: AgileBits - Category: Developer Tools - Official site: https://developer.1password.com/docs/cli - Tracked by: What's New (https://whatsnew.fyi/product/1password-cli) - Harvested from: AI extracted - Entries below: 25 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. ## Releases ### 2.38.1-beta.02 - Date: 2026-07-31 - Version: 2.38.1-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1-beta.02 - **fixed** — op run help text for the --environment flag is now correct - **changed** — op environment read and op run --environment help text now includes note about start time on Apple silicon Macs `op run` help text for the `--environment` flag is now correct. `op environment read` and `op run --environment` help text now includes note about start time on Apple silicon Macs. ### 2.38.2-beta.01 - Date: 2026-07-31 - Version: 2.38.2-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.2-beta.01 - **fixed** — op run help text for the --environment flag is now correct - **changed** — op environment read and op run --environment help text now includes note about start time on Apple silicon Macs `op run` help text for the `--environment` flag is now correct. `op environment read` and `op run --environment` help text now includes note about start time on Apple silicon Macs. ### 2.38.1 - Date: 2026-07-30 - Version: 2.38.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1 - **changed** — Reading an item with op read or op item get now uses one fewer network round-trip per read - **changed** — Reading an item or vault by name with op read, op item get, op item list, and op vault get now uses one fewer network round-trip when resolving a name Reading an item with `op read` or `op item get` is now faster, using one fewer network round-trip per read. Reading an item or vault by name is now faster: `op read`, `op item get`, `op item list`, and `op vault get` use one fewer network round-trip when resolving a name. ### 2.38.1-beta.01 - Date: 2026-07-24 - Version: 2.38.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.1-beta.01 - **changed** — Reading an item with op read or op item get now uses one fewer network round-trip per read - **changed** — Reading an item or vault by name with op read, op item get, op item list, and op vault get now uses one fewer network round-trip when resolving a name Reading an item with `op read` or `op item get` is now faster, using one fewer network round-trip per read. Reading an item or vault by name is now faster: `op read`, `op item get`, `op item list`, and `op vault get` use one fewer network round-trip when resolving a name. ### 2.38.0-beta.01 - Date: 2026-07-14 - Version: 2.38.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.38.0-beta.01 - **added** — Trigger a Google Workspace user provisioning sync with op provisioning google sync command You can now trigger a Google Workspace user provisioning sync with `op provisioning google sync`. ### 2.35.0 - Date: 2026-07-10 - Version: 2.35.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.35.0 - **added** — Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Kiro CLI with API keys using 1Password Shell Plugins - **added** — Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Descope CLI as a Descope account admin using 1Password Shell Plugins - **added** — Authenticate the Expo and EAS CLIs using 1Password Shell Plugins - **added** — Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins - **added** — Authenticate the OpenTofu CLI with any supported provider using 1Password Shell Plugins - **added** — Authenticate the UpCloud CLI using 1Password Shell Plugins - **added** — Authenticate the Exercism CLI using 1Password Shell Plugins - **added** — Authenticate the CrateDB CLI using 1Password Shell Plugins - **changed** — The GitHub shell plugin now provisions GH_ENTERPRISE_TOKEN for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured - **changed** — The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning - **added** — Tab completion is now supported when using shell plugins with bash and zsh shells - **fixed** — op no longer hangs when running a shell plugin from outside $HOME - **changed** — Terraform workspace subcommands now trigger authentication via 1Password Shell Plugins - **changed** — The Oh Dear shell plugin now checks for the ~/.ohdear/config.json file and attempts to import credentials - **changed** — The deprecated zsh.initExtra option has been replaced with zsh.initContent in the nix shell plugin - **changed** — The awslogsCLI function has been renamed to capitalize CLI for consistency - **fixed** — Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! Authenticate the Descope CLI as a Descope account admin using 1Password Shell Plugins. Thanks to @scottisloud for their contribution! Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins. Thanks to @fproulx-boostsecurity for their contribution! Authenticate the OpenTofu CLI with any supported provider using 1Password Shell Plugins. Thanks to @gargakshit for their contribution! Authenticate the UpCloud CLI using 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! Authenticate the Exercism CLI using 1Password Shell Plugins. Thanks to @dethancosta for their contribution! Authenticate the CrateDB CLI using 1Password Shell Plugins. Thanks to @accraw for their contribution! The GitHub shell plugin now provisions `GH_ENTERPRISE_TOKEN` for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured. Thanks to @scottisloud for their contribution! The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning. Thanks to @arunsathiya for their contribution! Tab completion is now supported when using shell plugins with bash and zsh shells. `op` no longer hangs when running a shell plugin from outside $HOME. Terraform 'workspace' subcommands now trigger authentication via 1Password Shell Plugins. Thanks to @moraisph for their contribution! The Oh Dear shell plugin now checks for the `~/.ohdear/config.json` file and attempts to import credentials. Thanks to @owenvoke for their contribution! The deprecated `zsh.initExtra` option has been replaced with `zsh.initContent` in the nix shell plugin. Thanks to @jbhannah for their contribution! The awslogsCLI function has been renamed to capitalize CLI for consistency. Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled. ### 2.37.0-beta.01 - Date: 2026-07-08 - Version: 2.37.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.37.0-beta.01 - **added** — Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Kiro CLI with API keys using 1Password Shell Plugins - **added** — Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate into the Descope CLI as a Descope account admin - **added** — Authenticate the Expo and EAS CLIs using 1Password Shell Plugins - **added** — Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins - **added** — Authenticate the OpenTofu CLI with any supported provider using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the UpCloud CLI using 1Password Shell Plugins - **added** — Authenticate the Exercism CLI using 1Password Shell Plugins - **added** — Authenticate the CrateDB CLI using 1Password Shell Plugins - **changed** — The GitHub shell plugin now provisions GH_ENTERPRISE_TOKEN for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured - **changed** — The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning - **added** — Tab completion is now supported when using shell plugins with bash and zsh shells - **fixed** — op no longer hangs when running a shell plugin from outside $HOME - **changed** — Terraform workspace subcommands now trigger authentication via 1Password Shell Plugins - **changed** — The Oh Dear shell plugin now checks for the ~/.ohdear/config.json file and attempts to import credentials - **changed** — The deprecated zsh.initExtra option has been replaced with zsh.initContent in the nix shell plugin - **changed** — The awslogsCLI function has been renamed to capitalize CLI for consistency - **fixed** — Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled Authenticate the OpenCode CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Cursor CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Cline CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the Kiro CLI with API keys using 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate JetBrains Junie CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate the GitHub Copilot CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @eddumelendez for their contribution! Authenticate twine, flit, and hatch to PyPI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @cpierce for their contribution! Authenticate into the Descope CLI as a Descope account admin. Thanks to @scottisloud for their contribution! Authenticate the Expo and EAS CLIs using 1Password Shell Plugins. Thanks to @CodeByZach for their contribution! Authenticate the Google Gemini AI API CLI using 1Password Shell Plugins. Thanks to @fproulx-boostsecurity for their contribution! Authenticate the OpenTofu CLI with any supported provider using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @gargakshit for their contribution! Authenticate the UpCloud CLI using 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! Authenticate the Exercism CLI using 1Password Shell Plugins. Thanks to @dethancosta for their contribution! Authenticate the CrateDB CLI using 1Password Shell Plugins. Thanks to @accraw for their contribution! The GitHub shell plugin now provisions `GH_ENTERPRISE_TOKEN` for GitHub Enterprise Server hosts and supports authenticating to both github.com and Enterprise when separate credentials are configured. Thanks to @scottisloud for their contribution! The Redis CLI shell plugin now supports authenticating Redis CLI with environment variable-based provisioning. Thanks to @arunsathiya for their contribution! Tab completion is now supported when using shell plugins with bash and zsh shells. `op` no longer hangs when running a shell plugin from outside $HOME. Terraform 'workspace' subcommands now trigger authentication via 1Password Shell Plugins. Thanks to @moraisph for their contribution! The Oh Dear shell plugin now checks for the `~/.ohdear/config.json` file and attempts to import credentials. Thanks to @owenvoke for their contribution! The deprecated `zsh.initExtra` option has been replaced with `zsh.initContent` in the nix shell plugin. Thanks to @jbhannah for their contribution! The awslogsCLI function has been renamed to capitalize CLI for consistency. Deleting an invited or not-yet-activated user no longer fails on accounts with the Account Trust Log enabled. ### 2.34.1 - Date: 2026-06-10 - Version: 2.34.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.1 - **changed** — The 'op vault edit' help text now better describes how the Travel Mode flag works The 'op vault edit' help text now better describes how the Travel Mode flag works. ### 2.36.0-beta.03 - Date: 2026-06-09 - Version: 2.36.0-beta.03 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.36.0-beta.03 - **added** — Use `op user create` with Automated Provisioning configured - **added** — Use `op user suspend` with Automated Provisioning configured - **added** — Use `op user reactivate` with Automated Provisioning configured - **added** — Use `op provisioning configure` to set up Automated Provisioning You can now use `op user create` with Automated Provisioning configured. You can now use `op user suspend` with Automated Provisioning configured. You can now use `op user reactivate` with Automated Provisioning configured. You can now use `op provisioning configure` to set up Automated Provisioning. ### 2.34.0 - Date: 2026-04-16 - Version: 2.34.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0 - **added** — Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — The AWS shell plugin now supports the awslogs CLI - **added** — The AWS shell plugin now supports eksctl, the Amazon EKS CLI - **added** — The AWS shell plugin now supports the AWS SAM CLI - **added** — The OpenAI shell plugin now supports the Codex CLI - **added** — The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the --profile flag - **fixed** — The ngrok shell plugin no longer performs a version check on every op plugin command when it is not initialized - **fixed** — op run now properly terminates the subprocess it was called with when cancelled Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! { shell-plugins#519} Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#515} The AWS shell plugin now supports the `awslogs` CLI. Thanks to @jonasws for their contribution! { shell-plugins#504} The AWS shell plugin now supports `eksctl`, the Amazon EKS CLI. Thanks to @skpaz for their contribution! { shell-plugins#500} The AWS shell plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! { shell-plugins#473} The OpenAI shell plugin now supports the Codex CLI. Thanks to @shyim for their contribution! { shell-plugins#517} The ngrok shell plugin no longer performs a version check on every `op plugin` command when it is not initialized. Thanks to @MOmarMiraj for their contribution! { shell-plugins#474} The AWS CDK shell plugin now supports AWS Profiles that assume a role when specified by the `--profile` flag. Thanks to @waiteb3 for their contribution! { shell-plugins#463} `op run` now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C). {284} ### 2.35.0-beta.01 - Date: 2026-04-15 - Version: 2.35.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.35.0-beta.01 - **added** — Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins - **added** — The AWS plugin now supports the awslogs CLI - **added** — The AWS plugin now supports eksctl, the Amazon EKS CLI - **added** — The AWS plugin now supports the AWS SAM CLI - **added** — The OpenAI Shell Plugin now supports the Codex CLI - **changed** — The Terraform plugin now triggers authentication for all terraform state subcommands, not just terraform state list - **fixed** — The ngrok plugin no longer performs a version check on every op plugin command when it is not initialized - **added** — The AWS CDK plugin now supports AWS Profiles that assume a role when specified by the --profile flag - **fixed** — op run now properly terminates the subprocess it was called with when cancelled Authenticate the Claude Code CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @malob for their contribution! { shell-plugins#519} Authenticate the Scaleway CLI using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to @jksolbakken for their contribution! { shell-plugins#515} The AWS plugin now supports the `awslogs` CLI. Thanks to @jonasws for their contribution! { shell-plugins#504} The AWS plugin now supports `eksctl`, the Amazon EKS CLI. Thanks to @skpaz for their contribution! { shell-plugins#500} The AWS plugin now supports the AWS SAM CLI. Thanks to @simonmcc for their contribution! { shell-plugins#473} The OpenAI Shell Plugin now supports the Codex CLI. Thanks to @shyim for their contribution! { shell-plugins#517} The Terraform plugin now triggers authentication for all `terraform state` subcommands, not just `terraform state list`. Thanks to @frans-otogone for their contribution! { shell-plugins#476} The ngrok plugin no longer performs a version check on every `op plugin` command when it is not initialized. Thanks to @MOmarMiraj for their contribution! { shell-plugins#474} The AWS CDK plugin now supports AWS Profiles that assume a role when specified by the `--profile` flag. Thanks to @waiteb3 for their contribution! { shell-plugins#463} `op run` now properly terminates the subprocess it was called with when cancelled (for example, with Ctrl+C). {284} ### 2.34.1-beta.01 - Date: 2026-03-24 - Version: 2.34.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.1-beta.01 - **added** — 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app. {TRUST-628} ### 2.33.1 - Date: 2026-03-24 - Version: 2.33.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.1 - **changed** — op item edit help text now includes a warning that JSON item templates don't support passkeys - **added** — 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app `op item edit` help text now includes a warning that JSON item templates don't support passkeys. {INTF-1083} 1Password CLI commands now support the Account Trust Log when the user authenticates with the 1Password desktop app. {TRUST-628} ### 2.34.0-beta.04 - Date: 2026-03-23 - Version: 2.34.0-beta.04 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0-beta.04 - **fixed** — Account Trust Log is now correctly updated when the feature is enabled 1Password CLI now correctly updates an account's Account Trust Log when the feature is enabled. {TRUST-628} ### 2.34.0-beta.03 - Date: 2026-03-16 - Version: 2.34.0-beta.03 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.34.0-beta.03 - **changed** — op environment help text now includes information about how to get the ID for a 1Password Environment `op environment` help text now includes information about how to get the ID for a 1Password Environment. {TW-551} ### 2.33.0 - Date: 2026-03-16 - Version: 2.33.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.0 - **added** — 1Password CLI now supports updating an account's Account Trust Log when the feature is enabled - **changed** — The --tags flag on op item edit now replaces existing tags instead of appending them - **changed** — An empty --tags value now properly clears all tags - **fixed** — Empty tag strings in templates are now filtered out during op item create and op item edit - **changed** — Default values for Date and MonthYear fields are now unset instead of zero - **security** — Upgrade Go to 1.24.12 to resolve vulnerabilities - **security** — Upgrade Go to 1.25.7 to resolve vulnerabilities 1Password CLI now supports updating an account's Account Trust Log when the feature is enabled. The `--tags` flag on `op item edit` now replaces existing tags instead of appending them. An empty `--tags` value now properly clears all tags. Empty tag strings in templates are now filtered out during `op item create` and `op item edit`. Default values for Date and MonthYear fields are now unset instead of zero. {INTF-189} Upgrade Go to 1.24.12 to resolve vulnerabilities. {0} Upgrade Go to 1.25.7 to resolve vulnerabilities. {0} ### 2.33.0-beta.02 - Date: 2026-02-09 - Version: 2.33.0-beta.02 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.33.0-beta.02 - **added** — op environment read command allows reading environment variables from 1Password Environments - **added** — op run command now supports loading variables from 1Password Environments by passing the --environment flag `op environment read` allows reading environment variables from 1Password Environments. {DG-538} `op run` now supports loading variables from 1Password Environments by passing the `--environment` flag. {DG-31} ### 2.32.1 - Date: 2026-02-04 - Version: 2.32.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.32.1 - **changed** — The op item delete help text now notes that deleted items remain in Recently Deleted for 30 days - **fixed** — Tags are now deduplicated when using op item edit - **changed** — The op run help text now notes shell expansion order of operations - **fixed** — The op item create help text example now works without error - **fixed** — 1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI The `op item delete` help text now notes that deleted items remain in Recently Deleted for 30 days. {4377} Tags are now deduplicated when using `op item edit`. {4088} 'op run' help text now notes shell expansion order of operations. {2971} `op item create` help text example now works without error. {4246} 1Password CLI now correctly exits with code 1 instead of 0 when encountering server error codes that are not recognized by the CLI. {DG-682} ### 2.32.0 - Date: 2025-08-19 - Version: 2.32.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.32.0 You can now use 1Password CLI to recover accounts for family or team members. {4161} ### 2.31.1 - Date: 2025-05-28 - Version: 2.31.1 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.31.1 The 1Password app integration with 1Password CLI now works again on Windows. {4325} A typo in the error message for 'op user confirm' has been fixed. {4329} ### 2.31.1-beta.01 - Date: 2025-05-21 - Version: 2.31.1-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.31.1-beta.01 This release fixes the 1Password CLI integration with the desktop application on Windows operating systems. To use the desktop app integration, you must be on 1Password for Windows nightly or beta (8.10.78+). ### 2.31.0 - Date: 2025-05-07 - Version: 2.31.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.31.0 1Password CLI no longer causes direnv to halt when the two are used together. {4250} Following the deprecation of CLI 1, the `1password/op:latest` DockerHub tag will now always point to the latest version of CLI 2. {4267} The Go version has been bumped to 1.23.8. {4305} `op vault list --filter` now returns all vaults you have access to, regardless of permission level, making it easier to discover and manage vaults beyond just those with read access. {4189} 'op group user grant' now works correctly in MSP accounts. {4244} ### 2.31.0-beta.01 - Date: 2025-04-17 - Version: 2.31.0-beta.01 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.31.0-beta.01 This release brings the beta build up to date with the changes on the stable release channel. It includes quality of life improvements and bug fixes for 1Password CLI. 1Password CLI no longer causes direnv to halt when the two are used together. {4250} Following the deprecation of CLI 1, the `1password/op:latest` DockerHub tag will now always point to the latest version of CLI 2. {4267} `op vault list --filter` now returns all vaults you have access to, regardless of permission level, making it easier to discover and manage vaults beyond just those with read access. {4189} 'op group user grant' now works correctly in MSP accounts. {4244} ### 2.30.3 - Date: 2024-11-07 - Version: 2.30.3 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.30.3 This release includes security improvements, bug fixes for 1Password CLI commands, and introduces enhanced configuration options. The `OP_RUN_NO_MASKING` environment variable is now exposed to allow users to control the masking of the `op run` command output. {4089} For 1Password accounts that are managed by an MSP, 1Password CLI commands involving Service Accounts, Connect, or the Events API no longer occasionally return an error. {4033} The `op read`, `op run` and `op inject` commands no longer query archived items. {3893} On Windows, the CLI now checks each signature of the 1Password desktop app before connecting to it. {4136} ### 2.30.0 - Date: 2024-07-29 - Version: 2.30.0 - Original notes: https://app-updates.agilebits.com/product_history/CLI2 - Permalink: https://whatsnew.fyi/product/1password-cli/releases/2.30.0 This release enables caching for service accounts and concealing sensitive information in the human readable output of items, as well as brings multiple other improvements and bug-fixes. Sensitive values from item management commands' human-readable output are now concealed and can be displayed using the `--reveal` flag. {4158} Caching is now being used for service account sessions on macOS and Linux. {4133} The error message when the CLI can't connect with the 1Password desktop app now includes a link to troubleshooting documentation for more help. {3933} `op whoami` will now signal if the CLI is authenticated as a human user. {4104} The output of `op vault list` now contains the created date and item count for each vault. {4092} The `op item move` and `op item delete` commands now also work for SSH Key items. {3951} The `op vault revoke user` command will no longer allow you to revoke permissions in a Personal, Private, or Employee vault. {3844} When the same environment variable name exists both in the OS environment and the dotenv file, `op run` now correctly sources the value from the dotenv file. {3667} Windows Authenticode signature now uses the SHA256 hashing algorithm. {4135}