v0.1.3

0.1.3 (2026-07-11)

Features

• domain list: hide cancelled/non-visible domains by default (#94) (ad17cd3)

rust-port alpha (a3da71b)

Experimental alpha of the GoDaddy CLI Rust port. Built from a3da71b on 2026-07-11.

Installs as gddy so you can try it alongside the legacy godaddy CLI. It tracks the tip of the rust-port branch and is overwritten on every push — expect breakage.

Install / update (public repo — no auth needed):

macOS / Linux (and Git Bash / MSYS2 / Cygwin on Windows):

curl -fsSL https://github.com/godaddy/cli/releases/download/alpha/install.sh | bash

Windows (PowerShell):

irm https://github.com/godaddy/cli/releases/download/alpha/install.ps1 | iex

v0.1.2

0.1.2 (2026-07-10)

Features

• flatten domain suggest term pricing and prefix next-actions with gddy (#90) (6f7a7a9)

Bug Fixes

• use non-API GitHub redirect for update checks, add --force to update apply (#91) (60cc92d)

v0.1.1

0.1.1 (2026-07-09)

Features

• add domain operation status to poll async domain operations (#86) (4ad277c)
• add gddy payments add command (f28deb2)
• add gddy payments add command (42e3be6)
• add more next-actions across commands (#83) (a62460b)
• add Personal Access Token (PAT) support (#80) (827d448)
• default to prod, fix cross-platform config writes, support Windows installs (#54) (43ad0ad)
• DEV/TEST environments + OAuth scope step-up (DEVEX-719) (#57) (32cd77e)
• DNS record management + domain list, with output-field discovery (#65) (fa66cfa)
• domain availability + suggest via spec-generated client (#59) (f56cd21)
• domain purchase (v2 register) + domain get (#70) (96696ca)
• integrate Node.js Hosting public API with new CLI (#78) (8877abe)
• migrate domain & dns commands to the v3 Domains API (#76) (c39fbeb)
• publish gddy alpha binary on rust-port pushes; rename binary to gddy (#53) (9a37bde)
• release: release-please, self-update, no-sudo installs (#88) (e66f990)
• reorganize module categories and set feature-flag stages (#87) (7ddf2c4)

Bug Fixes

• address PR review — account_url in environments module, URL on browser failure (e5966ed)
• adopt cli-engine 0.2.0 fail-closed auth; mark local commands no_auth (#56) (1cc8d98)
• domain-purchase data formatting + comprehensive CLI help (#75) (5d15d6d)
• payments add always returns URL, treats browser failure as non-fatal (#72) (07cba90)
• request offline_access scope for refresh tokens, centralize hosting scopes (#85) (b6d49c7)
• route all HTTP clients through --debug transport logger (#81) (d0c94a3)
• stop truncating agreement URLs in domain agreements human output (#82) (6cf9112)
• surface failure detail on domain purchase, unify cli-engine version (#84) (d3a9cd1)

Miscellaneous

• bump cli-engine to 0.3.4 for non-interactive scope step-up (#73) (206c2b3)

v0.3.0 (legacy)

Minor Changes

• 05de96a: Expand the built-in Commerce API catalog with additional domains and GraphQL metadata, and normalize Commerce scope tokens across generated endpoints.

  Also improves API command behavior by resolving templated catalog paths (for example, /stores/{storeId}/...), validating trusted absolute API hosts, and surfacing richer structured API error details for troubleshooting.

v0.2.3 (legacy)

Patch Changes

• 1de3a3a: Fix -c config option handling so custom config paths are applied correctly.

v0.2.2 (legacy)

Patch Changes

• e6f6ae3: Hardened CLI security in three areas without changing intended workflows:

  • Block extension deploy path traversal by validating handle and source stay within the extension workspace.
  • Quote and escape generated .env values to prevent newline/comment-based env injection.
  • Restrict truncation full_output dump permissions to owner-only (0700 dir, 0600 files).

  Also adds regression tests covering these protections.

v0.2.1 (legacy)

Patch Changes

• b3cba2f: Security hardening: bind OAuth server to 127.0.0.1, sanitize headers in debug and --include output, HTML-escape OAuth error page, harden PowerShell keychain escaping, stop forwarding raw server errors to userMessage, redact sensitive fields in debug request body, add 120s OAuth timeout.

v0.2.0 (legacy)

Minor Changes

• 936ed58: Replace keytar native addon with cross-platform OS keychain (macOS security CLI, Linux secret-tool, Windows PasswordVault). No native Node addons required.

  Fix CLI error routing: validation guard no longer misclassifies AuthenticationError and NetworkError as input validation errors.

  Fix application list to use Relay connection syntax (edges/node) matching the updated GraphQL schema.

  Add --scope option to auth login for requesting additional OAuth scopes beyond the defaults.

  Add --scope option to api command with automatic re-authentication on 403: decodes the JWT to detect missing scopes, triggers the browser auth flow, and retries the request.

Patch Changes

• c35262b: Fix application deploy by using the correct GraphQL enum casing when requesting the latest release.