github.com/Azure/kubelogin

What's Changed

• Add optional Azure CLI subscription selection via --subscription (-s) by @Copilot in #767
• Return errors when cache cleanup fails by πάθει κόσμος (@pathei-kosmos) in #760

Maintenance

• Bump golang.org/x/crypto to v0.52.0 and Go to 1.26.4 by @Copilot in #781
• Bump MSAL Go v1.4.2→v1.7.2 and azidentity v1.8.0→v1.14.0 to use form_post response mode by default for AcquireTokenInteractive by Vineeth Thumma (@vineeth-thumma) in #778
• Bump softprops/action-gh-release from 3.0.0 to 3.0.1 by Dependabot (@dependabot)[bot] in #779
• Bump actions/checkout from 6.0.3 to 7.0.0 by Dependabot (@dependabot)[bot] in #777
• Bump mindsers/changelog-reader-action from 2.2.2 to 2.4.0 by Dependabot (@dependabot)[bot] in #775
• Bump docker/login-action from 3.0.0 to 4.2.0 by Dependabot (@dependabot)[bot] in #774
• Bump golangci/golangci-lint-action from 8.0.0 to 9.2.1 by Dependabot (@dependabot)[bot] in #773
• Bump docker/build-push-action from 5.1.0 to 7.2.0 by Dependabot (@dependabot)[bot] in #772
• Bump actions/upload-artifact from 4 to 7 by Dependabot (@dependabot)[bot] in #771
• Bump softprops/action-gh-release from 1 to 3 by Dependabot (@dependabot)[bot] in #770
• Bump mukunku/tag-exists-action from 1.6.0 to 1.7.0 by Dependabot (@dependabot)[bot] in #769
• Bump codecov/codecov-action from 6.0.1 to 7.0.0 by Dependabot (@dependabot)[bot] in #768
• Bump actions/checkout from 3.6.0 to 6.0.3 by Dependabot (@dependabot)[bot] in #766
• Bump actions/setup-go from 4.1.0 to 6.4.0 by Dependabot (@dependabot)[bot] in #765
• Bump peaceiris/actions-gh-pages from 3.9.3 to 4.1.0 by Dependabot (@dependabot)[bot] in #764
• Bump actions/download-artifact from 4 to 8 by Dependabot (@dependabot)[bot] in #763
• Bump peter-evans/create-pull-request from 5 to 8 by Dependabot (@dependabot)[bot] in #759
• Bump codecov/codecov-action from 5.1.2 to 6.0.1 by Dependabot (@dependabot)[bot] in #758
• Bump docker/setup-buildx-action from 3.0.0 to 4.1.0 by Dependabot (@dependabot)[bot] in #757
• Bump actions/dependency-review-action from 2.5.1 to 5.0.0 by Dependabot (@dependabot)[bot] in #756

New Contributors

• πάθει κόσμος (@pathei-kosmos) made their first contribution in #760

Full Changelog: v0.2.18...v0.2.19

What's Changed

• Add kubelogin-version.txt as a release asset to avoid GitHub API rate limits by @Copilot in #749

Maintenance

• Bump kubelogin build toolchain pins to Go 1.26.3 for CVE-2026-27137 remediation by @Copilot in #753
• Update README with official Azure kubelogin sources by hbc (@bcho) in #751

Full Changelog: v0.2.17...v0.2.18

Bug Fixes

• fix: add cross-process lock around cache.New to prevent macOS keychain race by Weinong Wang (@weinong) in #744

Maintenance

• chore: upgrade Go toolchain from 1.24 to 1.25.9 by @Copilot in #745

Full Changelog: v0.2.16...v0.2.17

Maintenance

• Bump Go to 1.24.13 to address CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730 by @Copilot in #741

Full Changelog: v0.2.15...v0.2.16

Bug Fixes

• PoP token flow crash with nil pointer in cache.Replace when running non-root by Vineeth Thumma (@vineeth-thumma) in #736

Enhancements

• feat: automate CHANGELOG.md generation for releases by @Copilot in #737

Full Changelog: v0.2.14...v0.2.15

Maintenance

• Bump Go to 1.24.11 and golangci-lint to v2.7.2 to address CVE-2025-61727 and CVE-2025-61729 by @Copilot in #731

Full Changelog: v0.2.13...v0.2.14

What's Changed

• Mention PEM support for client certificates by Ian Rodney (@ijrsvt) in #717
• added winget publish actions by Weinong Wang (@weinong) in #718
• Fix PoP token keychain storage conflict by fangluguomsft in #723
• docs(installation): add alternative mise installation method by Jean-Yves LENHOF (@jylenhof) in #724

Maintenance

• Bump Go to 1.24.9 to address stdlib CVEs by @Copilot in #726
• Bump golang.org/x/crypto from 0.40.0 to 0.45.0 by Dependabot (@dependabot)[bot] in #727

New Contributors

• Ian Rodney (@ijrsvt) made their first contribution in #717
• fangluguomsft made their first contribution in #723
• Jean-Yves LENHOF (@jylenhof) made their first contribution in #724

Full Changelog: v0.2.12...v0.2.13

What's Changed

• Support Azure Pipelines Environment Variables for AzurePipelinesCredential by @Copilot in #713
• [PoP token Cache] Fallback to no caching when encrypted cache creation fails by Vineeth Thumma (@vineeth-thumma) in #715

Full Changelog: v0.2.11...v0.2.12

v0.2.11 release (#710)

What's Changed

• Add Docker Image Build and Publish Workflow by @Copilot in #680
• Fix Docker registry name case issue in GitHub Actions workflow by @Copilot in #682

Maintenance

• Fix CVE-2025-22871 and CVE-2025-22868: Update Go version and security dependencies by @Copilot in #678

New Contributors

• @Copilot made their first contribution in #678

Full Changelog: v0.2.9...v0.2.10