github.com/openclaw/gogcli

v0.37.0 - 2026-08-14

• Gmail: emit sanitized message headers and bodies once in gmail get --json --sanitize-content, while retaining the message envelope and --results-only unwrapping. (#986) — thanks @ronny-rentner.
• Sheets: add read-only Connected Sheets discovery, full data-source descriptions and execution status, plus bounded reads for anchored data-source tables (extracts) behind an explicitly opted-in BigQuery scope. (#938) — thanks @ryo-touch.

• Gmail: emit sanitized message headers and bodies once in gmail get --json --sanitize-content, while retaining the message envelope and --results-only unwrapping. (#986) — thanks @ronny-rentner.
• Sheets: add read-only Connected Sheets discovery, full data-source descriptions and execution status, plus bounded reads for anchored data-source tables (extracts) behind an explicitly opted-in BigQuery scope. (#938) — thanks @ryo-touch.

v0.36.0 - 2026-08-13

Highlight: Gmail grows full draft-side reply workflows — reply, reply-all,
and forward compose real drafts (never auto-sending), with address-aware
recipient validation.

• Gmail: add draft-only reply, reply-all, and forward workflows with shared send-side composition, no-send compatibility, and address-aware recipient validation. (#977) — thanks @malob.
• Gmail: add opt-in exact-or-lower-bound match counts to thread and message searches without treating Gmail's result estimate as exact. (#983, #984) — thanks @chrischall.
• Auth: offer one-time re-authorization for expired or revoked stored OAuth refresh tokens after interactive confirmation, while preserving non-interactive recovery guidance. (#973) — thanks @inamiy.
• Calendar: anchor --days at an explicit --from, preserve calendar-day windows across DST, and reject conflicting window flags instead of silently discarding them. (#981) — thanks @frankhli843.
• Safety: allow custom baked profiles to lock boolean CLI flags against command-line, environment, and config overrides without echoing the locked value in override errors. (#976) — thanks @ronny-rentner.
• Dependencies: update Kong, Google protobuf/genproto, Cloudflare Workers types, and pnpm to their latest releases.

Highlight: Gmail grows full draft-side reply workflows — reply, reply-all, and forward compose real drafts (never auto-sending), with address-aware recipient validation.

• Gmail: add draft-only reply, reply-all, and forward workflows with shared send-side composition, no-send compatibility, and address-aware recipient validation. (#977) — thanks @malob.
• Gmail: add opt-in exact-or-lower-bound match counts to thread and message searches without treating Gmail's result estimate as exact. (#983, #984) — thanks @chrischall.
• Auth: offer one-time re-authorization for expired or revoked stored OAuth refresh tokens after interactive confirmation, while preserving non-interactive recovery guidance. (#973) — thanks @inamiy.
• Calendar: anchor --days at an explicit --from, preserve calendar-day windows across DST, and reject conflicting window flags instead of silently discarding them. (#981) — thanks @frankhli843.
• Safety: allow custom baked profiles to lock boolean CLI flags against command-line, environment, and config overrides without echoing the locked value in override errors. (#976) — thanks @ronny-rentner.
• Dependencies: update Kong, Google protobuf/genproto, Cloudflare Workers types, and pnpm to their latest releases.

0.35.0 - 2026-08-09

• Install: move the Go module to github.com/openclaw/gogcli; new releases install with go install github.com/openclaw/gogcli/cmd/gog@latest instead of the former github.com/steipete/gogcli path.
• Security: carry forward the golang.org/x/text (GO-2026-5970) and gRPC-Go (GO-2026-6061) advisory remediations prepared for the tagged but unpublished 0.34.2 release.
• Docs: add opt-in --locate and --tab to docs comments list, resolving all comment locations from one shared document fetch. (#961, #965) — thanks @ryo-touch.
• Gmail: allow GOG_GMAIL_AUTO_FROM_ADDRESSED_ALIAS to enable the existing addressed-alias sender policy for replies and reply-context drafts. (#964) — thanks @ronny-rentner.
• Gmail: add opt-in compact 0-based attachment references across search, message, thread, draft, and download workflows. (#963) — thanks @ronny-rentner.
• Gmail: add opt-in attachment metadata to message search in JSON and text output without rendering decoded bodies. (#962) — thanks @ronny-rentner.
• Security: redact credentials embedded in Gmail watch hook URLs, including userinfo, path, query, and fragment components, unless --show-secrets is set. (#960) — thanks @bunlongheng.
• Gmail: add guarded single-message RFC822/EML import from a file or stdin, with labels, internal-date, spam, calendar-processing, and parse-only dry-run controls. (#956) — thanks @holgergruenhagen.
• Gmail: warn before a draft update replaces an existing rich-text body with plain text only, while keeping JSON stdout clean. (#955) — thanks @mcinteerj.
• Dependencies: update the Google API and OpenTelemetry stacks, Go developer tools, pnpm, and email-tracking worker toolchain to their latest policy-eligible releases.
• Docs: rewrite the README as a concise front door and move task examples into a dedicated guide.

• Install: move the Go module to github.com/openclaw/gogcli; new releases install with go install github.com/openclaw/gogcli/cmd/gog@latest instead of the former github.com/steipete/gogcli path.
• Security: carry forward the golang.org/x/text (GO-2026-5970) and gRPC-Go (GO-2026-6061) advisory remediations prepared for the tagged but unpublished 0.34.2 release.
• Docs: add opt-in --locate and --tab to docs comments list, resolving all comment locations from one shared document fetch. (#961, #965) — thanks @ryo-touch.
• Gmail: allow GOG_GMAIL_AUTO_FROM_ADDRESSED_ALIAS to enable the existing addressed-alias sender policy for replies and reply-context drafts. (#964) — thanks @ronny-rentner.
• Gmail: add opt-in compact 0-based attachment references across search, message, thread, draft, and download workflows. (#963) — thanks @ronny-rentner.
• Gmail: add opt-in attachment metadata to message search in JSON and text output without rendering decoded bodies. (#962) — thanks @ronny-rentner.
• Security: redact credentials embedded in Gmail watch hook URLs, including userinfo, path, query, and fragment components, unless --show-secrets is set. (#960) — thanks @bunlongheng.
• Gmail: add guarded single-message RFC822/EML import from a file or stdin, with labels, internal-date, spam, calendar-processing, and parse-only dry-run controls. (#956) — thanks @holgergruenhagen.
• Gmail: warn before a draft update replaces an existing rich-text body with plain text only, while keeping JSON stdout clean. (#955) — thanks @mcinteerj.
• Dependencies: update the Google API and OpenTelemetry stacks, Go developer tools, pnpm, and email-tracking worker toolchain to their latest policy-eligible releases.
• Docs: rewrite the README as a concise front door and move task examples into a dedicated guide.