Bug Fixes

• executor: fix context-cancellation leaks and local copy bugs #358 @paskal
• guards: decrypt length check, ssh user nil guard, command count across hosts #357 @paskal
• config: fix inline comment stripping and simplified-playbook options #355 @paskal
• fix filepath.Rel error wrap to include the actual error #353 @paskal
• fix multiline wait swallowing errors, wire delete exclude through #352 @paskal
• fix only_on exclusion lists and bare address matching #351 @paskal

Improvements

• docs, schema and build/CI hygiene fixes #356 @paskal
• ci: harden workflows, upgrade actions, fix caching #340 @paskal
• bump golang.org/x/crypto and golang.org/x/net #350 @paskal
• bump go.opentelemetry.io/otel/sdk from 1.21.0 to 1.43.0 #339 #342 @dependabot
• bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 #341 @dependabot
• bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 #338 @dependabot

v1.20.1 Latest

Latest

Compare

Choose a tag to compare

New Features

• add task tagging support for filtering with -n flag #334 @umputun
• add shell completions for bash, zsh, and fish #337 @paskal

Improvements

• drop redundant code #336 @zonescape
• drop redundant code #331 @zonescape
• add local umask invariance #329 @zonescape
• clean up test helper and gitignore comments 18179fd
• add comprehensive llms.txt for LLM-optimized documentation 5f56691
• add landing page and Cloudflare Pages deployment #327 @umputun

Bug Fixes

• strip anchor chars from line command match pattern in sed 12b9183
• fix typo #330 @zonescape
• use OS-independent error assertion for unreachable host test e6483fd
• add directory field to publish formula to Formula/ cf42e59

Other

• restore goreleaser brews section, remove tap_migrations f0c2001

v1.20.0

Compare

Choose a tag to compare

Changelog

• 37675a3 chore: update dependencies

v1.19.3

Compare

Choose a tag to compare

• 62b3b2d chore: migrate goreleaser config to v2 format

• 620d5e0 test: add regression test for mkdir+sudo copy fix

• #324 chore: bump Go to 1.25 and update dependencies

  • Bump Go version to 1.25 in CI workflows and go.mod
  • Update all vendored dependencies (AWS SDK, Vault API, sqlite, etc.)
  • Apply golangci-lint v2 modernize fixes
  • Update GitHub Actions to latest versions
  • Bump golangci-lint tool version v2.1.5→v2.7.2

• #323 chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.45.0

v1.19.2

Compare

Choose a tag to compare

Bug Fixes

• Fixed sudo permission issue by using tee -a for line append operations (#322)

v1.19.1

Compare

Choose a tag to compare

What's Changed

• Add --local flag to force local execution without SSH by @umputun in #318
• Add bidirectional copy support with pull/download capability by @umputun in #316
• fix dry cmd. clarify target name by @shantanugadgil in #320

New Contributors

• @shantanugadgil made their first contribution in #320

Full Changelog: v1.18.0...v1.19.0

v1.19.0

Compare

Choose a tag to compare

New Features

Sudo Password Support (#315, fixes #313)

• Added secure sudo password handling through multiple methods:
  • Task-level sudo_password option in playbooks
  • Integration with Spot's secrets management system
  • Support for --sudo-password CLI flag for ad-hoc commands
• Passwords are never exposed in logs or command output

Interactive Password Input (#315)

• spot CLI: Interactive prompt for secrets key when not provided via flag or environment variable
• spot-secrets: Interactive prompt for encryption/decryption key when not provided
• Secure password input using terminal masking (no echo)
• Automatic detection of terminal vs piped input
• All entered passwords are automatically masked in logs

Line Command (#310)

• New line command type for file line manipulation
  • Add lines to files at specific positions
  • Remove lines from files by content or line number
  • Replace lines in files
  • Useful for configuration file management

Improvements

• Enhanced secrets handling with secure password input using golang.org/x/term
• Secrets key is no longer required via flag/env - can be entered interactively
• Added comprehensive documentation for variable expansion behavior (fixes #256)
• Better security through password masking in all output

Maintenance

• Updated Dependabot configuration to reduce noise from automatic PRs (#272)
• Updated GitHub Actions dependencies (#288)
• Various dependency updates

Documentation

• Added detailed explanation of variable expansion in README
• Updated security notes for sudo_password feature
• Enhanced playbook schema documentation

This release focuses on improving security and usability with interactive password support, sudo password handling, and the new line command for file manipulation. The interactive password feature makes Spot more user-friendly while maintaining security best practices.

Full Changelog: v1.17.2...v1.18.0

Version 1.18.0

Compare

Choose a tag to compare

Fixes

• SSH agent support: --ssh-agent flag now properly takes precedence over SSH keys defined in playbooks (#306)
• Added -s as a short flag for --skip option (#309)

Other Changes

• Updated dependencies for security and compatibility
  • AWS SDK v2 components
  • HashiCorp Vault API v1.16.0 → v1.20.0
  • golang.org/x/crypto v0.38.0 → v0.39.0

v1.17.2

Compare

Choose a tag to compare

Changelog

• 12d1eea Fix preservation of single-quoted environment variables

v1.17.1

Compare

Choose a tag to compare

What's Changed

• Add custom SSH temp directory option by @umputun in #253
• Support dynamic register variable names with templating #261 by @umputun in #262
• Fix secrets masking for special characters by @umputun in #283
• Upgrade to Go 1.24 and update dependencies by @umputun in #258
• Bump github.com/testcontainers/testcontainers-go from 0.34.0 to 0.35.0 in the go-modules-updates group across 1 directory by @dependabot in #254
• Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by @dependabot in #257
• Bump golang.org/x/net from 0.35.0 to 0.36.0 by @dependabot in #260
• Bump github.com/containerd/containerd from 1.7.18 to 1.7.27 by @dependabot in #263
• Configure Dependabot to only provide security updates for Go by @paskal in #265
• Bump github.com/go-pkgz/lgr from 0.11.1 to 0.12.0 by @dependabot in #271
• Bump github.com/testcontainers/testcontainers-go from 0.35.0 to 0.36.0 by @dependabot in #268
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.7 to 1.29.14 by @dependabot in #277
• Bump github.com/go-pkgz/fileutils from 0.3.0 to 0.4.0 by @dependabot in #275
• Bump golang.org/x/net from 0.36.0 to 0.38.0 in the go-modules-updates group by @dependabot in #273
• Update dependencies and revendor by @umputun in #284

Full Changelog: v1.16.4...v1.17.0

v1.17.0

Compare

Choose a tag to compare