Last 7 days
0
Features: 0
Changes: 0
Fixes: 0
Deprecations: 0
Managed secrets platform for applications, teams, and deployment environments.
Latest Doppler changelog updates, official release notes, breaking changes, security patches, pricing changes, and developer reactions in one product feed.
Follow this Doppler release-notes page to spot useful features, risky migrations, noisy announcements, and source links before they hit your backlog.
Changes.Watch links back to official changelog and release-note sources so summaries stay easy to verify.
Use channels to follow groups of tools around a stack, workflow, or topic.
Rolling windows show how many product updates landed in the last 7, 30, 90, and 365 days, grouped by existing changelog semantics.
0
2
3
6
Add ARM64 Docker images for the CLI
Switch Homebrew distribution to a cask instead of a formula
Prevent table misalignment when displaying redacted tokens in CLI output
Added curl timeout and retry flags to prevent install script hangs
Update Go runtime to version 1.25
Fixed completions install on Apple Silicon Macs and added robust connection/reconnection handling for watch mode
Fix race condition when concurrently creating config and fallback directories.
Fixed issue preventing alias fallback and metadata files from being saved in the Doppler config directory
Introduce `--no-liveness-ping` flag to disable the periodic liveness ping
Update Docker image tags for version 3.73.2, 3.73, and latest
Docker images for version 3.73.1 are now available.
Add Docker images for the CLI
Updated Go runtime to version 1.24.
Introduce OIDC login and logout CLI commands
Updated go‑keyring dependency version
Add ability to modify inheritance-related properties
Adds support for using environment variables in Doppler secrets substitution
Increase the maximum number of projects that can be fetched in a single request.
Fix resolve command execution error when using relative paths
Added CLI-based MFA recovery support
Added support for setting secret visibility directly via the `doppler secrets set` command.
Deprecate the "secrets notes set" configuration flag
Added a new `configure flags` command for customizing CLI behavior
Released new Docker image tags for the CLI: 3.66.5, 3.66, and 3
Updated Docker images to CLI version 3.66.4.
Provide clearer error messages when mounting secrets fails, improving diagnostics for developers.
Release 3.66.2 failed to fully publish due to a winget error
Release failed due to a Google Cloud permission error.
Upgrade the Go runtime to version 1.21.1
Fix environment variable forwarding when using preserve‑env Docker images.
Fix multiple issues in the TUI Docker images
Fixed error when updating via winget.
Fixed auto‑update failures on MINGW64 environments.
Adds a new TUI command for editing secrets (beta).
Published a Windows Package Manager (winget) package for the CLI
Add extra token metadata fields to the CLI 'me' command output
Introduce a lower‑kebab‑case name transformer
Add "me" command for verifying authentication.
Fix bug where scope was ignored in manual setup Docker images.
Add monorepo‑friendly structuring support in doppler.yaml setup file
Add support for MINGW64 environments when pulling Docker images
Fix regression when deleting projects
Migrated publishing workflow to use GitHub fine‑grained Personal Access Tokens, enhancing security.
Re-released v3.58.2 to migrate publishing to GitHub fine‑grained Personal Access Tokens (identical to v3.58.0).
Added secret visibility display in the secrets table and parsing support for visibility types.
Reverts monorepo support in the setup command to restore previous behavior
Added monorepo‑friendly structuring support to doppler.yaml configuration.
Added support for specifying config directory via DOPPLER_CONFIG_DIR environment variable.
Add support for setting the configuration directory via the DOPPLER_CONFIG_DIR environment variable
Added support for configuring the config directory via the DOPPLER_CONFIG_DIR environment variable.
Add support for setting a fallback passphrase via the DOPPLER_PASSPHRASE environment variable
Add pagination support for listing configs, environments, and projects.
Improved error handling for GnuPG failures during CLI installation
Added anonymous analytics for tracking command usage and support for fallback files when using name transformers.
Add ability to specify number of logs to retrieve
Added option to specify the number of logs to retrieve
Added configurable directory support and deprecated the previous configuration method.
CLI fallback file format now includes PBKDF2 round count, making files from v3.46.0+ unreadable by older versions (breaking change).
Added handling for GnuPG errors to improve reliability
Added support for fetching secrets in ASP.NET JSON format.
Added configurable setting for HTTP request retry attempts
Added Git Bash for Windows support to the installer
Add explicit error when using a mount template without providing a mount
Added a mount template option to the `doppler run` command
Fix run command incorrectly using local environment variable
Add support for mounting secrets to a file path
Added support for dynamic secrets in secret commands
install.sh will require GnuPG for signature verification from Feb 1, 2022, affecting new installs and CLI updates
New Docker images for version 3.36.2 are published under multiple tags (dopplerhq/cli and gcr.io/dopplerhq/cli).
Publish Docker images for version 3.36.1 on Docker Hub and Google Container Registry
Added ability to generate service tokens with write access.
Add support for supplying doppler configure set values via stdin
Preserves local configuration file ownership when modifying config via Docker images
Add support for creating, deleting, and renaming environments
Added signed source code as a release artifact.
install.sh now prints an error when it cannot write due to insufficient permissions
Added ability to generate expiring service tokens.
Implemented a distinct code path for polling CLI login status.
Added ability to check CLI version via https://cli.doppler.com
Disable custom DNS resolver by default
Support specifying a new config name when cloning configuration via Docker images.
Add fish shell completion and auto-complete command arguments
Added an `open-docs` command to open CLI documentation directly.
Add a new "configure reset" command to reset local config files
Update x/crypto module to the latest version
Added support for a custom DNS resolver in the CLI
Fixed the deprecated `enclave secrets download` command.
Fixed bug where setting multiple secrets could fail
Disable automatic CLI updates when running setup without a prompt
Added an error message on exit when a `run` command fails because the command is not found
Add support for secret substitution using Doppler
Requests for nonexistent secrets now error with a non‑zero exit code; original behavior can be restored with the no‑exit‑on‑missing‑secret flag (minor breaking change).
Fixed config file cleanup during logout
Fix config file cleanup on logout
Fix config file cleanup during logout
Publish Alpine packages to the apk repository
Added a new `doppler import` command for importing configurations.
Added an install.sh flag to force signature verification and now verify CLI binary signatures before install
Added automatic installation of Doppler shell completions in the install script and package managers (brew, apt, yum).
Add Docker images for Apple silicon (ARM) Macs
Display an error when the specified configuration directory does not exist, improving user feedback.
Added generation and installation of shell completions for the CLI
Add support for downloading secrets in "env no quotes" format
Fix keyring access panic on certain WSL environments
Added a `--forward-signals` flag to always forward signals to subprocesses
Changelog now ignores repository config when a project/config is explicitly provided
Introduce a new `secrets upload` command for importing secret files
Add prompt to use doppler.yaml during initial setup
Show rename message when .yml repository configuration files are renamed
Add support for reading CLI config from a repo's doppler.yaml via `doppler setup`.
Update to display the update prompt only once per version
Add a new `configs clone` command for cloning configuration sets
- Added `--all` flag and increased default max age to 14 days for `run clean`; added OS keyring storage for auth tokens and fallback file as secrets cache.
Added fallback file support to the `secrets download` command for automatic encrypted offline backups.
Add tini as init process in Docker images to reap zombie processes
Updated INSTALL.md documentation
Fixed Windows file permission handling to use 0600 when writing files.
Add a CODEOWNERS file to define repository ownership
Fix the "no check version" flag so it is respected
Service tokens now auto‑resolve project and config, eliminating manual specification
Forward all signals to subprocesses during `doppler run`.
Fixed environment variable handling by sorting them before processing Docker images.
Deprecate "enclave" sub‑command and related config/env names; commands are now accessed directly (e.g., `doppler setup`) while old names stay for backward compatibility
Added a GitHub Action to run shellcheck on install.sh
Raised the maximum allowed idle/active connections.
Add a flag to preserve existing environment variables when using `doppler run`
Fixes issue introduced in v3.10.3; CLI remains unchanged
Increase the default maximum number of idle connections per host.
Added doppler update support for macOS and Linux installations
Added option to download the CLI binary without installing.
Secrets files are now created with read‑only permissions
Added short `-y` flag for yes prompts and suppressed error text when interrupting selection prompts
Add a `--yes` flag to the login command to skip confirmation prompts.
Added support for running additional shells
Add extra validation for required parameters
Added ability to select a project without any configuration during setup
Add a new "root" field to configuration info
Add BUILD.md file and move build information into it
Clear any stored Enclave configuration on logout to prevent stale state
Add `--print-config` flag to output active configuration for debugging.
Added a new CLI install script with a one‑liner installer and introduced example GitHub Action and salus action naming
Login command now only prints the login URL when necessary, reducing noise.
Added a global --silent flag with related debug warnings; warnings now displayed in yellow and printed when silent and debug are combined.
File writes are now performed atomically to prevent partial writes and improve reliability.
Exceptions are now printed in red text for clearer visibility.
Enclave setup now only requires a token; project/config are optional and the token can be saved automatically (disable with no‑save flag).
Enable verbose error logging for doppler run by default, with a new --silent flag to suppress output
Add `doppler update` command for in‑place upgrades of the CLI when installed via Homebrew.
Fixed incorrect Debian install command.
Breaking change: string commands must now be passed via `command=` flag for `doppler run`
Added ability to silence error output from the `run` command.
Added checks for deprecated GoReleaser arguments and prefixed error messages with “Doppler Error:”
Fix enclave setup not overwriting previous configuration
Removed Slack integration link
Temporarily disabled OpenBSD and FreeBSD arm64 builds
Add .sonarcloud.properties for SonarCloud integration
Enable encrypted run fallback files by default, providing an offline encrypted cache and a new `run clean` command for old files
Added support for re‑worked v2 config path and updated Docker images.
Added support for specifying the CLI v2 configuration file path
Add additional fields to service tokens
Add a flag to limit output to only the newly created token
Add ability to manage config service tokens
Improve run support for arbitrary commands
Fixed unnecessary version check printing
Improved error handling during enclave setup to provide clearer failures
Added automatic revocation of any existing token with the same scope during login.
Consolidated print handling into a single function and suppressed version‑update messages when the plain flag is used
Add `doppler logout` command to the CLI
Fix verb tense in messages
Added upgrade instructions for the CLI
Moved Bintray publish scripts to post‑release workflow
Avoid unnecessary doppler run command to reduce overhead
Add macOS package generation to the release process
Add a usage section and document the scope and git flags in the README
Add new Docker image tags for multiple versions and syntaxes
Fix binary version to 89f77f2
Added Dockerfiles for testing deb/rpm repos and expanded Docker image tags and pull commands.
Added Docker images for CLI v0.0.58 with versioned, major, latest, and node tags on Docker Hub and GCR.
Added Docker images for CLI v0.0.57 with various tags (semantic version, latest, node).
Add logging of Docker config directory
Adds Docker image tags for version 0.0.54 across Docker Hub and GCR registries
Add pre‑release script to run release sanity checks
Added support for pulling Doppler CLI Docker images from Google Cloud Container Registry (gcr.io)
Publish Docker images to Google Container Registry (GCR) for multiple tags (versioned, latest, node)
Publish Docker images for CLI version 0.0.40 to Docker Hub and Google Container Registry with multiple tag variants (latest, node, versioned)
Fix an incorrect log statement
Updated Docker image publishing to use GitHub release notes on Bintray.
Move POST request body handling to a separate variable for clearer request construction
Added a new VCS tag field to Bintray releases
Add a 'v' prefix to Docker image tags in Bintray (e.g., dopplerhq/cli:v0.0.35)
Updated changelog to omit merge messages
Updated Doppler Bot email address
Release process now fails if any command returns an error
Add tagging support to the release script
Publish 64‑bit Docker images using the correct `amd64` architecture tag instead of `x86_64`.
Renamed the CLI Docker images to `dopplerhq/cli` (previously `cli`).
Add support for checking application version via `v` flag
Added ability to check application version using the `v` flag
Renamed Bintray Docker image packages to unified dopplerhq/cli naming
Publish Docker images for version 0.0.25 to Bintray
Added architecture segment to RPM package path
Removed signature and checksum from the Bintray upload process.
Added RPM configuration Docker images for CLI version 0.0.18
Added Homebrew test script
Added a makefile containing build and release scripts
Add functionality to write Google credentials to the filesystem before release
Added new Docker image tags (0.0.13, 0.0, 0, latest, node) for easier pulling
Build Docker images for Alpine and Alpine:Node variants
Cleaned up user‑defined cscope configuration
Added support for nfpms, project naming, and Docker image builds with versioned tags
Updated version to v0.0.9
Added base Snapcraft and initial Scoop configuration files.
Bump version to v0.0.7
Add configurable signing for releases, enhancing security
Add configuration option for signing releases
Added checksum signing and GPG key generation instructions, enhancing security measures
Renamed a file for better organization.
Added notes and instructions for the release process, including GitHub publishing details.