Developer tools1Password CLI 2.42.0
- The
op environment secret listcommand is now generally available. It lists the name and value of each secret in a 1Password Environment, and whether each secret is concealed. - The
op environmenthelp text now uses “secrets” instead of “variables”. op item get,op read,op run, andop injectnow return the value of an address field when some parts of the address, such as the street or country, are empty.- You can now authenticate the following CLIs using Touch ID and other unlock options with 1Password Shell Plugins. Thanks to everyone who contributed!
- CockroachDB CLI (
cockroach sql), contributed by @syndbg - Doppler CLI, contributed by @CodeByZach
- DuckDB CLI with MotherDuck, contributed by @sterlinm
- LocalXpose CLI (
loclx), contributed by @LocalXpose - Netlify CLI, contributed by @eddumelendez
- npm and pnpm, contributed by @dalldrit13
- Octopus Deploy CLI, contributed by @xcezx
- OpenBao CLI (
bao), contributed by @gaige - Postman CLI, contributed by @ericflores108
- Spacelift CLI (
spacectl), contributed by @damianstasik - Stackhero CLI, contributed by @martijngastkemper
- xAI Grok CLI, contributed by @eddumelendez
- CockroachDB CLI (
- The Argo CD shell plugin now respects the selected context: credentials from 1Password are only provided when
argocdis targeting the server stored in the item’s Address, so--argocd-contextand--serverwork as they do without the plugin. - The Akamai and Pipedream shell plugins now refuse to write credential values containing line breaks into their generated config files.
- The Exercism shell plugin no longer requires a 1Password item for the
completion,upgrade,workspace, andtroubleshootsubcommands. - The Sourcegraph shell plugin now supports the current
sgp_access token format. The Endpoint field is now required, since each token is tied to a specific endpoint. Thanks @marcleblanc2! - The Hugging Face shell plugin now uses the new
hfcommand instead ofhuggingface-cli. Runop plugin init hfand remove the oldhuggingface-clialias. Thanks @cadnza! - The Terraform shell plugin now provides credentials to
terraform outputandterraform taintcommands. Thanks @juraj-s! - The LocalStack shell plugin now uses
LOCALSTACK_AUTH_TOKENinstead of the deprecatedLOCALSTACK_API_KEY. Thanks @simonrw! - The MySQL shell plugin now quotes and escapes the values it writes to the generated
my.cnf, so passwords containing#, backslashes, or surrounding whitespace no longer fail to authenticate. - The OpenTofu shell plugin now provides credentials to
tofu workspacecommands, matching the Terraform shell plugin. - The Gitea shell plugin now writes tea’s configuration to the location tea reads when
XDG_CONFIG_HOMEis set. - The AWS shell plugin no longer fails with
Cannot call GetSessionToken with session credentialswhen a profile with MFA assumes a role through asource_profile.
