v7.2.0

What's Changed

• Update golangci-lint by @mtibben in #1194
• Fix credential type detection for login by @mtibben in #1193
• Prioritise source_profile over sso config by @mtibben in #1196
• Fix ini output to match credentials file by @mtibben in a4f5e3d

Full Changelog: v7.1.2...v7.2.0

v7.2.0-beta2

What's Changed

• Prioritise source_profile over sso config by @mtibben in #1196
• Update golangci-lint by @mtibben in #1194
• Fix credential type detection for login by @mtibben in #1193

Full Changelog: v7.1.2...v7.2.0-beta2

v7.1.2

What's Changed

• Add explicit removal notice + instructions for --prompt=pass by @tavisrudd in #1190

New Contributors

• @tavisrudd made their first contribution in #1190

Full Changelog: v7.1.1...v7.1.2

v7.1.1

What's Changed

• Fixes segfault when using ecs-server mode by @mtibben in #1189

Full Changelog: v7.1.0...v7.1.1

v7.1.0

What's Changed

• Support using aws-vault over SSH by using TTY for MFA prompts by @onnos in #1184

New Contributors

• @onnos made their first contribution in #1184

Full Changelog: v7.0.2...v7.1.0

v7.0.2

Fixed

• Preference stored credentials over other credential sources #1183 by @dgholz. Fixes #1176, #1180, #1181

Full Changelog: v7.0.1...v7.0.2

v7.0.1

Fixed

• Use DI for useSessionCache by @mtibben in #1174
• Web identity profiles with role ARNs are valid by @lstoll-sfdc in #1178

New Contributors

• @lstoll-sfdc made their first contribution in #1178

Full Changelog: v7.0.0...v7.0.1

v7.0.0

Added

• Handle [sso-session] section by @dima-vm in #1088
• Add support for credential_process by @jmczerk in #1087
  #1122
• Add mfa_process config by @mtibben in #1123
• Support aws-cli's AWS_CREDENTIAL_EXPIRATION by @mtibben in #1124
• Add aws-vault export cmd by @mtibben in #1135 #1146
• Allow login with master creds in environment by @mtibben in #1150
• Support login from profile with credential_process by @christophgysin in #1168

Changed

• Simplify creation of temporary creds by @mtibben in #1120
• Update Documentation to reflect new Multi-MFA per IAM User functionality on AWS. by @LouisTsiattalou in
  #1101
• Remove support for parent_profile, deprecated in v5 by @mtibben in #1131
• When using a subshell, add some help messages to minimise confusion and improve DX by @mtibben in #1136
• Disable subshell help messages with AWS_VAULT_DISABLE_HELP_MESSAGE=1 by @mtibben in #1165
• Make --ecs-server the default server implementation by @mtibben in #1137
• Automatically select the best prompt driver by @mtibben in #1138
• Remove use of old env vars by @mtibben in #1143 #1147
• Fix prompts required in non-tty processes by @mtibben in #1149
• Use go 1.20 by @mtibben in #1158
• Support execve syscall on all OSs that can by @mtibben in #1166
• Shut down ec2 proxy automatically by @mtibben in #1167

Backwards-compatibility breaks

• --prompt=pass is no longer supported. Instead, use mfa_process = pass otp my_aws_mfa in your config file
• parent_profile in the aws config file is no longer supported. Use include_profile instead
• --server now executes a ECS metadata server instead of a EC2 metadata server. To continue using the EC2 metadata server, use --ec2-server instead. Use aws-vault proxy --stop if you need to stop processes from old aws-vault versions
• When using aws-vault exec the following old env vars are no longer set. If you use any of these env vars, use the more standard alternative
  • AWS_SECURITY_TOKEN (use AWS_SESSION_TOKEN instead)
  • AWS_SESSION_EXPIRATION (use AWS_CREDENTIAL_EXPIRATION instead)
• aws-vault exec --json flag is deprecated and will be removed in a future release. Use aws-vault export --format=json instead.

New Contributors

• @dima-vm made their first contribution in #1088
• @LouisTsiattalou made their first contribution in #1101
• @jmczerk made their first contribution in #1087
• @christophgysin made their first contribution in #1168

Full Changelog: v6.6.2...v7.0.0

v6.6.2

What's Changed

• Revert "With login, SSOUseStdout should follow --stdout" by @mtibben in #1111

Full Changelog: v6.6.1...v6.6.2

v6.6.1

Fixed

• allow Host header with explicit :80 included by @grelca in #912
• chore: Set permissions for GitHub actions by @naveensrinivasan in #918
• README.md: #Installing: add Gentoo by @vitaly-zdanevich in #926
• Update for rename of AWS SSO to “AWS IAM Identity Center” by @sftim in #989
• Add YKMAN_OATH_DEVICE_SERIAL to USAGE.md by @alxch- in #987
• With login, SSOUseStdout should follow --stdout by @susji in #892
• Improve signposting of IAM api call restrictions by @ChristopherHackett in #1057
• Recreate OIDC token when 401 error is returned by @cezarsa in #1052
• Remove golang.org/x/sys/execabs by @mtibben in #1093

New Contributors

• @grelca made their first contribution in #912
• @naveensrinivasan made their first contribution in #918
• @vitaly-zdanevich made their first contribution in #926
• @alxch- made their first contribution in #987
• @susji made their first contribution in #892
• @ChristopherHackett made their first contribution in #1057
• @cezarsa made their first contribution in #1052

Full Changelog: v6.6.0...v6.6.1