What's Changed

🚀 Enhancements

• feat: add app_level_token_rotation_enabled setting to app manifest by @zimeg in #682

🐛 Bug Fixes

• fix: stop retrying token rotation with an invalid refresh token by @mwbrooks in #679
• fix: stop polling activity logs after an auth error by @mwbrooks in #680
• ci: show main branch link text in release PR description by @mwbrooks in #683

🤖 Build

• build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #675
• build(deps): bump codecov/codecov-action from 7.1.0 to 7.1.1 by @dependabot[bot] in #676
• build(deps): bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10 in the charmbracelet group across 1 directory by @dependabot[bot] in #678

📦 Other changes

• chore: release slack-cli v4.9.0 by @slack-cli-releaser[bot] in #681

Full Changelog: v4.8.0...v4.9.0

What's Changed

🚀 Enhancements

• feat: detect OpenCode as an AI agent by @mwbrooks in #665
• feat: fall back to manifest.json when get-manifest hook is unavailable by @srtaalej in #629
• feat: add --manifest-source flag to run and deploy commands by @srtaalej in #630
• feat: support the code_channels manifest feature by @zimeg in #641
• feat: conclude manifest-sync experiment by @srtaalej in #624

🐛 Bug Fixes

• revert: charmbracelet group bump #636 (lipgloss + ultraviolet) — lingering selection output by @zimeg in #669

🤖 Build

• build(deps): bump github.com/slack-go/slack from 0.21.1 to 0.23.1 by @dependabot[bot] in #656
• build(deps): bump software.sslmate.com/src/go-pkcs12 from 0.6.0 to 0.7.2 by @dependabot[bot] in #658
• build(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1 by @dependabot[bot] in #657
• build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.1 by @dependabot[bot] in #654
• build(deps): bump github.com/modelcontextprotocol/registry from 1.5.0 to 1.7.9 by @dependabot[bot] in #659
• build(deps): bump apache/skywalking-eyes from 0.8.0 to 0.9.0 by @dependabot[bot] in #662
• build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 by @dependabot[bot] in #667
• build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 by @dependabot[bot] in #668
• build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 by @dependabot[bot] in #672
• build(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 by @dependabot[bot] in #673

🧪 Testing/Code Health

• build(deps): bump golang to 1.27.0 by @slack-cli-releaser[bot] in #644
• ci: triage the GitHub milestone after a release by @mwbrooks in #660
• build(deps): bump golang to 1.27.1 by @slack-cli-releaser[bot] in #666

📦 Other changes

• chore: release slack-cli v4.8.0 by @slack-cli-releaser[bot] in #663

Full Changelog: v4.7.0...v4.8.0

What's Changed

🚀 Enhancements

• feat: conclude set-icon experiment by @srtaalej in #623
• feat: add 'app request' to check install approval requests status by @AmyScript in #646

🐛 Bug Fixes

• fix: use docs site paths for command reference See also links by @lukegalbraithrussell in #642
• fix(install): qualify Windows archive extraction by @codywilliamson in #652
• fix: always show the blocks command in help by @mwbrooks in #653

🤖 Build

• build(deps): bump golang.org/x/mod from 0.38.0 to 0.39.0 by @dependabot[bot] in #632
• build(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 by @dependabot[bot] in #634
• build(deps): bump github.com/charmbracelet/x/ansi from 0.11.7 to 0.11.8 in the charmbracelet group across 1 directory by @dependabot[bot] in #633
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in #638
• build(deps): bump charm.land/lipgloss/v2 from 2.0.5 to 2.0.6 in the charmbracelet group across 1 directory by @dependabot[bot] in #636
• build(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 by @dependabot[bot] in #637
• ci: use client-id instead of deprecated app-id for cli releaser github app by @zimeg in #639
• build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 by @dependabot[bot] in #643
• build(deps): bump github.com/kubescape/go-git-url from 0.0.32 to 0.0.33 by @dependabot[bot] in #648
• build(deps): bump charm.land/bubbletea/v2 from 2.0.8 to 2.0.9 in the charmbracelet group across 1 directory by @dependabot[bot] in #647

🧪 Testing/Code Health

• build(deps): bump golang to 1.26.6 by @slack-cli-releaser[bot] in #635

📦 Other changes

• chore: release slack-cli v4.7.0 by @slack-cli-releaser[bot] in #625

New Contributors

• @AmyScript made their first contribution in #646
• @codywilliamson made their first contribution in #652

Full Changelog: v4.6.0...v4.7.0

What's Changed

🚀 Enhancements

• feat: add slack manifest diff command by @mwbrooks in #591
• feat: add blocks preview command to open blocks in Block Kit Builder by @WilliamBergamin in #620
• feat: add two-way manifest sync between project and app settings by @mwbrooks in #543
• feat: add --force-remote flag to manifest sync by @srtaalej in #617

🤖 Build

• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #619
• build(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 by @dependabot[bot] in #622

📦 Other changes

• chore: release slack-cli v4.6.0 by @slack-cli-releaser[bot] in #621

Full Changelog: v4.5.0...v4.6.0

What's Changed

🚀 Enhancements

• feat(create): cleanup app creation outputs when slack create -app passed by @srtaalej in #598
• feat: recommend the official slack plugin to claude code users by @zimeg in #615
• feat: add --category flag to docs search command by @lukegalbraithrussell in #603
• feat: agent and scripting friendly non-TTY prompt errors by @mwbrooks in #587

🐛 Bug Fixes

• fix: treat empty on-disk JSON state files as empty state by @mwbrooks in #616

📚 Documentation

• docs: fix unclosed info admonition in authorizing-the-slack-cli by @zimeg in #604

🤖 Build

• build(deps): bump github.com/sigstore/rekor from 1.5.1 to 1.5.2 by @dependabot[bot] in #606
• build(deps): bump the charmbracelet group with 2 updates by @dependabot[bot] in #607
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3 by @dependabot[bot] in #609
• build(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 by @dependabot[bot] in #608
• build(deps): bump golang.org/x/text from 0.39.0 to 0.40.0 by @dependabot[bot] in #611
• build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in #610
• build(deps): bump golang.org/x/mod from 0.37.0 to 0.38.0 by @dependabot[bot] in #612
• build(deps): bump github.com/kyokomi/emoji/v2 from 2.2.13 to 2.2.14 by @dependabot[bot] in #614
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #618

🧪 Testing/Code Health

• build(deps): bump golang to 1.26.5 by @slack-cli-releaser[bot] in #613

📦 Other changes

• chore: release slack-cli v4.5.0 by @slack-cli-releaser[bot] in #605

Full Changelog: v4.4.0...v4.5.0

What's Changed

🚀 Enhancements

• feat: add support for 'features.agent_view' app manifest property by @mwbrooks in #596

📚 Documentation

• docs: add linux arm64 download link to manual installation steps by @zimeg in #574
• docs: restore canonical security policy over bot-added SECURITY.md by @WilliamBergamin in #597

🤖 Build

• ci: skip release candidate if generated reference match current release by @zimeg in #575
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #595
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.0 to 2.4.1 by @dependabot[bot] in #599
• build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #600
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.1 to 2.4.2 by @dependabot[bot] in #601

🔒 Security

• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 by @mwbrooks in #602

📦 Other changes

• chore: release slack-cli v4.4.0 by @slack-cli-releaser[bot] in #594

Full Changelog: v4.3.0...v4.4.0

What's Changed

🚀 Enhancements

• feat: add --app flag support to slack create for linking existing apps by @srtaalej in #565
• feat: add mcp_servers field to app manifest by @zimeg in #580
• feat: remove guard from "external-auth add-secret" command for non-hosted apps by @zimeg in #586

📚 Documentation

• Docs: updates for sandboxes experiment. by @technically-tracy in #577
• chore: order alphabetical error codes and constants in reference by @zimeg in #569
• docs: fix broken link to sandbox experimental commands by @haleychaas in #589

🤖 Build

• ci: include rc testing steps in checkboxes with github release afterward by @zimeg in #576
• ci: use idempotent labels when creating a release candidate pull request by @zimeg in #578
• build(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #583
• build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #584
• build(deps): bump golang.org/x/mod from 0.36.0 to 0.37.0 by @dependabot[bot] in #582
• build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in #581
• build(deps): bump charm.land/lipgloss/v2 from 2.0.3 to 2.0.4 in the charmbracelet group by @dependabot[bot] in #588
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.0 by @dependabot[bot] in #592

🧪 Testing/Code Health

• build(deps): bump golang to 1.26.4 by @slack-cli-releaser[bot] in #573
• refactor: move internal manifest package to internal/manifest by @mwbrooks in #590

📦 Other changes

• chore: release slack-cli v4.3.0 by @slack-cli-releaser[bot] in #579

Full Changelog: v4.2.0...v4.3.0

What's Changed

🚀 Enhancements

• feat: log AI coding agents in user-agent, telemetry, and tracing by @mwbrooks in #550
• feat: add --no-auth flag to api command for unauthenticated requests by @WilliamBergamin in #566
• feat: show confirm prompts as a vertical selection by @srtaalej in #564

🐛 Bug Fixes

• fix: disable upgrade notification for the manifest info command by @mwbrooks in #548
• fix: skip automatic update check for api command with arguments by @zimeg in #568

📚 Documentation

• docs: escapes special characters in source description by @lukegalbraithrussell in #547
• fix: add guardrail test for unescaped markdown in command descriptions by @mwbrooks in #549
• docs: clarify update check behavior in non-interactive environments by @mwbrooks in #556

🤖 Build

• build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in #554
• build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in #555
• build: package releases for linux arm64 architecture by @zimeg in #539
• ci: update release candidate in pull request when changes are available by @zimeg in #552
• ci: use make rc to release candidate without tag by @zimeg in #557
• ci: add labels after resetting existing semantic version by @zimeg in #558
• build(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by @dependabot[bot] in #560
• build(deps): bump github.com/kubescape/go-git-url from 0.0.31 to 0.0.32 by @dependabot[bot] in #563
• ci: keep release candidate in draft for tests before tag by @zimeg in #567
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #570
• build(deps): bump charm.land/bubbletea/v2 from 2.0.6 to 2.0.7 in the charmbracelet group by @dependabot[bot] in #571

🧪 Testing/Code Health

• chore: add githooks to guard against unexpected commits by @zimeg in #546

📦 Other changes

• chore: release slack-cli v4.2.0 by @slack-cli-releaser[bot] in #553

New Contributors

• @WilliamBergamin made their first contribution in #566

Full Changelog: v4.1.0...v4.2.0

What's Changed

🚀 Enhancements

• feat(experiment): add apps.icon.set support for non-hosted app icons by @srtaalej in #469
• feat: add debug logging and retry support to icon upload by @srtaalej in #505
• feat: capitalize "App" in create command category titles by @mwbrooks in #508
• feat: include sandbox type when listing partner sandboxes by @vegeris in #511
• feat: add is_mcp_enabled setting to app manifest by @mwbrooks in #513
• feat: add bot_optional and user_optional scopes to app manifest by @mwbrooks in #517
• fix: preserve original app name as manifest display name by @srtaalej in #521
• feat: add accessible flag and environment variable for screen reader friendly forms by @srtaalej in #455
• feat: support png, jpg, jpeg, gif for icon auto-detection by @srtaalej in #509
• feat: add slack api command by @mwbrooks in #538
• feat: support SLACK_CLI_APP_ICON_PATH env var for icon override by @srtaalej in #519
• style: use command section headers in create command output by @zimeg in #540
• feat: remove the experiment flag for the sandbox commands and add new partner template IDs by @vegeris in #512
• feat: add env init command that copies from template placeholders by @zimeg in #516

🐛 Bug Fixes

• fix: avoid icon upload without experiment for non-hosted apps by @srtaalej in #506
• fix: broken Content-MD5 header for S3 upload by @mwbrooks in #527
• build(fix): output pinned version during install if provided by @zimeg in #536
• docs: replace circleci badge with an authenticated shield by @zimeg in #537
• fix: preserve path separators in create command argument by @srtaalej in #526
• fix: disable upgrade notification for the api command by @mwbrooks in #542

📚 Documentation

• build: regenerate reference docs from nothing for each release by @zimeg in #484
• docs: local development page by @lukegalbraithrussell in #491
• docs: updates environment variables page to be CLI-focused, not Deno-focused by @lukegalbraithrussell in #498
• docs: update quickstart, installation, guides, and hook reference files by @lukegalbraithrussell in #504
• docs: redirect issue tracker template option links by @zimeg in #510
• docs: update suggestions to use "set" and "unset" environment commands by @zimeg in #525
• chore: release slack-cli v4.1.0 by @srtaalej in #544

🤖 Build

• build(deps): bump promiseofcake/circleci-trigger-action from 3.0.1 to 3.0.2 by @dependabot[bot] in #483
• build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in #492
• build: group charm dependabot updates by @zimeg in #496
• build(deps): bump the charmbracelet group with 3 updates by @dependabot[bot] in #497
• build: delete stale pre-releases after a merge or schedule by @zimeg in #490
• build: create release branch as part of tag script by @zimeg in #485
• build: upload latest installer for dev and prod builds by @zimeg in #486
• build: upload the latest main build for dev installer by @zimeg in #487
• build(deps): bump charm.land/bubbletea/v2 from 2.0.4 to 2.0.5 in the charmbracelet group by @dependabot[bot] in #499
• build(deps): bump charm.land/bubbletea/v2 from 2.0.5 to 2.0.6 in the charmbracelet group across 1 directory by @dependabot[bot] in #500
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 by @dependabot[bot] in #501
• build: include golangci-lint as project tool by @zimeg in #502
• build: include goreleaser as project tool by @zimeg in #503
• build(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in #507
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.5 to 2.0.6 by @dependabot[bot] in #515
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1 by @dependabot[bot] in #520
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in #523
• build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #530
• build(deps): bump golang.org/x/mod from 0.35.0 to 0.36.0 by @dependabot[bot] in #528
• build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 by @dependabot[bot] in #529
• build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 by @dependabot[bot] in #535
• build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 by @dependabot[bot] in #541

🧪 Testing/Code Health

• chore: add preview and testing and notes section to pr template by @zimeg in #489
• chore: use rendered issue templates by @zimeg in #488
• chore: add snyk security scan skill by @mwbrooks in #518
• build(deps): bump golang to 1.26.3 by @slack-cli-releaser[bot] in #531
• fix: replace hashicorp/go-version with golang.org/x/mod/semver by @mwbrooks in #532
• ci: report end-to-end test status from separate configurations by @zimeg in #533

🔒 Security

• fix: upgrade HashString from SHA1 to SHA-256 by @mwbrooks in #522
• fix: upgrade generateBoundary from MD5 to SHA-256 by @mwbrooks in #524

Full Changelog: v4.0.1...v4.1.0

What's Changed

🐛 Bug Fixes

• fix: 'create agent' command to show template, bolt framework, and agent framework options by @zimeg in #479

📚 Documentation

• chore: release slack-cli v4.0.1 by @mwbrooks in #482

🤖 Build

• build(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in #481
• build(deps): bump golang.org/x/mod from 0.34.0 to 0.35.0 by @dependabot[bot] in #480

🧪 Testing/Code Health

• build(deps): bump golang to 1.26.2 by @slack-cli-releaser[bot] in #478

Full Changelog: v4.0.0...v4.0.1