insights/cli/CHANGELOG.md

insights-cli

0.10.0 — 2026-08-03

Minor changes

• 2c588c9673 Add --no-release-bind to dsym upload: the release is still created, but uploaded symbol sets stay release-independent. — Thanks @ablaszkiewicz!

0.9.4 — 2026-07-30

Patch changes

• a29315a19c Sourcemap, dSYM, and ProGuard uploads now end with a single per-run summary line reporting how many chunks were uploaded, skipped as already present on the server, and skipped as too large. The summary is logged even when a run fails partway, and the same counts are attached to the error_tracking_cli_sourcemaps_upload_finished telemetry event so skip rates are queryable. — Thanks @ablaszkiewicz!

0.9.3 — 2026-07-30

Patch changes

• ccd7de59e0 Symbol set uploads (sourcemap upload, sourcemap upload-hermes, symbol-sets upload, dSYM and Proguard uploads) are now significantly faster: chunk uploads reuse a single HTTP connection pool instead of opening a fresh TLS connection per chunk, payload content hashes are computed once (in parallel) instead of twice per file, and sourcemap payload preparation (serialization + compression) runs across all cores. — Thanks @hpouillot!

0.9.2 — 2026-07-28

Patch changes

• d871ba0d38 Fixed insights-cli api commands crashing on Windows when loading the bundled Node.js script. — Thanks @cvolzer3!

0.9.1 — 2026-07-23

Patch changes

• 1e49417142 Publish fresh CLI artifacts after fixing repository paths that prevented the Windows release build from checking out the source. — Thanks @cat-ph!

0.9.0 — 2026-07-22

Minor changes

• 845de8f80c symbol-sets upload now accepts standalone Mach-O executables and dylibs, not just ELF files and .dSYM bundles. Binaries that embed their own DWARF — Go binaries on macOS, which never produce a dSYM (dsymutil reports "no debug symbols in executable") — upload directly, with the LC_UUID as the symbol set id. Universal (fat) binaries upload one symbol set per architecture slice. Go's default darwin build compresses the embedded DWARF, which the server cannot read yet; such binaries are skipped with guidance to rebuild with -ldflags=-compressdwarf=false. — Thanks @cat-ph!

0.8.5 — 2026-07-21

Patch changes

• f3a3420b95 insights-cli api failures are now diagnosable and attributable. Launch failures report the specific cause (bundle not embedded in the build, no home directory, install-directory write failure with the underlying IO error kind, Node.js missing) both in the error message and in error telemetry, instead of one generic bundle-not-found error. When the proxied Node process fails, the CLI now exits through its normal path — flushing telemetry and honoring --no-fail — instead of terminating immediately, and the bundled API CLI flushes its own analytics before exiting non-zero so failed calls are no longer silently dropped. The api command also emits the standard command-run usage event and attaches the project id from INSIGHTS_CLI_PROJECT_ID/INSIGHTS_CLI_ENV_ID to telemetry when stored credentials are not used. — Thanks @cvolzer3!

0.8.4 — 2026-07-16

Patch changes

• f45778f281 The dotenv credentials file can now also be pointed at with the INSIGHTS_CLI_DOTENV_FILE environment variable, equivalent to passing --dotenv-file — for callers that control the environment but not the command line (e.g. an Xcode build phase invoking the iOS SDK's upload-symbols.sh). — Thanks @ablaszkiewicz!

0.8.3 — 2026-07-15

Patch changes

• 97457ef9b4 Sourcemap upload concurrency can now be configured with --concurrency or INSIGHTS_CLI_SOURCEMAP_UPLOAD_CONCURRENCY, while keeping the existing default of 10 uploads at a time. — Thanks @DebadityaHait!

0.8.2 — 2026-07-13

Patch changes

• e38163eaab Fix concurrent release creation and multipart symbol uploads — Thanks @ablaszkiewicz!

0.8.1 — 2026-07-06

Minor changes

• 066d914497 symbol-sets upload now also accepts Apple .dSYM bundles, packaging them through the same path as dsym upload (uppercase UUID chunk_ids, AppleDsym container). A single insights-cli symbol-sets upload --directory <dir> run uploads both Linux ELF debug symbols and macOS dSYMs, so native symbol uploads no longer need a different command per platform. The dSYM branch shells out to dwarfdump (Xcode, macOS-only); when it is unavailable the bundle is reported and skipped while ELF symbols in the same directory still upload. The standalone dsym upload command is unchanged. — Thanks @cat-ph!

Patch changes

• d57bdcce6d Capture CLI errors with Insights telemetry — Thanks @hpouillot!

0.8.0 — 2026-07-03

Never published: the release pipeline's Windows build failed after the version bump landed, so no tag, GitHub release, or npm package exists for this version. Its changes first shipped in 0.8.1.

0.7.34 — 2026-06-30

Patch changes

• 889dd51553 Strip sourceMappingURL comments when deleting uploaded source maps — Thanks @hpouillot!

0.7.33 — 2026-06-25

Patch changes

• c334e9f9c3 Mention Go's -ldflags=-B=gobuildid when symbol-sets upload finds ELF files without a GNU build id, since Go binaries don't emit one by default. — Thanks @cat-ph!
• b9097541d4 Allow explicit sourcemap release uploads to continue when optional Git metadata cannot be read — Thanks @cat-ph!

0.7.32 — 2026-06-24

Patch changes

• 6fb4456e8f Fix the CLI release workflow so the Windows (x86_64-pc-windows-msvc) build succeeds and ships with each release. — Thanks @cat-ph!
• dfd1f66a9f Add symbol-sets upload for native (ELF) debug symbols: it scans a directory for executables, shared libraries, and objcopy --only-keep-debug companions that carry a GNU build id and uploads them to Insights. — Thanks @cat-ph!

0.7.31 — 2026-06-24

Never published: the release pipeline's Windows build failed after the version bump landed, so no tag, GitHub release, or npm package exists for this version. Its changes first shipped in 0.7.32.

0.7.30 — 2026-06-22

Patch changes

• d51a877525 Handle Git worktrees and packed refs when detecting repository info — Thanks @hpouillot!

0.7.29 — 2026-06-19

Patch changes

• 8c030733b1 Quiet agent API discovery commands — Thanks @cvolzer3!

0.7.28 — 2026-06-18

Patch changes

• f0bb5426d5 Remove the insights-cli api experimental opt-in and skip unavailable generated tools without warning noise. — Thanks @cvolzer3!

0.7.27 — 2026-06-18

Patch changes

• 7be64cbe1e Fix the post-login hint so insights-cli login suggests a valid next command based on the scopes authorized for the generated key. — Thanks @cvolzer3!

0.7.26 — 2026-06-18

Patch changes

• 801e9a763c Fix CLI login for agent workflows by adding the Agent CLI preset, using the supported agent scope set, and showing clearer messages about what the generated key can do. — Thanks @cvolzer3!

0.7.25 — 2026-06-17

Patch changes

• 36812957e0 Show default values in upload help — Thanks @marandaneto!

0.7.24 — 2026-06-16

Patch changes

• 10af01f66f Refresh master before preparing CLI releases — Thanks @cat-ph!
• ace786f67b Fix API CLI bundle packaging and lookup — Thanks @cvolzer3!

0.7.23 — 2026-06-15

Patch changes

• 8addff91dd Add agentic API tools — Thanks @cvolzer3!

0.7.22 — 2026-06-09

Patch changes

• 08df2e2c49 Handle indexed sourcemaps during upload — Thanks @hpouillot!

0.7.21 — 2026-06-05

Patch changes

• c3ee0a34e1 Clarify the ProGuard map ID help text. — Thanks @cat-ph!

0.7.20 — 2026-06-05

Patch changes

• 81b679f143 Clarify the Hermes upload help text. — Thanks @cat-ph!

0.7.19 — 2026-06-04

Patch changes

• 51fc41a92dd Add help text for the SSL verification flag. — Thanks @cat-ph!
• 867f88d1e9f Clarify the CLI release tag format in the release docs. — Thanks @cat-ph!

0.7.18

• fix: rename --env-file to --dotenv-file. The npm package runs the CLI binary through a node wrapper script, and Node has its own built-in --env-file flag — so Node intercepted the flag before it reached the binary, failing with node: .env: not found for a missing file. --env-file still works as an alias for native installs.

0.7.17

• fix: treat a missing --env-file as a warning instead of a fatal error — the CLI logs that the file wasn't found and falls back to the other credential sources (process env, then stored credentials). A file that exists but can't be read still errors.

0.7.16

• feat: add --dry-run flag (and INSIGHTS_CLI_DRY_RUN env var) to skip artifact uploads (sourcemap, dSYM, Hermes, ProGuard) without contacting Insights or requiring credentials — for CI gates that bundle to catch regressions but must not upload.

0.7.15

• fix: make symbol upload retry logs clearer and report failed finalization explicitly.

0.7.14

• feat: add --env-file <PATH> to load INSIGHTS_CLI_HOST, INSIGHTS_CLI_API_KEY, and INSIGHTS_CLI_PROJECT_ID (and their legacy aliases) from a dotenv-style file when not set in the process environment. Credentials are resolved atomically from a single source (process env first, then the file), so INSIGHTS_CLI_HOST from the file cannot redirect a key supplied by the process env.

0.7.13

• chore: bump cargo-dist to 0.32.0; the new npm installer drops the bundled transitive deps that were carrying open CVEs (axios, follow-redirects, minimatch, brace-expansion)

0.7.12

• feat: add --skip-on-conflict to symbol upload commands for keeping existing symbol sets when content differs
• feat: add --force to sourcemap, Hermes, and ProGuard uploads for explicit content overwrites

0.7.11

• fix: resolve release once in process command to avoid race condition when multiple workers run in parallel
• fix: skip synthetic Swift CU names (e.g. <swift-imported-modules>) before joining with comp_dir so they no longer dominate the project-root prefix and reject real source files

0.7.10

• feat: add symbol-sets download command to download symbol sets by ID or ref
• feat: add symbol-sets extract command for local file extraction
• fix: prevent ZIP path traversal in dSYM extraction
• fix: validate symbol set ID is a UUID before download

0.7.9

• feat: warn and skip empty sourcemaps (no mappings/sources/names) during upload to surface bundler misconfigurations instead of silently uploading useless symbol sets

0.7.8

• feat: add --build flag to all upload commands (hermes, dsym, proguard, sourcemap) via shared ReleaseArgs
• feat: build number packed into version string ("1.0+42") for release uniqueness; UI splits on + to display version and build separately

0.7.7

• fix: align dsym upload release flags with other upload commands by using --release-name / --release-version (with backward-compatible aliases)
• fix: reuse shared release args in dsym upload so release fallback behavior matches other upload commands

0.7.5

• fix: stable source bundle for dSYM uploads — CU-anchored prefix filter prevents framework sources from changing the content hash
• fix: thin fat dSYM binaries per arch before zipping so sibling arch rebuilds don't cause content_hash_mismatch
• fix: add --force flag to allow overwriting symbol sets whose content has changed

0.7.4

• fix: create per-UUID ZIP for dSYM uploads

0.7.3

• feat: enable symbol set compression
• fix: fix process command reading from stdin

0.7.2

• feat: allow reading files and directories from stdin

0.7.1

• feat: track upload started and upload finished events

0.7.0

• feat: promote dsym, hermes, and proguard commands from experimental to top-level
• feat: keep backward-compat aliases under exp (hidden from help)

0.6.2

• fix: endpoints now save to YAML with proper newlines

0.6.1

• chore: bump cargo-dist version

0.6.0

• Add experimental dSYM upload for iOS/macOS crash symbolication

0.5.30

• Add experimental dSYM upload for iOS/macOS crash symbolication

0.5.29

• chore: introduce env variable INSIGHTS_CLI_API_KEY and INSIGHTS_CLI_PROJECT_ID (backwards compatible)

0.5.28

• chore: introduce --release-name and --release-version options (backwards compatible)

0.5.27

• fix: only warns on release id mismatch errors

0.5.26

• feat: use env variables provided by github actions when available

0.5.24

• chore: add endpoints use case to cli auth flow

0.5.23

• feat: add experimental commands for endpoints management

0.5.22

• feat: add --project and --version to upload command to define release

0.5.20

• chore: add global --rate-limit option for Insights client

0.5.19

• chore: upgrade cargo-dist to 0.30.3

0.5.18

• fix: fix git info parsing in vercel environment

0.5.17

• feat: add --file option to target built files directly

0.5.16

• fix: cut a new version for fixing compromised package

0.5.15

• Compromised

0.5.14

• Fix authentication issue on sourcemap upload

0.5.13

• Add --include option on sourcemap commands to match specific files inside directory

0.5.12

• Bug fixes and improvements

0.5.11

• Do not read bundle files as part of hermes sourcemap commands
• Change hermes clone command to take two file paths (for the minified and composed maps respectively)

0.5.10

• Add terminal checks for login and query command

0.5.9

• Improve error handling from api
• Reduce logs for sourcemap processing

0.5.8

• Adding experimental support for proguard mappings

0.5.7

• Fix bug where files point to the same sourcemap

0.5.6

• Adding experimental support for hermes sourcemaps

0.5.5

• When running inject command multiple times, we only update chunk ids when releases are different

0.5.4

• Added no fail flag to disable non-zero exit codes on errors.

0.5.3

• Add support for ignoring public path prefixes appended by bundlers to sourceMappingURLs when searching for sourcemaps associated with minified source code. Does not modify the sourceMappingURL as published.

0.5.2

• Fixes a bug where chunks which shared a sourcemap were mishandled, leading to an error during upload in recent versions, and a silent failure in older versions. If you're using next, and saw an error message about "duplicate chunk IDs", this fix addresses that issue.

0.5.1

• Attempts to reduce impact of previous breaking changes - re-adds --project and --version arguments to sourcemap upload command, marking them as no longer used

0.5.0

• Sourcemap injection, upload and process commands made retriable. Significant improvement to release creation.

0.4.8

• fix bug where directory ends with a javascript extension

0.4.4

• process uploads in batches

0.4.3

• add ignore argument to sourcemap inject, upload and process commands
• add skip_ssl_verification argument for self-hosted instances

0.4.2

• fix url encoded sourcemaps

0.4.1

• add remote url to release metadata

0.4.0

• extract sourcemap url from source code
• add process command to inject and upload sourcemaps