v0.3.0

instant CLI release 0.3.0.

Install (one-liner)

curl -sSfL https://instanode.dev/install.sh | sh

Or download the archive for your platform from the assets below and
drop the binary on $PATH.

Verify the release

Checksums are signed with sigstore cosign (keyless OIDC). To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/InstaNode-dev/cli/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature checksums.txt.sig \
  --certificate checksums.txt.pem \
  checksums.txt

Changelog

• d206922 chore(deps): Bump the actions group with 2 updates (#27)
• c231284 chore(deps): Bump the actions group with 3 updates (#22)
• 9008a29 feat(cli): operate-verb parity with MCP + Homebrew tap publishing (#30)
• 1f43feb fix(ci): bump Go toolchain to 1.25.11 (clears GO-2026-5039/5037 stdlib vulns) (#23)
• 93862ab fix(cli): completion exit=1 on no shell arg + instant version alias (BUG-CLI-016, BUG-CLI-041) (#21)
• 86dbb5e fix(cli): four contained DX gaps — PAT signpost, deploy flag-parse, dup auth print, --version VCS fallback (#28)
• cb85bb0 fix(cli): item-envelope detail decode + provision-timeout orphan guidance (#29)
• 725949d fix(lint): suppress SA5011 in test files (mirror api .golangci.yml) (#24)
• 0566d46 fix(release): bump cosign v2.4.1 → v2.6.3 so goreleaser-action can verify its download bundle (#31)
• 6ee06fe sec(cli): scheme-allowlist openBrowser + atomic tokens.Save (F-17, F-18) (#20)
• d6da0b4 test(cli): add registry-iterating done-bar + contract gap-fills (#25)
• 3adcb59 test(cli): assert claim-on-login surfaces claimed-token count (#26)

v0.2.0

instant CLI release 0.2.0.

Install (one-liner)

curl -sSfL https://instanode.dev/install.sh | sh

Or download the archive for your platform from the assets below and
drop the binary on $PATH.

Verify the release

Checksums are signed with sigstore cosign (keyless OIDC). To verify:

cosign verify-blob \
  --certificate-identity-regexp 'https://github.com/InstaNode-dev/cli/.github/workflows/release.yml@.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --signature checksums.txt.sig \
  --certificate checksums.txt.pem \
  checksums.txt

Changelog

• 00a26d2 Initial commit
• 9f5e398 Rename domain from instant.dev to instanode.dev
• a5e33b2 chore(deps): Bump the actions group with 4 updates (#6)
• 4cd4678 chore(deps): Bump the actions group with 6 updates (#16)
• cf1de06 chore(oss-prep): .gitignore .claude/ entry (#3)
• 685ab57 ci(coverage): gate PRs on 100% patch coverage + 95% project floor (#13)
• 943f868 ci(coverage): remove || true test-masking (CLAUDE.md rule 12) (#10)
• 6b73802 feat(release): goreleaser + tag-driven release workflow + install.sh (#18)
• 7a289b2 feat: add 'instanode up' command + INSTANT_TOKEN env support (#1)
• 38a8887 feat: require --name flag on all provisioning commands (#2)
• c457cc7 fix(cli): BugBash B15 P0 fixes — whoami env-token, --version stamping, sub-cmd exit codes, --json error envelope
• 3304305 fix(cli): BugBash B15 P1/P2 fixes — anon-up idempotency, status [] on empty, --filter/--limit, --token global, deploy stubs, silenced cobra usage
• 67af56f fix(cli): CLI-MCP-8/9/11 — --env passthrough, deploy stub label, resource unauth exit 3 (#17)
• f56e25c fix(cli): T16 P1 + T10 — BugBash 2026-05-20
• fd56e12 fix(cli): update default API base URL from instant.dev to api.instanode.dev
• 456c9ea fix(cli): wave 3 — BugHunt 2026-05-20 T16 P2/P3 fixes
• f44d896 fix(go.mod): rename module path + docs(oss-prep): LICENSE/SECURITY/COC/CONTRIBUTING (#4)
• 132f2ed fix(release): goreleaser v2 expects 'checksum' (singular) for sign artifacts (#19)
• 607c0fd test(coverage): drive cli to >=95% coverage (#12)
• f396d0e test(extras): cover RECEIVE_URL branch in runResourceDetail (#15)