v4.1.0

What's Changed

🚀 Enhancements

• feat(experiment): add apps.icon.set support for non-hosted app icons by @srtaalej in #469
• feat: add debug logging and retry support to icon upload by @srtaalej in #505
• feat: capitalize "App" in create command category titles by @mwbrooks in #508
• feat: include sandbox type when listing partner sandboxes by @vegeris in #511
• feat: add is_mcp_enabled setting to app manifest by @mwbrooks in #513
• feat: add bot_optional and user_optional scopes to app manifest by @mwbrooks in #517
• fix: preserve original app name as manifest display name by @srtaalej in #521
• feat: add accessible flag and environment variable for screen reader friendly forms by @srtaalej in #455
• feat: support png, jpg, jpeg, gif for icon auto-detection by @srtaalej in #509
• feat: add slack api command by @mwbrooks in #538
• feat: support SLACK_CLI_APP_ICON_PATH env var for icon override by @srtaalej in #519
• style: use command section headers in create command output by @zimeg in #540
• feat: remove the experiment flag for the sandbox commands and add new partner template IDs by @vegeris in #512
• feat: add env init command that copies from template placeholders by @zimeg in #516

🐛 Bug Fixes

• fix: avoid icon upload without experiment for non-hosted apps by @srtaalej in #506
• fix: broken Content-MD5 header for S3 upload by @mwbrooks in #527
• build(fix): output pinned version during install if provided by @zimeg in #536
• docs: replace circleci badge with an authenticated shield by @zimeg in #537
• fix: preserve path separators in create command argument by @srtaalej in #526
• fix: disable upgrade notification for the api command by @mwbrooks in #542

📚 Documentation

• build: regenerate reference docs from nothing for each release by @zimeg in #484
• docs: local development page by @lukegalbraithrussell in #491
• docs: updates environment variables page to be CLI-focused, not Deno-focused by @lukegalbraithrussell in #498
• docs: update quickstart, installation, guides, and hook reference files by @lukegalbraithrussell in #504
• docs: redirect issue tracker template option links by @zimeg in #510
• docs: update suggestions to use "set" and "unset" environment commands by @zimeg in #525
• chore: release slack-cli v4.1.0 by @srtaalej in #544

🤖 Build

• build(deps): bump promiseofcake/circleci-trigger-action from 3.0.1 to 3.0.2 by @dependabot[bot] in #483
• build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by @dependabot[bot] in #492
• build: group charm dependabot updates by @zimeg in #496
• build(deps): bump the charmbracelet group with 3 updates by @dependabot[bot] in #497
• build: delete stale pre-releases after a merge or schedule by @zimeg in #490
• build: create release branch as part of tag script by @zimeg in #485
• build: upload latest installer for dev and prod builds by @zimeg in #486
• build: upload the latest main build for dev installer by @zimeg in #487
• build(deps): bump charm.land/bubbletea/v2 from 2.0.4 to 2.0.5 in the charmbracelet group by @dependabot[bot] in #499
• build(deps): bump charm.land/bubbletea/v2 from 2.0.5 to 2.0.6 in the charmbracelet group across 1 directory by @dependabot[bot] in #500
• build(deps): bump github.com/go-git/go-git/v5 from 5.17.2 to 5.18.0 by @dependabot[bot] in #501
• build: include golangci-lint as project tool by @zimeg in #502
• build: include goreleaser as project tool by @zimeg in #503
• build(deps): bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 by @dependabot[bot] in #507
• build(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.5 to 2.0.6 by @dependabot[bot] in #515
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1 by @dependabot[bot] in #520
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in #523
• build(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #530
• build(deps): bump golang.org/x/mod from 0.35.0 to 0.36.0 by @dependabot[bot] in #528
• build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 by @dependabot[bot] in #529
• build(deps): bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 by @dependabot[bot] in #535
• build(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 by @dependabot[bot] in #541

🧪 Testing/Code Health

• chore: add preview and testing and notes section to pr template by @zimeg in #489
• chore: use rendered issue templates by @zimeg in #488
• chore: add snyk security scan skill by @mwbrooks in #518
• build(deps): bump golang to 1.26.3 by @slack-cli-releaser[bot] in #531
• fix: replace hashicorp/go-version with golang.org/x/mod/semver by @mwbrooks in #532
• ci: report end-to-end test status from separate configurations by @zimeg in #533

🔒 Security

• fix: upgrade HashString from SHA1 to SHA-256 by @mwbrooks in #522
• fix: upgrade generateBoundary from MD5 to SHA-256 by @mwbrooks in #524

Full Changelog: v4.0.1...v4.1.0