4.0.8

What's Changed

• fix(upload): harden fetch upload streams by @sjinks in #2905
• New develop release: 4.0.8-dev.0 by @github-actions[bot] in #2904
• New package release: v4.0.8 by @github-actions[bot] in #2907

Full Changelog: 4.0.7...4.0.8

4.0.7

What's Changed

• New develop release: 4.0.7-dev.0 by @github-actions[bot] in #2901
• fix(upload): set duplex for stream retry bodies by @sjinks in #2902
• New package release: v4.0.7 by @github-actions[bot] in #2903

Full Changelog: 4.0.6...4.0.7

4.0.6

What's Changed

• New develop release: 4.0.6-dev.0 by @github-actions[bot] in #2894
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #2895
• build(deps-dev): bump @types/node from 25.9.3 to 26.0.0 by @dependabot[bot] in #2896
• Fix file upload retry reusing an already-consumed stream body by @mchanDev in #2897
• build(deps): bump js-yaml from 4.2.0 to 5.0.0 by @dependabot[bot] in #2898
• build(deps): bump semver from 7.8.4 to 7.8.5 by @dependabot[bot] in #2899
• New package release: v4.0.6 by @github-actions[bot] in #2900

New Contributors

• @mchanDev made their first contribution in #2897

Full Changelog: 4.0.5...4.0.6

4.0.5

What's Changed

• New develop release: 4.0.4-dev.0 by @github-actions[bot] in #2841
• build(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 by @dependabot[bot] in #2844
• fix(cli): allow vip wp --help without requiring separator by @sjinks in #2832
• fix(keychain): add local types for optional keytar module by @sjinks in #2851
• build(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by @dependabot[bot] in #2850
• build(deps): bump semver from 7.8.0 to 7.8.1 by @dependabot[bot] in #2849
• build(deps): bump @apollo/client from 4.1.9 to 4.2.0 in the graphql group by @dependabot[bot] in #2848
• build(deps-dev): bump @types/node from 24.12.0 to 25.9.1 by @dependabot[bot] in #2847
• build(deps-dev): bump the babel group with 4 updates by @dependabot[bot] in #2854
• build(deps): bump ejs from 5.0.2 to 6.0.1 by @dependabot[bot] in #2855
• build(deps): bump commander from 14.0.3 to 15.0.0 by @dependabot[bot] in #2857
• Ensure the Login URL is using HTTPS by @dphiffer in #2856
• ci: update Automattic/vip-actions to address deprecation warnings by @sjinks in #2853
• build(deps): bump tar from 7.5.15 to 7.5.16 by @dependabot[bot] in #2866
• build(deps): bump js-yaml from 4.1.1 to 4.2.0 by @dependabot[bot] in #2865
• build(deps): bump graphql from 16.14.0 to 16.14.1 in the graphql group by @dependabot[bot] in #2864
• fix(dev-env): restore update wizard prompts by @sjinks in #2852
• fix(dev-env): avoid false use matches in SQL imports by @sjinks in #2863
• fix(keychain): load secure keychain export by @sjinks in #2867
• test(cli): cover wp parser invocation matrix by @sjinks in #2858
• build(deps): bump @apollo/client from 4.2.0 to 4.2.2 in the graphql group by @dependabot[bot] in #2868
• fix(dev-env): use -o so myloader drops existing tables before import by @WRasada in #2871
• build(deps-dev): bump @automattic/eslint-plugin-wpvip from 1.2.1 to 1.3.0 by @dependabot[bot] in #2876
• build(deps): bump semver from 7.8.1 to 7.8.2 by @dependabot[bot] in #2875
• feat(app): add deploy token generation by @sjinks in #2870
• build(deps-dev): bump @types/node from 25.9.1 to 25.9.2 by @dependabot[bot] in #2877
• chore(deps): update vulnerable packages by @sjinks in #2859
• docs(cli): add parser migration guardrails by @sjinks in #2860
• test(cli): add release smoke tests by @sjinks in #2861
• build(deps): bump semver from 7.8.2 to 7.8.3 by @dependabot[bot] in #2879
• build(deps): bump socks-proxy-agent from 10.0.0 to 10.1.0 by @dependabot[bot] in #2880
• build(deps): bump https-proxy-agent from 9.0.0 to 9.1.0 by @dependabot[bot] in #2881
• refactor: replace node-fetch/nock with undici by @sjinks in #2837
• build(deps): bump esbuild from 0.28.0 to 0.28.1 by @dependabot[bot] in #2885
• build(deps): bump semver from 7.8.3 to 7.8.4 by @dependabot[bot] in #2882
• build(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in #2884
• build(deps): bump the graphql group across 1 directory with 3 updates by @dependabot[bot] in #2888
• vip app deploy - Flag large archive files included in BYOR deploy by @rebeccahum in #2889
• New package release: v4.0.4 by @github-actions[bot] in #2890
• chore: migrate to @github/keytar by @sjinks in #2892
• New package release: v4.0.5 by @github-actions[bot] in #2893

New Contributors

• @dphiffer made their first contribution in #2856
• @WRasada made their first contribution in #2871

Full Changelog: 4.0.3...4.0.5

4.0.3

What's Changed

• New develop release: 4.0.3-dev.0 by @github-actions[bot] in #2831
• build(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2824
• fix: medium-severity CVE-2026-42338 in ip-address by @sjinks in #2833
• build(deps-dev): bump jest from 30.4.1 to 30.4.2 in the testing group by @dependabot[bot] in #2834
• build(deps): bump semver from 7.7.4 to 7.8.0 by @dependabot[bot] in #2835
• build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 by @dependabot[bot] in #2836
• chore(dev-deps): remove @types/tar by @sjinks in #2838
• New package release: v4.0.3 by @github-actions[bot] in #2840

Full Changelog: 4.0.2...4.0.3

4.0.2

What's Changed

• New develop release: 4.0.2-dev.0 by @github-actions[bot] in #2827
• build(deps-dev): bump the testing group with 3 updates by @dependabot[bot] in #2819
• build(deps-dev): bump @babel/preset-env from 7.29.3 to 7.29.5 in the babel group across 1 directory by @dependabot[bot] in #2813
• build(deps): bump graphql from 16.13.2 to 16.14.0 in the graphql group across 1 directory by @dependabot[bot] in #2815
• fix(cli): restore parser compatibility by @sjinks in #2829
• New package release: v4.0.2 by @github-actions[bot] in #2830

Full Changelog: 4.0.1...4.0.2

4.0.1

What's Changed

• New develop release: 4.0.1-dev.0 by @github-actions[bot] in #2817
• fix: service detection in vip dev-env logs by @sjinks in #2807
• build(deps): bump tar from 7.5.13 to 7.5.14 by @dependabot[bot] in #2814
• build(deps): bump @automattic/vip-search-replace from 2.0.0 to 2.0.1 by @dependabot[bot] in #2823
• build(deps): bump tar from 7.5.14 to 7.5.15 by @dependabot[bot] in #2822
• fix(cli): preserve parent args for nested subcommands by @rinatkhaziev in #2818
• New package release: v4.0.1 by @github-actions[bot] in #2826

Full Changelog: 4.0.0...4.0.1

4.0.0

What's Changed

• New develop release: 3.25.3-dev.0 by @github-actions[bot] in #2810
• build(deps): bump @apollo/client from 4.1.8 to 4.1.9 in the graphql group by @dependabot[bot] in #2811
• build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @dependabot[bot] in #2812
• Release commander by @rinatkhaziev in #2801
• New package release: v4.0.0 by @github-actions[bot] in #2816

Full Changelog: 3.25.2...4.0.0

3.25.3-dev.0

What's Changed

• New develop release: 3.25.3-dev.0 by @github-actions[bot] in #2810
• build(deps): bump @apollo/client from 4.1.8 to 4.1.9 in the graphql group by @dependabot[bot] in #2811

Full Changelog: 3.25.2...3.25.3-dev.0

3.25.2

What's Changed

• Improve command description for import media by @yolih in #2769
• New develop release: 3.25.2-dev.0 by @github-actions[bot] in #2774
• build(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by @dependabot[bot] in #2777
• build(deps): bump proxy-from-env from 2.0.0 to 2.1.0 by @dependabot[bot] in #2776
• build(deps-dev): bump @babel/preset-env from 7.29.0 to 7.29.2 in the babel group by @dependabot[bot] in #2778
• feat: add print option to phpMyAdmin command to output URL to stdout by @spenserhale in #2760
• build(deps-dev): bump @types/debug from 4.1.12 to 4.1.13 by @dependabot[bot] in #2780
• build(deps): bump tar from 7.5.11 to 7.5.12 by @dependabot[bot] in #2781
• build(deps): bump graphql from 16.13.1 to 16.13.2 in the graphql group by @dependabot[bot] in #2785
• build(deps): bump tar from 7.5.12 to 7.5.13 by @dependabot[bot] in #2783
• build(deps-dev): bump dockerode from 4.0.9 to 4.0.10 by @dependabot[bot] in #2782
• feat: add print option to phpMyAdmin command to output URL to stdout by @sjinks in #2779
• build(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 by @dependabot[bot] in #2788
• build(deps-dev): bump typescript from 5.9.3 to 6.0.2 by @dependabot[bot] in #2784
• build(deps): bump socks-proxy-agent from 8.0.5 to 10.0.0 by @dependabot[bot] in #2787
• build(deps): bump https-proxy-agent from 7.0.6 to 9.0.0 by @dependabot[bot] in #2786
• build(deps): bump step-security/harden-runner from 2.16.1 to 2.17.0 by @dependabot[bot] in #2793
• build(deps): bump @apollo/client from 4.1.6 to 4.1.7 in the graphql group by @dependabot[bot] in #2791
• build(deps): bump step-security/harden-runner from 2.17.0 to 2.19.0 by @dependabot[bot] in #2798
• build(deps-dev): bump @automattic/eslint-plugin-wpvip from 1.2.0 to 1.2.1 by @dependabot[bot] in #2797
• build(deps-dev): bump typescript from 6.0.2 to 6.0.3 by @dependabot[bot] in #2796
• build(deps): bump ejs from 5.0.1 to 5.0.2 by @dependabot[bot] in #2794
• build(deps-dev): bump dockerode from 4.0.10 to 5.0.0 by @dependabot[bot] in #2803
• build(deps): bump @apollo/client from 4.1.7 to 4.1.8 in the graphql group by @dependabot[bot] in #2802
• build(deps-dev): bump @babel/preset-env from 7.29.2 to 7.29.3 in the babel group by @dependabot[bot] in #2804
• chore(deps): update lando and protobufjs by @sjinks in #2806
• New package release: v3.25.2 by @github-actions[bot] in #2809

New Contributors

• @spenserhale made their first contribution in #2760

Full Changelog: 3.25.1...3.25.2