Latest version check, redefine --quiet, new root command

.changes/unreleased/BUG FIXES-20260717-154516.yaml

@@ -0,0 +1,3 @@
+kind: BUG FIXES
+body: Using the --quiet argument no longer suppresses api command rendering for GET requests.
+time: 2026-07-17T15:45:16.235312-06:00

.github/pull_request_template.md

@@ -16,7 +16,7 @@ go run github.com/homeport/termshot/cmd/termshot@v0.6.1 -c -f ~/screenshot.png -
   - `--json` — Force machine readable output to stdout. Does not apply to stderr.
   - `--markdown` — Force markdown output to stdout. Does not apply to stderr.
   - `--dry-run` — Don't make any actual writes or other mutations. Describe what would have changed to stderr.
-  - `--quiet` — Don't render output to stdout.
+  - `--quiet` — Only render essential content.
 - [ ] Get the logging interface from the context and add debug logging for interesting conditions and nonfatal situations.
 - [ ] Run `make gen/screenshot` if the root command output changes.
 - [ ] Add the `Autocomplete` field to **positional arguments** and **flags** to assist shell autocomplete.

.release/release-metadata.hcl

@@ -4,6 +4,6 @@
 url_docker_registry_dockerhub = "https://hub.docker.com/r/hashicorp/tfctl-cli"
 url_docker_registry_ecr       = "https://gallery.ecr.aws/hashicorp/tfctl-cli"
 url_source_repository         = "https://github.com/hashicorp/tfctl-cli"
-url_project_website           = "https://www.tfctl-cli.io/"
+url_project_website           = "https://github.com/hashicorp/tfctl-cli"
 url_license                   = "https://github.com/hashicorp/tfctl-cli/blob/main/LICENSE"
-url_release_notes             = "https://www.tfctl-cli.io/docs/release-notes"
+url_release_notes             = "https://github.com/hashicorp/tfctl-cli/blob/main/CHANGELOG.md"

.release/security-scan.hcl

@@ -13,4 +13,18 @@ binary {
   osv        = true
   oss_index  = false
   nvd        = false
+
+  triage {
+    suppress {
+      vulnerabilities = [
+        // golang.org/x/crypto/openpgp is deprecated/unmaintained with no fixed
+        // version. The provider does not use this package (confirmed via
+        // `go mod why golang.org/x/crypto/openpgp`); it imports the maintained
+        // fork github.com/ProtonMail/go-crypto/openpgp instead. x/crypto is
+        // only pulled in for the unaffected golang.org/x/crypto/cryptobyte
+        // package. Not reachable in the built binary.
+        "GO-2026-5932",
+      ]
+    }
+  }
 }

CONTRIBUTING.md

@@ -21,7 +21,7 @@ make check            # Verify everything passes before creating PR
   - `--json` — Force machine readable output to stdout. Does not apply to stderr.
   - `--markdown` — Force markdown output to stdout. Does not apply to stderr.
   - `--dry-run` — Don't make any actual writes or other mutations. Describe what would have changed to stderr.
-  - `--quiet` — Don't render output to stdout.
+  - `--quiet` — Only render essential content.
 - [ ] Get the logging interface from the context and add debug logging for interesting conditions and nonfatal situations.
 - [ ] Run `make gen/screenshot` if the root command output changes.
 - [ ] Add the `Autocomplete` field to **positional arguments** and **flags** to assist shell autocomplete.

Makefile

@@ -34,7 +34,11 @@ clean:
 
 .PHONY: gen/screenshot
 gen/screenshot: go/install # Create a screenshot of the tfctl CLI
-	@go run github.com/homeport/termshot/cmd/termshot@v0.6.1 -c -f $(ASSETS)/tfctl.png -- tfctl
+	@go run github.com/homeport/termshot/cmd/termshot@v0.6.1 -c -f $(ASSETS)/tfctl.png -- tfctl --help
+
+.PHONY: gen/logo
+gen/logo: logotools
+	@lolcat -S 26 -f <(figlet -d ./assets -f "Sub-Zero.flf" tfctl) > ./cmd/tfctl/logo.txt
 
 .PHONY: go/build
 go/build: bin
@@ -72,6 +76,18 @@ tools:
 		fi; \
 	}
 
+.PHONY: logotools
+logotools:
+	@command -v lolcat >/dev/null 2>&1 || { \
+		echo "Installing lolcat..."; \
+		if command -v brew >/dev/null 2>&1; then brew install lolcat; \
+		else echo "Could not auto-install lolcat: https://github.com/busyloop/lolcat" && exit 1; \
+		fi; \
+	}
+	@command -v figlet >/dev/null 2>&1 || { \
+		echo "Install figlet https://www.figlet.org/" && exit 1; \
+	}
+
 .PHONY: check
 check: fmt-check go/lint go/test
 
@@ -83,6 +99,7 @@ help:
 	@echo "Tools:"
 	@echo " tools           Install development tools"
 	@echo " gen/screenshot  Generate a screenshot of the CLI in $(ASSETS)/"
+	@echo " gen/logo        Generate the ASCII art logo"
 	@echo ""
 	@echo "Build:"
 	@echo " go/install      Install tfctl binary to GOPATH/bin"

README.md

@@ -205,7 +205,7 @@ The `tfctl` command can manage HCP Terraform runs and variables with the corresp
 
 - `--profile=<name>`: The profile to use. If omitted, the CLI uses the current profile.
 
-- `--quiet`: Minimizes output to stdout.
+- `--quiet`: Minimizes output, rendering only essential content.
 
 - `--version`: Print the version of `tfctl` CLI.
 
@@ -271,16 +271,6 @@ Verify the installation:
 $ tfctl --version
 ```
 
-### Preparing your Change
+### Developers
 
-#### PR Preparation Checklist
-
-1. Run `npx changie new` to prepare a new changelog entry for the next set of release notes.
-1. Ensure any command changes are sensitive to these global flags:
-  - `--json` &mdash; Force machine readable output to stdout. Does not apply to stderr.
-  - `--markdown` &mdash; Force markdown output to stdout. Does not apply to stderr.
-  - `--dry-run` &mdash; Don't make any actual writes or other mutations. Describe what would have changed to stderr.
-  - `--quiet` &mdash; Don't render output to stdout.
-1. Get the logging interface from the context and add debug logging for interesting conditions and nonfatal situations.
-1. Run `make gen/screenshot` if the root command output changes.
-1. Add the `Autocomplete` field to positional arguments and flags to assist shell autocomplete.
+See [CONTRIBUTING.md](CONTRIBUTING.md) for information about developing tfctl.