Release notes from cli

v14.1.1

2026-03-18T16:55:29Z

v14.1.1 (2026-03-18)

Bug Fixes:

fix(compute): compute pack, compute validate, and install no longer require authentication. #1701

v14.1.0

2026-03-17T17:09:55Z

v14.1.0 (2026-03-17)

Bug Fixes:

fix(stats): stats historical now returns write errors instead of silently swallowing them #1678

Deprecations:

deprecated(auth): fastly profile, fastly sso, and fastly auth-token command trees are deprecated and will be removed in a future release. Use fastly auth subcommands instead. #1676
deprecated(auth): --profile and --enable-sso global flags are deprecated. Use --token <name> to select a stored auth token by name, or fastly auth login --sso --token <name> for SSO. #1676

Enhancements:

feat(auth): auth login --sso now requires --token <name> to explicitly name the stored token. This prevents accidentally overwriting tokens in multi-user SSO workflows. #1676
feat(auth): add FASTLY_DISABLE_AUTH_COMMAND env var to hide the fastly auth command tree from help, completions, and invocation. #1676
feat(auth): when FASTLY_DISABLE_AUTH_COMMAND is set, the --token/-t global flag is also disabled. Use FASTLY_API_TOKEN or stored config tokens instead. #1676
feat(stats): add --field flag to stats historical to filter to a single stats field. #1678
feat(stats): add stats aggregate subcommand for cross-service aggregated stats. #1678
feat(stats): add stats usage subcommand for bandwidth/request usage, with --by-service breakdown. #1678
feat(stats): add stats domain-inspector subcommand for domain-level metrics. #1678
feat(stats): add stats origin-inspector subcommand for origin-level metrics. #1678
feat(apisecurity/discoveredoperations): add support for 'list' and 'update' support for 'API discovery'. #1689
feat(apisecurity/operations): add CRUD support for 'API Inventory' operations. #1689
feat(apisecurity/tags): add API Security Operations tag support (#1688)
feat(service/version): add support for service validation. #1695
feat(compute/build): Block version 1.93.0 of Rust to avoid a wasm32-wasip2 bug. (#1653)
feat(service/vcl): escape control characters when displaying VCL content for cleaner terminal output (#1637)

Dependencies:

build(deps): golang.org/x/net from 0.50.0 to 0.51.0 (#1674)
build(deps): actions/upload-artifact from 6 to 7 (#1675)
build(deps): actions/download-artifact from 7 to 8 (#1675)
build(deps): golang.org/x/sys from 0.41.0 to 0.42.0 (#1679)
build(deps): github.com/mattn/go-runewidth from 0.0.20 to 0.0.21 (#1679)
build(deps): github.com/pierrec/lz4/v4 from 4.1.25 to 4.1.26 (#1679)
build(deps): golang.org/x/oauth2 from 0.35.0 to 0.36.0 (#1679)
build(deps): golang.org/x/sync from 0.19.0 to 0.20.0 (#1679)
build(deps): github.com/fastly/go-fastly/v13 from 13.0.0 to 13.0.1 (#1679)
build(deps): golang.org/x/term from 0.40.0 to 0.41.0 (#1687)
build(deps): golang.org/x/mod from 0.33.0 to 0.34.0 (#1687)
build(deps): golang.org/x/text from 0.34.0 to 0.35.0 (#1687)
build(deps): github.com/fastly/go-fastly/v13 from 13.0.1 to 13.1.0 (#1687)
build(deps): golang.org/x/crypto from 0.48.0 to 0.49.0 (#1693)
build(deps): golang.org/x/net from 0.51.0 to 0.52.0 (#1693)
build(deps): github.com/fastly/go-fastly/v13 from 13.1.0 to 13.1.1 (#1693)
build(deps): github.com/fastly/go-fastly/v13 from 13.1.1 to 13.1.2 (#1696)
build(deps): actions/create-github-app-token from 2 to 3 (#1692)

v14.0.4

2026-02-26T16:52:37Z

v14.0.4 (2026-02-26)

Documentation:

fix(changelog): change code blocks to be all on one line #1670

v14.0.0

2026-02-26T16:14:24Z

v14.0.0 (2026-02-25)

BREAKING CHANGES

This release of the Fastly CLI includes a significant reorganization
of the commands which are used to manage the configuration of Fastly
services (both Delivery and Compute services). Specifically, each of
the command families listed below have been changed from
fastly <family> create/delete/describe/list/update to
fastly service <family> create/delete/describe/list/update. For nearly all of these
command families, the previous commands are still available but are
not listed in the fastly help output. In addition, invocations of
the previous commands will generate a deprecation message, which
includes the new command that should be used instead.

The fastly domain family of commands are the lone exception; those
commands exist in both the old and new forms, but the top-level
commands are used to manage 'versionless' domains (a new feature of
the Fastly platform, and those commands were previously named
fastly domain-v1 create/delete/describe/list/update), while the
service-level commands are used to manage 'classic' domains. As a
result, you will need to update any scripts or workflows which used the
fastly domain create/delete/describe/list/update commands to use the
fastly service domain create/delete/describe/list/update commands
instead.

The command families which have been reorganized and are available in
both the old and new forms are:

acl
aclentry
alert
backend
dictionary
dictionary-entry
healthcheck
imageoptimizerdefaults
logging
purge
rate-limit
resource-link
service-auth
service-version
vcl

Breaking:

breaking(domain) - service-version oriented domain commands have been moved under the service domain command. Versionless domain-v1 commands have been moved to the domain command (#1615)

Enhancements:

feat(ngwaf/rules): Upgrade go-fastly to v13.0.0 and allow ngwaf rules to accept multival conditions (#1655)
feat(rust): Allow testing with prerelease Rust versions (#1604)
feat(compute/hashfiles): remove hashsum subcommand (#1608)
feat(ngwaf/rules): add support for CRUD operations for NGWAF rules (#1605)
feat(compute/deploy): added the --no-default-domain flag to allow for the skipping of automatic domain creation when deploying a Compute service(#1610)
refactor(argparser/flags.go): add flag conversion utilities for converting string flags to bools and checking ascending and desecnding flags (#1611)
feat(service/purge): Add 'service purge' command as replacement for 'purge', with an unlisted and deprecated alias of 'purge'. (#1612)
feat(service/version): Add 'service version ...' commands as replacements for 'service-version ...', with unlisted and deprecated aliases of 'service-version ...'. (#1614)
feat(service/vcl): moved the vcl command under the service command, with an unlisted and deprecated alias of vcl (#1616)
feat(service/healthcheck): moved the healthcheck command under the service command, with an unlisted and deprecated alias of healthcheck (#1619)
feat(service/backend): moved the backend command under the service command, with an unlisted and deprecated alias of backend (#1621)
feat(service/acl): moved the acl and aclentry commands under the service command, with a unlisted and deprecated aliases of acl and aclentry (#1621)
feat(version): If the latest version is at least one major version higher than the current version, provide links to the release notes for the major version(s) so the user can review them before upgrading. (#1623)
feat(service/imageoptimizerdefaults): moved the imageoptimizerdefaults commands under the service command, with an unlisted and deprecated alias of imageoptimizerdefaults (#1627)
feat(service/alert): moved the alerts command to the service alert command, with an unlisted and deprecated alias of alerts (#1616)
feat(service/dictionary-entry): moved the dictionary-entry commands under the service command, with an unlisted and deprecated alias of dictionary-entry (#1628)
feat(service/dictionary): moved the dictionary command under the service command, with an unlisted and deprecated alias of dictionary (#1621)
feat(service/ratelimit): moved the rate-limit commands under the service command, with an unlisted and deprecated alias of rate-limit (#1632)
feat(compute/build): Remove Rust version restriction, allowing 1.93.0 and later versions to be used. (#1633)
feat(service/resourcelink): moved the resource-link commands under the service command, with an unlisted and deprecated alias of resource-link (#1635)
feat(service/logging): moved the logging commands under the service command, with an unlisted and deprecated alias of logging (#1642)
feat(service/auth): moved the service-auth commands under the service command and renamed to auth, with an unlisted and deprecated alias of service-auth (#1643)

Bug fixes:

fix(docker): Use base image toolchain instead of reinstalling stable, which could pull in an unvalidated Rust version.
fix(compute/serve): ensure hostname has a port number when building pushpin routes (#1631)
fix(manifest): Correct setup.Defined to include checks for ObjectStores and SecretStores (#1639)

Dependencies:

build(deps): golang from 1.24 to 1.25 (#1651)
build(deps): actions/upload-artifact from 5 to 6 (#1603)
build(deps): actions/download-artifact from 6 to 7 (#1603)
build(deps): golang.org/x/term from 0.37.0 to 0.38.0 (#1602)
build(deps): golang.org/x/crypto from 0.45.0 to 0.46.0 (#1602)
build(deps): golang.org/x/mod from 0.30.0 to 0.31.0 (#1602)
build(deps): golang.org/x/net from 0.47.0 to 0.48.0 (#1602)
build(deps): golang.org/x/text from 0.31.0 to 0.32.0 (#1602)
build(deps): github.com/pierrec/lz4/v4 from 4.1.22 to 4.1.23 (#1606)
build(deps): github.com/google/go-querystring from 1.1.0 to 1.2.0 (#1607)
build(deps): golang.org/x/sys from 0.39.0 to 0.40.0 (#1613)
build(deps): golang.org/x/term from 0.38.0 to 0.39.0 (#1613)
build(deps): golang.org/x/crypto from 0.46.0 to 0.47.0 (#1613)
build(deps): golang.org/x/mod from 0.31.0 to 0.32.0 (#1613)
build(deps): golang.org/x/net from 0.48.0 to 0.49.0 (#1613)
build(deps): golang.org/x/text from 0.32.0 to 0.33.0 (#1613)
build(deps): github.com/fastly/go-fastly/v13 from 12.1.0 to 12.1.1 (#1613)
build(deps): github.com/clipperhouse/uax29/v2 from 2.3.0 to 2.3.1 (#1625)
build(deps): github.com/klauspost/compress from 1.18.2 to 1.18.3 (#1625)
build(deps): github.com/pierrec/lz4/v4 from 4.1.23 to 4.1.25 (#1625)
build(deps): github.com/clipperhouse/uax29/v2 from 2.3.1 to 2.4.0 (#1634)
build(deps): github.com/clipperhouse/uax29/v2 from 2.4.0 to 2.5.0 (#1647)
build(deps): golang.org/x/sys from 0.40.0 to 0.41.0 (#1652)
build(deps): golang.org/x/term from 0.39.0 to 0.40.0 (#1652)
build(deps): golang.org/x/crypto from 0.47.0 to 0.48.0 (#1652)
build(deps): golang.org/x/mod from 0.32.0 to 0.33.0 (#1652)
build(deps): github.com/clipperhouse/uax29/v2 from 2.5.0 to 2.6.0 (#1652)
build(deps): github.com/klauspost/compress from 1.18.3 to 1.18.4 (#1652)
build(deps): golang.org/x/net from 0.49.0 to 0.50.0 (#1652)
build(deps): golang.org/x/oauth2 from 0.34.0 to 0.35.0 (#1652)
build(deps): golang.org/x/text from 0.33.0 to 0.34.0 (#1652)
build(deps): github.com/clipperhouse/uax29/v2 from 2.6.0 to 2.7.0 (#1657)
build(deps): golang.org/x/text from 0.33.0 to 0.34.0 (#1652)
build(deps): github.com/mattn/go-runewidth from 0.0.19 to 0.0.20 (#1659)
build(deps): goreleaser/goreleaser-action from 6 to 7 (#1660)

v13.3.0

2025-12-11T22:05:19Z

v13.3.0 (2025-12-11)

Enhancements:

feat(toml/rust): add support for Rust 1.92 (#1599)

v13.2.0

2025-12-10T16:46:11Z

v13.2.0 (2025-12-10)

Enhancements:

feat(commands/ngwaf/workspaces): add support for update operation for NGWAF workspaces (#1578)
feat(commands/ngwaf/lists): add support for CRUD operations for NGWAF Lists at account and workspace levels (#1582)
feat(commands/ngwaf/workspaces/alerts): add support for operations for NGWAF alerts (#1589)
feat(commands/ngwaf/customsignals): add support for CRUD operations for NGWAF Custom Signals (#1592)
feat(commands/ngwaf/threshold): add support for CRUD operations for NGWAF Thresholds (#1595)

Bug fixes:

fix(commands/ngwaf/virtualpatch): ensured a check was in place for the 'update' command that disallowed the --json and --verbose flag to be ran at the same time. (#1596)
fix(commands/ngwaf/redaction): ensured a check was in place for the 'create' and 'update' commands that disallowed the --json and --verbose flag to be ran at the same time. (#1596)

Dependencies:

build(deps): golang.org/x/crypto from 0.43.0 to 0.45.0 (#1584)
build(deps): actions/checkout from 5 to 6 (#1587)
build(deps): golang.org/x/mod from 0.29.0 to 0.30.0 (#1588)
build(deps): github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#1588)
build(deps): github.com/klauspost/compress from 1.18.1 to 1.18.2 (#1593)
build(deps): golang.org/x/sys from 0.38.0 to 0.39.0 (#1594)
build(deps): github.com/hashicorp/cap from 0.11.0 to 0.12.0 (#1594)
build(deps): golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#1594)
build(deps): golang.org/x/sync from 0.18.0 to 0.19.0 (#1594)

v13.1.0

2025-11-12T20:57:26Z

v13.1.0 (2025-11-12)

Enhancements:

feat(service-version): Add JSON support to service-version clone command (#1550)
feat(compute/build): Allow usage of Rust 1.91.1 and later patch releases (#1576)
feat(commands/ngwaf/workspaces): add support for CRUD operations for NGWAF workspaces (#1570)

Dependencies:

build(deps): golangci/golangci-lint-action from 8 to 9 (#1575)
build(deps): golang.org/x/sys from 0.37.0 to 0.38.0 (#1574)
build(deps): golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#1574)
build(deps): golang.org/x/sync from 0.17.0 to 0.18.0 (#1574)

v13.0.0

2025-10-31T01:36:45Z

v13.0.0 (2025-10-30)

Breaking:

breaking(tls-custom): correct 'tls-custom activation enable' command parameters to reflect expected input from API (#1562)
breaking(compute/build): Block version 1.91.0 of Rust as it produces broken WASM packages. (#1571)

Enhancements:

build(dockerfile-rust): add wasm tools to the rust docker container (#1552)
feat(env): add detection for workspace ID (#1560)

Bug fixes:

fix(compute): clarify fastly.toml error message when file not found (#1556)

Dependencies:

build(deps): github.com/hashicorp/cap from 0.10.0 to 0.11.0 (#1546)
build(deps): github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 (#1546)
build(deps): stefanzweifel/git-auto-commit-action from 6 to 7 (#1549)
build(deps): golang.org/x/sys from 0.36.0 to 0.37.0 (#1548)
build(deps): golang.org/x/term from 0.35.0 to 0.36.0 (#1548)
build(deps): golang.org/x/crypto from 0.42.0 to 0.43.0 (#1548)
build(deps): golang.org/x/mod from 0.28.0 to 0.29.0 (#1548)
build(deps): golang.org/x/net from 0.44.0 to 0.45.0 (#1548)
build(deps): golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#1548)
build(deps): golang.org/x/text from 0.29.0 to 0.30.0 (#1548)
build(deps): actions/setup-node from 5 to 6 (#1559)
build(deps): actions/download-artifact from 4 to 5 (#1559)
build(deps): github.com/klauspost/compress from 1.18.0 to 1.18.1 (#1558)
build(deps): golang.org/x/net from 0.45.0 to 0.46.0 (#1558)
build(deps): github.com/clipperhouse/uax29/v2 from 2.2.0 to 2.3.0 (#1564)
build(deps): actions/upload-artifact from 4 to 5 (#1565)
build(deps): actions/download-artifact from 5 to 6 (#1565)

v12.1.0

2025-10-01T13:12:58Z

v12.1.0 (2025-09-30)

Enhancements:

feat(manifest): Enable loading Secret Store configuration through environment variables (#1540)
feat(products): Add enable/disable support for API Discovery (#1543)

Dependencies:

build(deps): golang.org/x/net from 0.43.0 to 0.44.0 (#1538)
build(deps): github.com/fastly/go-fastly/v11 from 11.3.1 to 12.0.0 (#1541)
build(deps): github.com/mattn/go-runewidth from 0.0.16 to 0.0.19 (#1542)
build(deps): github.com/fastly/go-fastly/v11 from 11.3.1 to 12.0.0 (#1541)

v12.0.0

2025-09-10T19:05:24Z

v12.0.0 (2025-09-10)

Breaking:

breaking(kvstoreentry): The 'describe' command now returns only key attributes (ie: generation, metadata) instead of a given key's value (#1529)

Enhancements:

feat(logging): Add support for 'CompressionCodec' and 'GzipLevel' attribute to the HTTPS endpoint.
feat(kvstoreentry): Add support for the 'prefix' parameter for List operations (#1526)
feat(kvstoreentry): Add support for the add, append, prepend, metadata, if_generation_match, and background_fetch 'create' command operations (#1529)
feat(kvstoreentry): Add support for the if_generation_match and metadata 'describe' command operations (#1529)
feat(kvstoreentry): Add support for the if_generation_match and force 'delete' command operations (#1529)
feat(kvstoreentry): Add the 'get' command operation which obtains the value of the item (#1529)

Bug fixes:

fix(manifest): Ensure pushpin section is persisted during manifest file update (#1535)

Dependencies:

build(deps): github.com/ulikunitz/xz from 0.5.12 to 0.5.13 (#1524)
build(deps): github.com/stretchr/testify from 1.10.0 to 1.11.0 (#1527)
build(deps): github.com/ulikunitz/xz from 0.5.13 to 0.5.14 (#1528)
build(deps): github.com/stretchr/testify from 1.11.0 to 1.11.1 (#1530)
build(deps): github.com/ulikunitz/xz from 0.5.14 to 0.5.15 (#1530)
build(deps): actions/setup-node from 4 to 5 (#1534)
build(deps): actions/setup-go from 5 to 6 (#1534)
build(deps): golang.org/x/sys from 0.35.0 to 0.36.0 (#1533)
build(deps): golang.org/x/term from 0.34.0 to 0.35.0 (#1533)
build(deps): github.com/fastly/go-fastly/v11 from 11.3.0 to 11.3.1 (#1533)
build(deps): golang.org/x/crypto from 0.41.0 to 0.42.0 (#1533)
build(deps): golang.org/x/mod from 0.27.0 to 0.28.0 (#1533)
build(deps): golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#1533)
build(deps): golang.org/x/sync from 0.16.0 to 0.17.0 (#1533)
build(deps): golang.org/x/text from 0.28.0 to 0.29.0 (#1533)