v1.1.0

v1.1.0

Bug Fixes

• OAuth2 UsernameNotFound workaround — xurl auth oauth2 USERNAME now passes the username through to the OAuth2 flow, skipping the broken /2/users/me lookup that has been returning 403 for many developers. (#60)

• Windows OAuth2 authentication — Fixed xurl auth oauth2 on Windows where cmd /c start truncated the authorization URL at the first &, stripping required PKCE parameters. Now uses rundll32 to open the browser with the full URL intact. (#61)

• --app flag fully functional — The --app flag now correctly switches credentials for all commands. Previously it was silently ignored — token reads, saves, clears, auth auto-detection, and webhook CRC signing all used the default app regardless of --app. (#46)

• OAuth2 callback localhost resolution — The OAuth2 callback listener now binds to both 127.0.0.1 and ::1 when using localhost, fixing failures on systems where the browser resolves localhost to IPv6. The listener also starts before opening the browser, eliminating a race condition. (#64)

• OAuth2 token resilience — Token refresh no longer fails when /2/users/me is unavailable. Tokens are preserved with or without a username label, and unnamed tokens are automatically migrated once username lookup succeeds. (#64)

• Firehose endpoint typo — Fixed /2/tweets/firehose/strea/lang/en → /2/tweets/firehose/stream/lang/en in stream detection. (#49)

New Features

• Per-app redirect URI — Apps can now store a redirect_uri in ~/.xurl. Precedence: REDIRECT_URI env var → stored app config → built-in default. New CLI commands: xurl auth apps redirect-uri get/set and --redirect-uri flag on auth apps add/update. (#64)

• --username fallback for shortcut commands — Commands that need your user ID (timeline, mentions, like, etc.) now fall back to username lookup when /2/users/me is unavailable. Use -u USERNAME as a workaround. (#64)

Security

• SKILL.md hardened against secret leakage — Added explicit rules to prevent credential exposure in agent/LLM workflows. Removed examples with inline secret flags. (#34)

v1.0.3

Changelog

• 595ed07 fix: auto-detect version from go module info for go install

---

Released by GoReleaser.

v1.0.2

Changelog

• 94ef6f1 fix: use github.com/xdevplatform/xurl module path for go install

---

Released by GoReleaser.

v1.0.1

Changelog

• 33daf12 Merge pull request #32 from xdevplatform/vardhan/xurl-skills
• 09a173c Merge pull request #33 from xdevplatform/vardhan/multiple-apps
• 77fbd7a added skills
• 8371a07 feat: multi-app support, YAML config, Bubble Tea picker, npm/brew distribution
• 8d24507 fix: npm binary wrapper
• c4a4137 fix: npm wrapper as cli.js to avoid gitignore, unpublish before republish
• 9409424 fix: pass homebrew and npm tokens in release workflow
• 509a89e fix: switch to homebrew_casks, fix npm version placeholder
• 0fed0ee fixes
• 0fc66e9 renamed skills.md to SKILL.md

---

Released by GoReleaser.

v1.0.0

Changelog

• 33daf12 Merge pull request #32 from xdevplatform/vardhan/xurl-skills
• 09a173c Merge pull request #33 from xdevplatform/vardhan/multiple-apps
• 77fbd7a added skills
• 8371a07 feat: multi-app support, YAML config, Bubble Tea picker, npm/brew distribution
• 8d24507 fix: npm binary wrapper
• c4a4137 fix: npm wrapper as cli.js to avoid gitignore, unpublish before republish
• 9409424 fix: pass homebrew and npm tokens in release workflow
• 509a89e fix: switch to homebrew_casks, fix npm version placeholder
• 0fed0ee fixes
• 0fc66e9 renamed skills.md to SKILL.md

---

Released by GoReleaser.

v0.5.0

Changelog

• 3c3298d Added README section
• b310c11 Added quiet and pretty printing options
• 0cc3d7e Merge pull request #25 from xdevplatform/xurl-webhooks
• dd12833 Merge pull request #26 from xdevplatform/migrate-media-upload
• ce68446 Refactor media upload API for clearer endpoint handling and add trace option in CLI
• 5925e0a Removed new scopes
• fc1612e Simplify IsStreamingEndpoint function by removing redundant checks and directly returning the result from StreamingEndpoints.
• f5c7c2c Update author email for CLA
• 8a43134 [Webhooks] Initial commit
• ca87c93 add dm scopes
• 67e2767 fix streaming endpoint bug

---

Released by GoReleaser.

v0.4.6

Changelog

• f13d29d Enhance Error message formatting to return JSON string if applicable.

---

Released by GoReleaser.

v0.4.4

Changelog

• 409f558 Add User-Agent header with version info in API client requests.
• 28ca3ac Implement new Client interface in API, enhance testing with testify, and improve error handling across modules.
• 6b2818d Refactor API client to consolidate request options and add trace support in request handling.
• 428150a Refactor API client to streamline request building and remove redundant auth header retrieval logic.
• 0974a81 Refactor API client to utilize structured request options and enhance code clarity across the application.

---

Released by GoReleaser.

v0.4.3

Changelog

• 3582008 bearer token twurl migration support
• 176ee7b examples in --help flag

---

Released by GoReleaser.

v0.4.2

Changelog

• 5acf8e2 fix verbose for media upload

---

Released by GoReleaser.