@otalan/cli 1.4.0 → 1.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,14 @@
2
2
 
3
3
  All notable changes to `@otalan/cli` will be documented in this file.
4
4
 
5
+ ## 1.4.1 - 2026-05-22
6
+
7
+ ### Changed
8
+
9
+ - Hide interactive OTA Publish Key input during `otalan login` and validate credentials before saving them.
10
+ - Surface skipped duplicate-bundle checks, non-JSON API error bodies, and truncated bundle table cells more clearly.
11
+ - Harden direct uploads, argument parsing, global config permissions, Expo CLI resolution, and Expo runtime metadata scanning.
12
+
5
13
  ## 1.4.0 - 2026-05-22
6
14
 
7
15
  ### Changed
package/README.md CHANGED
@@ -362,6 +362,8 @@ Runtime version defaults:
362
362
  - Expo runtimeVersion reads `--runtime-version`, Expo export metadata, or Expo config runtimeVersion policies/strings; if none are present, the CLI falls back to the selected platform Expo `version`
363
363
  - `--runtime-version` overrides auto-detection
364
364
 
365
+ Native project file parsing is best-effort. If your `Info.plist`, Xcode build settings, or Gradle files use patterns the CLI cannot read, pass `--runtime-version` explicitly.
366
+
365
367
  For Expo projects, the recommended app config is:
366
368
 
367
369
  ```json
@@ -429,6 +431,7 @@ Current behavior:
429
431
  - `--release-notes` attaches release notes to the published bundle
430
432
  - Expo publish forwards the full generated Otalan satellite manifest when present
431
433
  - Expo publish sends the generated manifest with `runtimeVersion`
434
+ - Expo manifests include the Expo config captured from `bunx expo config --json`; avoid placing secrets in Expo config fields that are not intended to be uploaded
432
435
  - Otalan validates the release ZIP before the publish completes
433
436
  - active rollouts can be paused and resumed later without changing the selected bundle
434
437