0.11.1

Release Notes

Patch Changes

• adbca87: Fix --format csv for array-of-arrays responses (e.g. Sheets values API)

Install gws 0.11.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.11.1/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.11.1/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.11.1

Download gws 0.11.1

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.11.0

Release Notes

Minor Changes

• 4d4b09f: Add --cc and --bcc flags to +send, --to and --bcc to +reply and +reply-all, and --bcc to +forward.

Install gws 0.11.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.11.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.11.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.11.0

Download gws 0.11.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.10.0

Release Notes

Minor Changes

• 8d89325: Add GOOGLE_WORKSPACE_CLI_KEYRING_BACKEND env var for explicit keyring backend selection (keyring or file). Fixes credential key loss in Docker/keyring-less environments by never deleting .encryption_key and always persisting it as a fallback.

Patch Changes

• 06aa698: fix(auth): dynamically fetch scopes from Discovery docs when -s specifies services not in static scope lists
• 06aa698: fix(auth): format extract_scopes_from_doc and deduplicate dynamic scopes
• 5e7d120: Bring +forward behavior in line with Gmail's web UI: keep the forward in the sender's original thread, add a blank line between the forwarded message metadata and body, and remove the spurious closing delimiter.
• 2782cf1: Fix gmail +triage 403 error by using gmail.readonly scope instead of gmail.modify to avoid conflict with gmail.metadata scope that does not support the q parameter

Install gws 0.10.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.10.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.10.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.10.0

Download gws 0.10.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.9.1

Release Notes

Patch Changes

• 5872dbe: Stop persisting encryption key to .encryption_key file when OS keyring is available. Existing file-based keys are migrated into the keyring and the file is removed on next CLI invocation.

Install gws 0.9.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.9.1/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.9.1/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.9.1

Download gws 0.9.1

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.9.0

Release Notes

Minor Changes

• 7d15365: feat(gmail): add +reply, +reply-all, and +forward helpers

  Adds three new Gmail helper commands:

  • +reply -- reply to a message with automatic threading
  • +reply-all -- reply to all recipients with --remove/--cc support
  • +forward -- forward a message to new recipients

Patch Changes

• 08716f8: Fix garbled non-ASCII email subjects in gmail +send by RFC 2047 encoding the Subject header and adding MIME-Version/Content-Type headers.

• f083eb9: Improve gws auth setup project creation failures in step 3:

  • Detect Google Cloud Terms of Service precondition failures and show actionable guidance (gcloud auth list, account verification, Console ToS URL).
  • Detect invalid project ID format / already-in-use errors and show clearer guidance.
  • In interactive setup, keep the wizard open and re-prompt for a new project ID instead of exiting immediately on create failures.

• 789e7f1: Switch reqwest TLS from bundled Mozilla roots to native OS certificate store

  This allows the CLI to trust custom or corporate CA certificates installed
  in the system trust store, fixing TLS errors in enterprise environments.

Install gws 0.9.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.9.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.9.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.9.0

Download gws 0.9.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.8.1

Release Notes

Patch Changes

• 4d41e52: Prioritize local project configuration and GOOGLE_WORKSPACE_PROJECT_ID over global Application Default Credentials (ADC) for quota attribution. This fixes 403 errors when the Drive API is disabled in a global gcloud project but enabled in the project configured for gws.

Install gws 0.8.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.8.1/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.8.1/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.8.1

Download gws 0.8.1

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.8.0

Release Notes

Minor Changes

• dd3fc90: Remove mcp command

Install gws 0.8.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.8.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.8.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.8.0

Download gws 0.8.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.7.0

Release Notes

Minor Changes

• e1505af: Remove multi-account, domain-wide delegation, and impersonation support. Removes gws auth list, gws auth default, --account flag, GOOGLE_WORKSPACE_CLI_ACCOUNT and GOOGLE_WORKSPACE_CLI_IMPERSONATED_USER env vars.

Patch Changes

• 54b3b31: Move x-goog-user-project header from default client headers to API request builder, fixing Discovery Document fetches failing with 403 when the quota project lacks certain APIs enabled

Install gws 0.7.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.7.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.7.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.7.0

Download gws 0.7.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.6.3

Release Notes

Patch Changes

• 322529d: Document all environment variables and enable GOOGLE_WORKSPACE_CLI_CONFIG_DIR in release builds

• 2173a92: Send x-goog-user-project header when using ADC with a quota_project_id

• 1f47420: fix: extract CLA label job into dedicated workflow to prevent feedback loop

  The Automation workflow's check_run: [completed] trigger caused a feedback
  loop — every workflow completion fired a check_run event, re-triggering
  Automation, which produced another check_run event, and so on. Moving the
  CLA label job to its own cla.yml workflow eliminates the trigger from
  Automation entirely.

• 132c3b1: fix: warn on credential file permission failures instead of ignoring

  Replaced silent let _ = on set_permissions calls in save_encrypted
  with eprintln! warnings so users are aware if their credential files
  end up with insecure permissions. Also log keyring access failures
  instead of silently falling through to file storage.

• a2cc523: Add x86_64-unknown-linux-musl build target for Linux musl/static binary support

• c86b964: Fix multi-account selection: MCP server now respects GOOGLE_WORKSPACE_CLI_ACCOUNT env var (#221), and --account flag before service name no longer causes parse errors (#181)

• ff53538: Fix scope selection to use first (broadest) scope instead of all method scopes, preventing gmail.metadata restrictions from blocking query parameters

• c80eb52: Replace strip_suffix(".readonly").unwrap() with unwrap_or fallback

  Two call sites used .strip_suffix(".readonly").unwrap() which would
  panic if a scope URL marked as is_readonly didn't actually end with
  ".readonly". While the current data makes this unlikely, using
  unwrap_or is a defensive improvement that prevents potential panics
  from inconsistent discovery data.

• 9a780d7: Log token cache decryption/parse errors instead of silently swallowing

  Previously, load_from_disk used four nested if let Ok blocks that
  silently returned an empty map on any failure. When the encryption key
  changed or the cache was corrupted, tokens silently stopped loading and
  users were forced to re-authenticate with no explanation.

  Now logs specific warnings to stderr for decryption failures, invalid
  UTF-8, and JSON parse errors, with a hint to re-authenticate.

• 6daf90d: Fix MCP tool schemas to conditionally include body, upload, and page_all properties only when the underlying Discovery Document method supports them. body is included only when a request body is defined, upload only when supportsMediaUpload is true, and page_all only when the method has a pageToken parameter. Also drops empty body: {} objects that LLMs commonly send on GET methods, preventing 400 errors from Google APIs.

Install gws 0.6.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.6.3/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.6.3/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.6.3

Download gws 0.6.3

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.tar.gz	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
gws-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

0.6.0

Release Notes

Minor Changes

• b38b760: Add Application Default Credentials (ADC) support.

  gws now discovers ADC as a fourth credential source, after the encrypted
  and plaintext credential files. The lookup order is:

  1. GOOGLE_WORKSPACE_CLI_TOKEN env var (raw access token, highest priority)
  2. GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE env var
  3. Encrypted credentials (~/.config/gws/credentials.enc)
  4. Plaintext credentials (~/.config/gws/credentials.json)
  5. ADC — GOOGLE_APPLICATION_CREDENTIALS env var (hard error if file missing), then
     ~/.config/gcloud/application_default_credentials.json (silent if absent)

  This means gcloud auth application-default login --client-id-file=client_secret.json
  is now a fully supported auth flow — no need to run gws auth login separately.
  Both authorized_user and service_account ADC formats are supported.

Install gws 0.6.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.6.0/gws-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.6.0/gws-installer.ps1 | iex"

Install prebuilt binaries into your npm project

npm install @googleworkspace/cli@0.6.0

Download gws 0.6.0

File	Platform	Checksum
gws-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
gws-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
gws-x86_64-pc-windows-msvc.tar.gz	x64 Windows	checksum
gws-aarch64-unknown-linux-gnu.tar.gz	ARM64 Linux	checksum
gws-x86_64-unknown-linux-gnu.tar.gz	x64 Linux	checksum
gws-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cli

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>