v0.299.0

CLI

• Moved file-based OAuth token cache management from the SDK to the CLI. No user-visible change; part of a three-PR sequence that makes the CLI the sole owner of its token cache (#5056).
• Remove the --experimental-is-unified-host flag and stop reading experimental_is_unified_host from .databrickscfg profiles and the DATABRICKS_EXPERIMENTAL_IS_UNIFIED_HOST env var. Unified hosts are now detected exclusively from /.well-known/databricks-config discovery. The experimental_is_unified_host field is retained as a no-op in databricks.yml for schema compatibility (#5047).
• Added interactive pagination for list commands that have a row template (jobs, clusters, apps, pipelines, etc.). When stdin, stdout, and stderr are all TTYs, databricks <resource> list now streams 50 rows at a time and prompts [space] more [enter] all [q|esc] quit. ENTER can be interrupted by q/esc/Ctrl+C between pages. Colors and alignment match the existing non-paged output; column widths stay stable across pages. Piped output and --output json are unchanged (#5015).
• Added experimental OS-native secure token storage opt-in via DATABRICKS_AUTH_STORAGE=secure. Legacy file-backed token storage remains the default (#5008, #5013).
• Fixed a panic in databricks warehouses update-default-warehouse-override when invoked without all required positional arguments (e.g. picking a warehouse from the interactive drop-down and then hitting an index-out-of-range crash). The command now validates arguments up front and returns a usage error. Fixes #5070 via #5079.

Bundles

• Translate relative paths in alert_task.workspace_path on job tasks to fully qualified workspace paths, matching the behavior of other task path fields. Applies to both regular tasks and for_each_task nested tasks (#4836).

Dependency updates

• Added github.com/zalando/go-keyring as a new dependency (dormant until a later release enables experimental secure-storage for OAuth tokens) (#5008).

v0.298.0

CLI

• Added --limit flag to all paginated list commands for client-side result capping (#4984). On jobs list and jobs list-runs the former API page-size flag was renamed to --page-size (hidden) to avoid collision.
• Accept yes in addition to y for confirmation prompts, and show [y/N] to indicate that no is the default.
• Cache /.well-known/databricks-config lookups under ~/.cache/databricks/<version>/host-metadata/ so repeat CLI invocations against the same host skip the ~700ms discovery round trip.
• Deprecated auth env. The command is hidden from help listings and prints a deprecation warning to stderr; it will be removed in a future release.

Bundles

• Remove experimental-jobs-as-code template, superseded by pydabs (#4999).
• Prompt before destroying or recreating Lakebase resources (database instances, synced database tables, postgres projects and branches) (#5052).
• Treat deleted resources as not running in the fail-on-active-runs check (#5044).
• engine/direct: Added support for Vector Search Endpoints (#4887).
• engine/direct: Exclude deploy-only fields (e.g. lifecycle) from the Apps update mask so requests that change both description and lifecycle.started in the same deploy no longer fail with INVALID_PARAMETER_VALUE (#5042, #5051).
• engine/direct: Fix phantom diffs from depends_on reordering in job tasks (#4990).

Dependency updates

• Bump github.com/databricks/databricks-sdk-go from v0.126.0 to v0.128.0 (#4984, #5031).
• Bump Go toolchain to 1.25.9 (#5004).

v0.297.2

Notable Changes

• This release includes a fix for error downloading Terraform: unable to verify checksums signature: openpgp: key expired error observed when running databricks bundle deploy command.

Bundles

• Use hardcoded ArmoredPublicKey for TF binary installation (#5019)

v0.296.1

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.296.0...v0.296.1

v0.295.1

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.295.0...v0.295.1

v0.294.1

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.294.0...v0.294.1

v0.293.1

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.293.0...v0.293.1

v0.291.1

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.291.0...v0.291.1

v0.290.2

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.290.1...v0.290.2

v0.289.2

This is a bugfix release.

It fixes the following error observed when running bundle commands.

error downloading Terraform: unable to verify checksums signature: openpgp: key expired

Full Changelog: v0.289.1...v0.289.2