Release Notes
Minor Changes
-
b38b760: Add Application Default Credentials (ADC) support.
gwsnow discovers ADC as a fourth credential source, after the encrypted
and plaintext credential files. The lookup order is:GOOGLE_WORKSPACE_CLI_TOKENenv var (raw access token, highest priority)GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILEenv var- Encrypted credentials (
~/.config/gws/credentials.enc) - Plaintext credentials (
~/.config/gws/credentials.json) - ADC —
GOOGLE_APPLICATION_CREDENTIALSenv var (hard error if file missing), then
~/.config/gcloud/application_default_credentials.json(silent if absent)
This means
gcloud auth application-default login --client-id-file=client_secret.json
is now a fully supported auth flow — no need to rungws auth loginseparately.
Bothauthorized_userandservice_accountADC formats are supported.
Install gws 0.6.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/googleworkspace/cli/releases/download/v0.6.0/gws-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/googleworkspace/cli/releases/download/v0.6.0/gws-installer.ps1 | iex"Install prebuilt binaries into your npm project
npm install @googleworkspace/cli@0.6.0Download gws 0.6.0
| File | Platform | Checksum |
|---|---|---|
| gws-aarch64-apple-darwin.tar.gz | Apple Silicon macOS | checksum |
| gws-x86_64-apple-darwin.tar.gz | Intel macOS | checksum |
| gws-x86_64-pc-windows-msvc.tar.gz | x64 Windows | checksum |
| gws-aarch64-unknown-linux-gnu.tar.gz | ARM64 Linux | checksum |
| gws-x86_64-unknown-linux-gnu.tar.gz | x64 Linux | checksum |
| gws-aarch64-unknown-linux-musl.tar.gz | ARM64 MUSL Linux | checksum |
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
gh attestation verify <file-path of downloaded artifact> --repo googleworkspace/cliYou can also download the attestation from GitHub and verify against that directly:
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>