Core SDK

Enhancement: Added an allowedLoginMethod property to the base profile schema, letting administrators restrict which credential type (direct-basic, direct-cert-pem, apiml-basic, apiml-cert-pem, or prompt) users are prompted for when logging into a service. Defaults to prompt (existing behavior) when method is not chosen. If you already have a zowe.schema.json file, run the zowe config update-schemas command (or zowe config init again) after upgrading to pick up the new allowedLoginMethod and authOrder properties. #2653
Enhancement: Added the authOrder property to the base profile schema, so it is validated and available for editor IntelliSense. Previously authOrder was accepted at runtime but omitted from the schema. If you already have a zowe.schema.json file, run the zowe config update-schemas command (or zowe config init again) after upgrading to pick up the new allowedLoginMethod and authOrder properties. #2653
If you already have a zowe.schema.json file, run zowe config update-schemas (or zowe config init again) after upgrading to pick up the new allowedLoginMethod and authOrder properties. If you already have a zowe.schema.json file, run the zowe config update-schemas command (or zowe config init again) after upgrading to pick up the new allowedLoginMethod and authOrder properties. #2653

Imperative

Enhancement: Added an allowedLoginMethod base profile property that lets administrators restrict which credential type (direct-basic, direct-cert-pem, apiml-basic, apiml-cert-pem, or prompt) users are prompted for when logging into a service, so entered credentials comply with site requirements. Defaults to prompt (existing behavior) when method is not chosen. #2653
Enhancement: Added the authOrder base profile property to the team config schema so it is validated and available for editor IntelliSense. Previously authOrder was accepted at runtime but omitted from the schema. #2653
If you already have a zowe.schema.json file, run zowe config update-schemas (or zowe config init again) after upgrading to pick up the new allowedLoginMethod and authOrder properties. #2653
BugFix: The ProfileCredentials.defaultCredMgrWithKeytar function now rejects a requireKeytar callback that resolves without providing a keyring. Previously, the credential manager was initialized with no keyring and no load error, so the first credential operation failed with the unhelpful Keytar was not properly loaded due to an unknown cause message. #2898
BugFix: Updated the EnvQuery.getCmdOutput function so that commands are no longer spawned with the shell option. #2905

BugFix: Removed the hard dependency on the process.report object when detecting the Linux libc variant. The process.report object is unavailable in some runtimes that embed Node, such as the VS Code extension host, where reading it threw a TypeError and prevented the keyring from loading at all. Detection now uses filesystem probes first and treats an inconclusive result as glibc. #2898
BugFix: The keyring loader now tries both the gnu and musl prebuilds on Linux, so an incorrect libc detection no longer prevents the module from loading. #2898
BugFix: When a prebuild cannot be loaded, the thrown error now lists every path searched and the underlying failure for each candidate, instead of surfacing only the last resolution error. #2898

Enhancement: Added allowedLoginMethod and AuthOrder options to the z/OSMF profile/schema, allowing users to specifiy those properties to use for z/OSMF operations. #2653