v14.0.4

v14.0.4 (2026-02-26)

Documentation:

• fix(changelog): change code blocks to be all on one line #1670

v14.0.0

v14.0.0 (2026-02-25)

BREAKING CHANGES

This release of the Fastly CLI includes a significant reorganization
of the commands which are used to manage the configuration of Fastly
services (both Delivery and Compute services). Specifically, each of
the command families listed below have been changed from
fastly <family> create/delete/describe/list/update to
fastly service <family> create/delete/describe/list/update. For nearly all of these
command families, the previous commands are still available but are
not listed in the fastly help output. In addition, invocations of
the previous commands will generate a deprecation message, which
includes the new command that should be used instead.

The fastly domain family of commands are the lone exception; those
commands exist in both the old and new forms, but the top-level
commands are used to manage 'versionless' domains (a new feature of
the Fastly platform, and those commands were previously named
fastly domain-v1 create/delete/describe/list/update), while the
service-level commands are used to manage 'classic' domains. As a
result, you will need to update any scripts or workflows which used the
fastly domain create/delete/describe/list/update commands to use the
fastly service domain create/delete/describe/list/update commands
instead.

The command families which have been reorganized and are available in
both the old and new forms are:

• acl
• aclentry
• alert
• backend
• dictionary
• dictionary-entry
• healthcheck
• imageoptimizerdefaults
• logging
• purge
• rate-limit
• resource-link
• service-auth
• service-version
• vcl

Breaking:

• breaking(domain) - service-version oriented domain commands have been moved under the service domain command. Versionless domain-v1 commands have been moved to the domain command (#1615)

Enhancements:

• feat(ngwaf/rules): Upgrade go-fastly to v13.0.0 and allow ngwaf rules to accept multival conditions (#1655)
• feat(rust): Allow testing with prerelease Rust versions (#1604)
• feat(compute/hashfiles): remove hashsum subcommand (#1608)
• feat(ngwaf/rules): add support for CRUD operations for NGWAF rules (#1605)
• feat(compute/deploy): added the --no-default-domain flag to allow for the skipping of automatic domain creation when deploying a Compute service(#1610)
• refactor(argparser/flags.go): add flag conversion utilities for converting string flags to bools and checking ascending and desecnding flags (#1611)
• feat(service/purge): Add 'service purge' command as replacement for 'purge', with an unlisted and deprecated alias of 'purge'. (#1612)
• feat(service/version): Add 'service version ...' commands as replacements for 'service-version ...', with unlisted and deprecated aliases of 'service-version ...'. (#1614)
• feat(service/vcl): moved the vcl command under the service command, with an unlisted and deprecated alias of vcl (#1616)
• feat(service/healthcheck): moved the healthcheck command under the service command, with an unlisted and deprecated alias of healthcheck (#1619)
• feat(service/backend): moved the backend command under the service command, with an unlisted and deprecated alias of backend (#1621)
• feat(service/acl): moved the acl and aclentry commands under the service command, with a unlisted and deprecated aliases of acl and aclentry (#1621)
• feat(version): If the latest version is at least one major version higher than the current version, provide links to the release notes for the major version(s) so the user can review them before upgrading. (#1623)
• feat(service/imageoptimizerdefaults): moved the imageoptimizerdefaults commands under the service command, with an unlisted and deprecated alias of imageoptimizerdefaults (#1627)
• feat(service/alert): moved the alerts command to the service alert command, with an unlisted and deprecated alias of alerts (#1616)
• feat(service/dictionary-entry): moved the dictionary-entry commands under the service command, with an unlisted and deprecated alias of dictionary-entry (#1628)
• feat(service/dictionary): moved the dictionary command under the service command, with an unlisted and deprecated alias of dictionary (#1621)
• feat(service/ratelimit): moved the rate-limit commands under the service command, with an unlisted and deprecated alias of rate-limit (#1632)
• feat(compute/build): Remove Rust version restriction, allowing 1.93.0 and later versions to be used. (#1633)
• feat(service/resourcelink): moved the resource-link commands under the service command, with an unlisted and deprecated alias of resource-link (#1635)
• feat(service/logging): moved the logging commands under the service command, with an unlisted and deprecated alias of logging (#1642)
• feat(service/auth): moved the service-auth commands under the service command and renamed to auth, with an unlisted and deprecated alias of service-auth (#1643)

Bug fixes:

• fix(docker): Use base image toolchain instead of reinstalling stable, which could pull in an unvalidated Rust version.
• fix(compute/serve): ensure hostname has a port number when building pushpin routes (#1631)
• fix(manifest): Correct setup.Defined to include checks for ObjectStores and SecretStores (#1639)

Dependencies:

• build(deps): golang from 1.24 to 1.25 (#1651)
• build(deps): actions/upload-artifact from 5 to 6 (#1603)
• build(deps): actions/download-artifact from 6 to 7 (#1603)
• build(deps): golang.org/x/term from 0.37.0 to 0.38.0 (#1602)
• build(deps): golang.org/x/crypto from 0.45.0 to 0.46.0 (#1602)
• build(deps): golang.org/x/mod from 0.30.0 to 0.31.0 (#1602)
• build(deps): golang.org/x/net from 0.47.0 to 0.48.0 (#1602)
• build(deps): golang.org/x/text from 0.31.0 to 0.32.0 (#1602)
• build(deps): github.com/pierrec/lz4/v4 from 4.1.22 to 4.1.23 (#1606)
• build(deps): github.com/google/go-querystring from 1.1.0 to 1.2.0 (#1607)
• build(deps): golang.org/x/sys from 0.39.0 to 0.40.0 (#1613)
• build(deps): golang.org/x/term from 0.38.0 to 0.39.0 (#1613)
• build(deps): golang.org/x/crypto from 0.46.0 to 0.47.0 (#1613)
• build(deps): golang.org/x/mod from 0.31.0 to 0.32.0 (#1613)
• build(deps): golang.org/x/net from 0.48.0 to 0.49.0 (#1613)
• build(deps): golang.org/x/text from 0.32.0 to 0.33.0 (#1613)
• build(deps): github.com/fastly/go-fastly/v13 from 12.1.0 to 12.1.1 (#1613)
• build(deps): github.com/clipperhouse/uax29/v2 from 2.3.0 to 2.3.1 (#1625)
• build(deps): github.com/klauspost/compress from 1.18.2 to 1.18.3 (#1625)
• build(deps): github.com/pierrec/lz4/v4 from 4.1.23 to 4.1.25 (#1625)
• build(deps): github.com/clipperhouse/uax29/v2 from 2.3.1 to 2.4.0 (#1634)
• build(deps): github.com/clipperhouse/uax29/v2 from 2.4.0 to 2.5.0 (#1647)
• build(deps): golang.org/x/sys from 0.40.0 to 0.41.0 (#1652)
• build(deps): golang.org/x/term from 0.39.0 to 0.40.0 (#1652)
• build(deps): golang.org/x/crypto from 0.47.0 to 0.48.0 (#1652)
• build(deps): golang.org/x/mod from 0.32.0 to 0.33.0 (#1652)
• build(deps): github.com/clipperhouse/uax29/v2 from 2.5.0 to 2.6.0 (#1652)
• build(deps): github.com/klauspost/compress from 1.18.3 to 1.18.4 (#1652)
• build(deps): golang.org/x/net from 0.49.0 to 0.50.0 (#1652)
• build(deps): golang.org/x/oauth2 from 0.34.0 to 0.35.0 (#1652)
• build(deps): golang.org/x/text from 0.33.0 to 0.34.0 ([#1652](https:/...

v13.3.0

v13.3.0 (2025-12-11)

Enhancements:

• feat(toml/rust): add support for Rust 1.92 (#1599)

v13.2.0

v13.2.0 (2025-12-10)

Enhancements:

• feat(commands/ngwaf/workspaces): add support for update operation for NGWAF workspaces (#1578)
• feat(commands/ngwaf/lists): add support for CRUD operations for NGWAF Lists at account and workspace levels (#1582)
• feat(commands/ngwaf/workspaces/alerts): add support for operations for NGWAF alerts (#1589)
• feat(commands/ngwaf/customsignals): add support for CRUD operations for NGWAF Custom Signals (#1592)
• feat(commands/ngwaf/threshold): add support for CRUD operations for NGWAF Thresholds (#1595)

Bug fixes:

• fix(commands/ngwaf/virtualpatch): ensured a check was in place for the 'update' command that disallowed the --json and --verbose flag to be ran at the same time. (#1596)
• fix(commands/ngwaf/redaction): ensured a check was in place for the 'create' and 'update' commands that disallowed the --json and --verbose flag to be ran at the same time. (#1596)

Dependencies:

• build(deps): golang.org/x/crypto from 0.43.0 to 0.45.0 (#1584)
• build(deps): actions/checkout from 5 to 6 (#1587)
• build(deps): golang.org/x/mod from 0.29.0 to 0.30.0 (#1588)
• build(deps): github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#1588)
• build(deps): github.com/klauspost/compress from 1.18.1 to 1.18.2 (#1593)
• build(deps): golang.org/x/sys from 0.38.0 to 0.39.0 (#1594)
• build(deps): github.com/hashicorp/cap from 0.11.0 to 0.12.0 (#1594)
• build(deps): golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#1594)
• build(deps): golang.org/x/sync from 0.18.0 to 0.19.0 (#1594)

v13.1.0

v13.1.0 (2025-11-12)

Enhancements:

• feat(service-version): Add JSON support to service-version clone command (#1550)
• feat(compute/build): Allow usage of Rust 1.91.1 and later patch releases (#1576)
• feat(commands/ngwaf/workspaces): add support for CRUD operations for NGWAF workspaces (#1570)

Dependencies:

• build(deps): golangci/golangci-lint-action from 8 to 9 (#1575)
• build(deps): golang.org/x/sys from 0.37.0 to 0.38.0 (#1574)
• build(deps): golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#1574)
• build(deps): golang.org/x/sync from 0.17.0 to 0.18.0 (#1574)

v13.0.0

v13.0.0 (2025-10-30)

Breaking:

• breaking(tls-custom): correct 'tls-custom activation enable' command parameters to reflect expected input from API (#1562)
• breaking(compute/build): Block version 1.91.0 of Rust as it produces broken WASM packages. (#1571)

Enhancements:

• build(dockerfile-rust): add wasm tools to the rust docker container (#1552)
• feat(env): add detection for workspace ID (#1560)

Bug fixes:

• fix(compute): clarify fastly.toml error message when file not found (#1556)

Dependencies:

• build(deps): github.com/hashicorp/cap from 0.10.0 to 0.11.0 (#1546)
• build(deps): github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 (#1546)
• build(deps): stefanzweifel/git-auto-commit-action from 6 to 7 (#1549)
• build(deps): golang.org/x/sys from 0.36.0 to 0.37.0 (#1548)
• build(deps): golang.org/x/term from 0.35.0 to 0.36.0 (#1548)
• build(deps): golang.org/x/crypto from 0.42.0 to 0.43.0 (#1548)
• build(deps): golang.org/x/mod from 0.28.0 to 0.29.0 (#1548)
• build(deps): golang.org/x/net from 0.44.0 to 0.45.0 (#1548)
• build(deps): golang.org/x/oauth2 from 0.31.0 to 0.32.0 (#1548)
• build(deps): golang.org/x/text from 0.29.0 to 0.30.0 (#1548)
• build(deps): actions/setup-node from 5 to 6 (#1559)
• build(deps): actions/download-artifact from 4 to 5 (#1559)
• build(deps): github.com/klauspost/compress from 1.18.0 to 1.18.1 (#1558)
• build(deps): golang.org/x/net from 0.45.0 to 0.46.0 (#1558)
• build(deps): github.com/clipperhouse/uax29/v2 from 2.2.0 to 2.3.0 (#1564)
• build(deps): actions/upload-artifact from 4 to 5 (#1565)
• build(deps): actions/download-artifact from 5 to 6 (#1565)

v12.1.0

v12.1.0 (2025-09-30)

Enhancements:

• feat(manifest): Enable loading Secret Store configuration through environment variables (#1540)
• feat(products): Add enable/disable support for API Discovery (#1543)

Dependencies:

• build(deps): golang.org/x/net from 0.43.0 to 0.44.0 (#1538)
• build(deps): github.com/fastly/go-fastly/v11 from 11.3.1 to 12.0.0 (#1541)
• build(deps): github.com/mattn/go-runewidth from 0.0.16 to 0.0.19 (#1542)
• build(deps): github.com/fastly/go-fastly/v11 from 11.3.1 to 12.0.0 (#1541)

v12.0.0

v12.0.0 (2025-09-10)

Breaking:

• breaking(kvstoreentry): The 'describe' command now returns only key attributes (ie: generation, metadata) instead of a given key's value (#1529)

Enhancements:

• feat(logging): Add support for 'CompressionCodec' and 'GzipLevel' attribute to the HTTPS endpoint.
• feat(kvstoreentry): Add support for the 'prefix' parameter for List operations (#1526)
• feat(kvstoreentry): Add support for the add, append, prepend, metadata, if_generation_match, and background_fetch 'create' command operations (#1529)
• feat(kvstoreentry): Add support for the if_generation_match and metadata 'describe' command operations (#1529)
• feat(kvstoreentry): Add support for the if_generation_match and force 'delete' command operations (#1529)
• feat(kvstoreentry): Add the 'get' command operation which obtains the value of the item (#1529)

Bug fixes:

• fix(manifest): Ensure pushpin section is persisted during manifest file update (#1535)

Dependencies:

• build(deps): github.com/ulikunitz/xz from 0.5.12 to 0.5.13 (#1524)
• build(deps): github.com/stretchr/testify from 1.10.0 to 1.11.0 (#1527)
• build(deps): github.com/ulikunitz/xz from 0.5.13 to 0.5.14 (#1528)
• build(deps): github.com/stretchr/testify from 1.11.0 to 1.11.1 (#1530)
• build(deps): github.com/ulikunitz/xz from 0.5.14 to 0.5.15 (#1530)
• build(deps): actions/setup-node from 4 to 5 (#1534)
• build(deps): actions/setup-go from 5 to 6 (#1534)
• build(deps): golang.org/x/sys from 0.35.0 to 0.36.0 (#1533)
• build(deps): golang.org/x/term from 0.34.0 to 0.35.0 (#1533)
• build(deps): github.com/fastly/go-fastly/v11 from 11.3.0 to 11.3.1 (#1533)
• build(deps): golang.org/x/crypto from 0.41.0 to 0.42.0 (#1533)
• build(deps): golang.org/x/mod from 0.27.0 to 0.28.0 (#1533)
• build(deps): golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#1533)
• build(deps): golang.org/x/sync from 0.16.0 to 0.17.0 (#1533)
• build(deps): golang.org/x/text from 0.28.0 to 0.29.0 (#1533)

v11.5.0

v11.5.0 (2025-08-20)

Enhancements:

• feat(vcl): Allow showing of generated VCL for a service version #1498
• feat(compute/serve): Add experimental "enable Pushpin" mode (#1509, #1520)
• feat(object-storage): improve access-keys list output (#1513)
• refactor(domainv1,tools): use updated go-fastly domainmanagement imports and types (#1517)
• feat(imageoptimizerdefaults): Support for retrieving and updating Image Optimizer defaults for a given VCL service (#1518)

Dependencies:

• build(deps): github.com/fastly/go-fastly/v11 from 10 to 111 (#14XX)
• build(deps): golang.org/x/sys from 0.33.0 to 0.34.0 (#1508)
• build(deps): golang.org/x/term from 0.32.0 to 0.33.0 (#1508)
• build(deps): golang.org/x/crypto from 0.39.0 to 0.40.0 (#1508)
• build(deps): golang.org/x/mod from 0.25.0 to 0.26.0 (#1508)
• build(deps): golang.org/x/net from 0.41.0 to 0.42.0 (#1508)
• build(deps): golang.org/x/sync from 0.15.0 to 0.16.0 (#1508)
• build(deps): golang.org/x/text from 0.26.0 to 0.27.0 (#1508)
• build(deps): github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0 (#1510)
• build(deps): golang.org/x/sys from 0.34.0 to 0.35.0 (#1516)
• build(deps): golang.org/x/term from 0.33.0 to 0.34.0 (#1516)
• build(deps): github.com/hashicorp/cap from 0.9.0 to 0.10.0 (#1516)
• build(deps): golang.org/x/crypto from 0.40.0 to 0.41.0 (#1516)
• build(deps): golang.org/x/mod from 0.26.0 to 0.27.0 (#1516)
• build(deps): golang.org/x/net from 0.42.0 to 0.43.0 (#1516)
• build(deps): golang.org/x/text from 0.27.0 to 0.28.0 (#1516)
• build(deps): actions/checkout from 4 to 5 (#1515)
• build(deps): actions/download-artifact from 4 to 5 (#1515)

v11.4.0

v11.4.0 (2025-07-09)

Enhancements:

• feat(env): Add environment variable for extending the UserAgent string. (#1502)

Bug fixes:

• fix(sso): Ensure that OPTIONS requests sent by browsers do not break SSO authentication. (#1496)

Dependencies:

• build(deps): github.com/fastly/go-fastly/v10 from 10.3.0 to 10.4.0 (#1499)
• build(deps): stefanzweifel/git-auto-commit-action from 5 to 6 (#1497)
• build(deps): github.com/fastly/go-fastly/v10 from 10.4.0 to 10.5.0 (#1501)
• build(deps): github.com/andybalholm/brotli from 1.1.1 to 1.2.0 (#1501)
• build(deps): github.com/Masterminds/semver/v3 from 3.3.1 to 3.4.0 (#1503)
• build(deps): github.com/fastly/go-fastly/v10 from 10.5.0 to 10.5.1 (#1504)