v0.22.5

blacklanternsecurity/bbotv0.22.5Mar 31, 2026by github-actions[bot]

AI Summary

This release focuses on improving security auditing, dependency management, and migrates the configuration format from YAML to TOML.

Key Highlights

Added automated dependency vulnerability scanning via cargo-audit and license auditing via cargo-deny.
Migrated configuration format from YAML to TOML (refactored serde_yaml).
Improved npm postinstall verification by including SHA256 checksum checks.
Added auto-installation of the binary if it is missing during execution.

Breaking Changes

Migration from YAML to TOML configuration format requires users to update their configuration files.

New Features

Auto-install binary on run if missing

Full Release Notes

## Installation

Download the archive for your OS and architecture from the assets below.

### Linux / macOS

Replace `<target>` with your platform (e.g., `aarch64-apple-darwin` or `x86_64-unknown-linux-gnu`).

```bash
# 1. Download the archive and its checksum
curl -sLO https://github.com/googleworkspace/cli/releases/download/v0.22.5/google-workspace-cli-<target>.tar.gz
curl -sLO https://github.com/googleworkspace/cli/releases/download/v0.22.5/google-workspace-cli-<target>.tar.gz.sha256

# 2. Verify the checksum
shasum -a 256 -c google-workspace-cli-<target>.tar.gz.sha256

# 3. Extract and install
tar -xzf google-workspace-cli-<target>.tar.gz
chmod +x gws
sudo mv gws /usr/local/bin/
```

### Windows

1. Download `google-workspace-cli-x86_64-pc-windows-msvc.zip` and its `.sha256` file
2. Verify the checksum (e.g., using PowerShell `Get-FileHash`)
3. Extract the archive and move `gws.exe` to a directory included in your system `PATH`.

---


## What's Changed
* ci: pin cross-rs to v0.2.5 in release workflow by @jpoehnelt in https://github.com/googleworkspace/cli/pull/651
* fix: verify SHA256 checksum in npm postinstall script by @jpoehnelt in https://github.com/googleworkspace/cli/pull/650
* ci: add cargo-audit workflow for dependency vulnerability scanning by @jpoehnelt in https://github.com/googleworkspace/cli/pull/649
* fix: auto-install binary on run if missing by @jpoehnelt in https://github.com/googleworkspace/cli/pull/654
* ci: add cargo-deny for license, advisory, and source auditing by @jpoehnelt in https://github.com/googleworkspace/cli/pull/653
* docs: update installation instructions to prioritize github releases by @jpoehnelt in https://github.com/googleworkspace/cli/pull/656
* refactor: drop serde_yaml by migrating to toml by @jpoehnelt in https://github.com/googleworkspace/cli/pull/657
* chore: release versions by @googleworkspace-bot in https://github.com/googleworkspace/cli/pull/655


**Full Changelog**: https://github.com/googleworkspace/cli/compare/v0.22.4...v0.22.5