v0.19.3

charmbracelet/crushv0.19.3Nov 29, 2025by github-actions[bot]

AI Summary

This is a small bug fix release for Crush that addresses an OAuth token expiration issue with Claude Code Max integration. Previously, tokens (which last 8 hours) were only refreshed at boot, causing them to expire if Crush was kept open for extended periods. The fix implements automatic background token refresh without requiring a restart.

Key Highlights

Fixed OAuth token expiration issue for Claude Code Max integration
Tokens now refresh automatically in the background
No restart required for token refresh
Resolved issue where tokens expired after 8 hours of keeping Crush open

New Features

Automatic background refresh of OAuth tokens for Claude Code Max

Full Release Notes

# A small fix for Claude Code Max

Claude Code Max tokens last 8 hours. Crush refreshed that at boot only, but if you kept Crush open for that long, it would eventually expire. We'll now refresh tokens automatically without a restart.

### Fixed
* b621f9312f4e7677062e3dec2028091279ba4b2d: fix: refresh oauth token in the background (@raphamorim)

---

<details>
<summary>Verifying the artifacts</summary>

First, download the [`checksums.txt` file](https://github.com/charmbracelet/crush/releases/download/v0.19.3/checksums.txt), for example, with `wget`:

```bash
wget 'https://github.com/charmbracelet/crush/releases/download/v0.19.3/checksums.txt'
```

Then, verify it using [`cosign`](https://github.com/sigstore/cosign):

```bash
cosign verify-blob \
  --certificate-identity 'https://github.com/charmbracelet/meta/.github/workflows/goreleaser.yml@refs/heads/main' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --cert 'https://github.com/charmbracelet/crush/releases/download/v0.19.3/checksums.txt.pem' \
  --signature 'https://github.com/charmbracelet/crush/releases/download/v0.19.3/checksums.txt.sig' \
  ./checksums.txt
```

If the output is `Verified OK`, you can safely use it to verify the checksums of other artifacts you downloaded from the release using `sha256sum`:

```bash
sha256sum --ignore-missing -c checksums.txt
```

Done! You artifacts are now verified!

</details>

<a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a>

Thoughts? Questions? We love hearing from you. Feel free to reach out on [X](https://x.com/charmcli), [Discord](https://charm.land/discord), [Slack](https://charm.land/slack), [The Fediverse](https://mastodon.social/@charmcli), [Bluesky](https://bsky.app/profile/charm.land).