Changelog: VIP-CLI

Added

• Added new vip defensive-mode commands to enable, disable, and configure defensive mode for an environment.
• Added step-up verification support for protected actions, including automatic retry after verification succeeds.

Changed

• Non-interactive runs now fail fast when step-up verification is required, unless you explicitly opt in to wait with --rechallenge-wait or VIP_RECHALLENGE_WAIT=1.
• Production defensive-mode mutations in non-interactive workflows now require explicit confirmation bypass via --skip-confirmation.
• Dev-env: Limit vip-dev-env.yml.ejs to plain YAML with <%= configDir %> substitution.

Fixed

• Login and logout now clear cached elevated permissions to prevent reuse across account switches on the same machine.

Fixed

• Secure storage may be unavailable even if the keychain provider successfully initializes.

Fixed

• vip wp: Fixed a crash (ERR_USE_AFTER_CLOSE) on Node.js 24 when a websocket reconnect occurred during a long-running non-interactive command.

Fixed

• Fixed file uploads failing with “Response body object should not be disturbed or locked” when an upload request was retried, and ensured retries re-stream the file instead of reusing a consumed stream.

Fixed

• Fixed a CI type-check failure (TS2307) by adding local typings for the optional @postman/node-keytar module used by secure keychain code paths.
• Prefer HTTPS for dev environment login URL.
• Fixed a regression where vip dev-env update could skip wizard prompts in interactive sessions.
• Restored expected interactive behavior while preserving non-interactive behavior for non-TTY execution.
• Dev-env: Fixed false positive SQL import validation errors for exported dumps containing Unicode line-separator bytes inside string data.
• Secure keychain will be used if available.
• No customer-facing changes; test coverage only.
• Dev-env: Fixed SQL imports of MyDumper-format backups failing with ERROR 1050: Table already exists when the local database contains existing tables

Changed

• Show both HTTP and HTTPS versions of the login URL.
• Documented CLI parser migration guardrails for short-option equals syntax and parser-backed option defaults.
• Custom Deployments: Add a pre-deploy check for vip app deploy that warns when the deployment archive contains nested archive files over 50 MB

Related

• Refs PLTFRM-22 / PLTFRM-1032 (prior MyDumper import escalations)
• Companion PRs: #2872 (search-replace size fix), #2873 (ENGINE validation), #2874 (DB tuning)
• 🤖 Generated with Claude Code

Added

• Added vip app deploy-token generate to generate deploy tokens for a selected application environment.
• Added a release smoke test script for high-risk VIP-CLI parser and dispatch checks.

Fixed

• vip dev-env logs implementation. It is now faster and more stable.

• Fixed regression when passing custom commands to vip dev-env exec

Changed

• We’ve changed underlying CLI library to Commander

Changed

• Edited the command description for import media to clarify that it can only be run against a production environment.

Added

• vip db phpmyadmin: Added --print option to output the phpMyAdmin URL to stdout instead of opening it in a browser.
• vip db phpmyadmin: Added --print option to output the phpMyAdmin URL to stdout instead of opening it in a browser.
• vip db phpmyadmin: Added --silent option to suppress all informational messages (useful for scripting).

Fixed

• Directory permissions issues for initOnly containers
• “Operation not permitted” and “Command not found” in Lando entrypoint scripts
• Compatibility with mydumper 0.21.3-1

Fixed

• Do not display extra output when vip dev-env exec is run with --quiet

Added

• Each Dev Env command execution now logs into separate log file and the file location is printed at the end of the execution. This is a quality-of-life improvement aimed at significantly reducing the friction around debugging Dev Env issues.

Removed

• Dev Env: removed PHP 8.1.

Added

• Environment Variables: Add reloading configuration for setting and deleting

Fixed

• vip dev-env sync sql: query site details only when they are needed. This fixes the issue with permissions when @app.env is not specified.

Added

• Dev Environment: phpMyAdmin and Mailpit are now exposed over TLS/SSL.
• Added dangerous --skip-backup flag to vip import sql

Changed

• Updated code for compatibility with Apollo Client v4 and GraphQL v16
• Maintenance: update ESLint configuration and fix issues.

Fixed

• Fixed HTTP header handling to prevent duplicate headers
• Fixed incorrect mutation property access in PHPMyAdmin operations
• Fixed URI encoding in GraphQL operation names
• Fixed error handling in JavaScript files to use Apollo Client v4 error patterns
• Dev Environment: allow docker-compose newer than 2.x

Fixed

• “Proxying to unknown service” warning when Mailpit or phpMyAdmin is not enabled.
• Dev Env: Correctly handle containers without name mappings.

Fixed

• Fixed download URL breaking oneline progress output in export-sql command

Added

• Added --skip-download flag to export sql command for URL-only retrieval

Changed

• Updated the usage example description for vip import media to adhere to style guide

Fixed

• Automatically pull the Proxy image to ensure that we have the most up-to-date and secure traefik`.

Added

• Added isLocalArchive helper to validate local archive files (.tar.gz, .tgz, .zip).
• vip import media now accepts a local archive path; local files are uploaded and then imported via presigned URL.
• Added unit tests for isLocalArchive.
• Added a help/example entry for local-archive usage.
• Parsing of multiline values for the vip wp command
• Experimental support for PHP 8.5 to Dev Environments.

Changed

• Updated vip import media behavior to validate both URL and local archive inputs and present clearer error messages for each failure mode.