Restish Files

Overview

Restish 2.1.2 is a focused patch release for smoother authenticated API setup, friendlier hardware-backed TLS signer configuration, and a sturdier release process. It includes the Linux OAuth and api sync improvements that were queued for this release, plus the discovery concurrency fix found during release QA.

OAuth and api sync polish

OAuth browser flows on Linux are more reliable, especially when BROWSER contains a command with arguments. Restish now handles whitespace-separated browser commands more carefully and avoids leaking desktop-session environment into the browser handoff where it can confuse xdg-open style launchers.

restish api sync is also quieter when existing OAuth configuration can be reused. Shared discovery transports and OAuth cache keys are hardened so syncing an API can refresh its spec without needlessly prompting or mixing token state between issuers.

Easier PKCS#11 setup

The PKCS#11 TLS signer plugin now auto-selects a token when exactly one token is available. That removes a small but annoying setup step for hardware-backed client certificate flows, while still keeping multi-token environments explicit.

Discovery race fix from release QA

Release QA found a race in parallel OpenAPI discovery: once one probe found a valid spec, canceled sibling probes could still be unwinding through fetch callbacks while api connect or api sync continued and mutated config. Discovery now waits for canceled probes to exit before returning, so callers regain ownership of mutable CLI state only after discovery is fully finished.

Docs, blog, and release readiness

This release adds the new Restish blog section and the first post on the v2 rebuild. Install and upgrade docs were refreshed, Homebrew paths were corrected, release packaging docs were tightened, and the repo now includes a reusable release QA skill with the checks used for this release.

Changelog

• [bfd963] Merge pull request [#365] from rest-sh/fix/release-qa-discovery-race
• [06efa6] Merge pull request [#359] from natalie-o-perret/fix/oauth-linux-reduce-prompts-api-sync
• [0d60d1] Merge pull request [#363] from rest-sh/blog
• [f41392] Merge pull request [#360] from natalie-o-perret/feat/pkcs11-auto-detect-single-token
• [7232c8] Merge pull request [#364] from rest-sh/codex/release-qa-skill
• [b24a1a] fix: wait for canceled discovery probes
• [50b8a6] feat(pkcs11): auto-select token when only one is present
• [ca4627] fix(auth+cli): fix OAuth browser flows on Linux; reduce prompts during api sync
• [69d6b9] fix(auth): harden shared OAuth and sync reuse
• [939f17] fix(oauth): split $BROWSER on whitespace; fix sharedDiscoveryTransport doc
• [f5ca3a] docs: update generated api sync reference
• [0064f5] docs: add Restish blog
• [76bc9f] docs: add release QA skill

Full Changelog: https://github.com/rest-sh/restish/compare/v2.1.1...v2.1.2