- Moved file-based OAuth token cache management from the SDK to the CLI. No user-visible change; part of a three-PR sequence that makes the CLI the sole owner of its token cache.
- Added experimental OS-native secure token storage behind the
--secure-storageflag ondatabricks auth loginand theDATABRICKS_AUTH_STORAGE=secureenvironment variable. Hidden from help during MS1. Legacy file-backed token storage remains the default. - Added experimental OS-native secure token storage opt-in via
DATABRICKS_AUTH_STORAGE=secureor[__settings__].auth_storage = securein.databrickscfg. Legacy file-backed token storage remains the default.
- Added
github.com/zalando/go-keyringas a new dependency (dormant until a later release enables experimental secure-storage for OAuth tokens).