Secrets Manager CLI 1.4.0

Released on Jun 17, 2026

• KSM-975: Fixed the keyring warning on binary installs pointing users to pip install advice instead of the -keyring binary download; the bracketed advice also triggered zsh glob errors.
• KSM-1014: Fixed the keyring-unavailable warning on binary installs pointing users to a non-existent -keyring binary download; the warning now directs users to re-run the installer and enable the "OS Keyring Support" component.
• KSM-980: Fixed binary installs writing keeper.ini to the current working directory instead of the user's home directory.
• KSM-981: ksm secret get now surfaces linked records (previously PAM credential records were invisible); linked UIDs appear in a links array in JSON output and a Links table in text output.
• KSM-1015: Links output is now interpretable. Each link entry in JSON gains a decoded object (plain link data parsed; ai_settings/jit_settings decrypted with the record key), with raw fields preserved. The text Links table now shows Linked Record UID (self-links labeled (self)), Path, and decoded Link Data columns.
• KSM-1003: Fixed binary installs writing ksm_cache.bin to the current working directory when caching was enabled; the cache now co-locates with keeper.ini in the home directory.
• KSM-1005: Fixed ksm shell crashing on launch (UpdateChecker.check() takes 1 positional argument but 3 were given) on fresh installs after the update-checker 1.0.0 release.
• KSM-983: Platform installers (macOS, Windows, Linux) now offer optional component selection at install time. OS Keyring Support and Cloud Sync can be independently enabled via checkboxes/prompts in a single installer.
• KSM-1006: Fixed the macOS installer producing a broken install; the postinstall step now symlinks the PyInstaller onedir layout so the binary resolves its _internal directory.

Links:

• PyPI Package
• Docker Hub
• GitHub Releases
• See CLI Documentation