From d3fd73ee04fc20f2f5ded08224c15cd798fda3eb Mon Sep 17 00:00:00 2001
From: "elastic-vault-github-plugin-prod[bot]"
 <150874479+elastic-vault-github-plugin-prod[bot]@users.noreply.github.com>
Date: Thu, 13 Aug 2026 20:18:15 +0000
Subject: [PATCH 1/2] chore: release main

---
 .github/.release-please-manifest.json |  2 +-
 CHANGELOG.md                          | 19 +++++++++++++++++++
 package-lock.json                     |  4 ++--
 package.json                          |  2 +-
 src/cli.ts                            |  2 +-
 5 files changed, 24 insertions(+), 5 deletions(-)

diff --git a/.github/.release-please-manifest.json b/.github/.release-please-manifest.json
index b7cdd63e..113fe29e 100644
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1 +1 @@
-{".":"0.3.0","packages/config-resolver":"0.1.1"}
+{".":"0.3.1","packages/config-resolver":"0.1.1"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0ebc6f7c..dafcae83 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.3.1](https://github.com/elastic/cli/compare/v0.3.0...v0.3.1) (2026-08-13)
+
+
+### Bug Fixes
+
+* **ci:** Write Cloud config to 0600 temp file with cleanup trap ([#536](https://github.com/elastic/cli/issues/536)) ([e4f407c](https://github.com/elastic/cli/commit/e4f407c9c728db7f1a79e6729da8b3f534a6bb2f))
+* **cli:** Report mistyped subcommand before options ([#504](https://github.com/elastic/cli/issues/504)) ([477bbd9](https://github.com/elastic/cli/commit/477bbd92318c641407b147187f85579569efd085))
+* **cloud:** Redact credential responses unless --show-credentials is passed ([#533](https://github.com/elastic/cli/issues/533)) ([759470b](https://github.com/elastic/cli/commit/759470b4c70e35bc300272bce411452426d0b4a4))
+* **es:** Clarify bulk ingest source format is decorative ([#521](https://github.com/elastic/cli/issues/521)) ([91f261c](https://github.com/elastic/cli/commit/91f261cab75cd2ad32bcba4286f98d12de2ef341))
+* **es:** Reject empty, dot, dotdot path segments ([#522](https://github.com/elastic/cli/issues/522)) ([1a317ce](https://github.com/elastic/cli/commit/1a317ce98d91e707fe1fb74485c7b21d7e99822c))
+* **extension:** Add --ignore-scripts to npm install and update calls ([#539](https://github.com/elastic/cli/issues/539)) ([4dc87ca](https://github.com/elastic/cli/commit/4dc87caadee30b665bcca442afa6a6fbd88744bf))
+* **extension:** Resolve symlinks in containment check ([#523](https://github.com/elastic/cli/issues/523)) ([db5fea8](https://github.com/elastic/cli/commit/db5fea8d75c2d078acd625f24f9d201ea31a1632))
+* **extension:** Scrub ambient credentials from extension subprocess environment ([#538](https://github.com/elastic/cli/issues/538)) ([7950cb0](https://github.com/elastic/cli/commit/7950cb078ff01cb2e45cde58aeee7be30c74e96c))
+* **release:** Pin packaging tools and remove cache from release workflow ([#526](https://github.com/elastic/cli/issues/526)) ([7db2ce3](https://github.com/elastic/cli/commit/7db2ce3a5f2a22efe8c42442e9ff5b1cd86f7dd7))
+* **secret-store:** Pass secrets via stdin instead of argv on macOS and Windows ([#534](https://github.com/elastic/cli/issues/534)) ([0d304a2](https://github.com/elastic/cli/commit/0d304a239277a4f4eb09db16cbc6126edb4bd321))
+* Upgrade @elastic/schemas to 0.6.2 ([#531](https://github.com/elastic/cli/issues/531)) ([a9c1a64](https://github.com/elastic/cli/commit/a9c1a64a32f4266e6f133102b2296d29a69bb98c))
+* Validate name and use registry path in uninstallExtension ([#527](https://github.com/elastic/cli/issues/527)) ([e7db6ae](https://github.com/elastic/cli/commit/e7db6aec069c38a884fe59c679efcaac63d22ec6))
+* Warn to stderr when secrets passed as CLI flags ([#535](https://github.com/elastic/cli/issues/535)) ([82cae94](https://github.com/elastic/cli/commit/82cae944a53ff3e2bbfb971b3bf6d78420c19c38))
+
 ## [0.3.0](https://github.com/elastic/cli/compare/v0.2.0...v0.3.0) (2026-08-10)
 
 
diff --git a/package-lock.json b/package-lock.json
index 1fd5919d..0e76ccc0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@elastic/cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@elastic/cli",
-      "version": "0.3.0",
+      "version": "0.3.1",
       "bundleDependencies": [
         "@elastic/config-resolver"
       ],
diff --git a/package.json b/package.json
index cc1da7d2..267cade6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@elastic/cli",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Interact with the Elastic Stack and Elastic Cloud from the command line.",
   "main": "dist/cli.js",
   "bin": {
diff --git a/src/cli.ts b/src/cli.ts
index 01541bc5..4e9249bc 100644
--- a/src/cli.ts
+++ b/src/cli.ts
@@ -34,7 +34,7 @@ for (const arg of argv) {
 }
 
 // x-release-please-start-version
-const VERSION = '0.3.0';
+const VERSION = '0.3.1';
 // x-release-please-end
 
 const program = new Command()

From b74ba51732318285dbb25e7b419439b2d224d4dd Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Thu, 13 Aug 2026 20:19:09 +0000
Subject: [PATCH 2/2] chore: regenerate CLI schema

---
 docs/cli/schema.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/cli/schema.json b/docs/cli/schema.json
index 998d4929..7d0e2e0c 100644
--- a/docs/cli/schema.json
+++ b/docs/cli/schema.json
@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "name": "elastic",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "reservedMetaCommands": [
     "cli-schema"
   ],