v8.18.0

Package Manager Installation

• apt-get, yum, homebrew

Installers

• Debian 64 bit / 32 bit / arm64 (deb)
• Redhat 64 bit / 32 bit / aarch64 (rpm)
• macOS 64 bit / arm (pkg)
• Windows 64 bit / 32 bit (zip)

Binaries

• Linux 64 bit / 32 bit / arm64 (tgz)
• macOS 64 bit / arm (tgz)
• Windows 64 bit / 32 bit (zip)

Docker

docker pull cloudfoundry/cli:8.18.0

What's Changed

• v8: Bump actions/checkout from 5 to 6 in the dependencies group by @dependabot[bot] in #3640
• v8: Bump the dependencies group across 1 directory with 7 updates by @dependabot[bot] in #3645
• Upgrade to golang.org/x/tools v0.39.0 to fix generation by @marckhouzam in #3635
• Fix CVEs and flaking tests [v8] by @gururajsh in #3657
• [v8] IT improvement: Use http.DefaultTransport.Clone() in UAA version check by @anujc25 in #3643
• [v8] Improve integration test flakiness around servicebroker tests by @anujc25 in #3647
• Fix missing completion for AppType 'cnb' by @marckhouzam in #3629
• Make droplet's lifecycle information available by @benjaminguttmann-avtq in #3634
• v8: Bump the dependencies group with 8 updates by @dependabot[bot] in #3667
• v8: Bump the dependencies group with 3 updates by @dependabot[bot] in #3669
• v8: Bump the dependencies group with 6 updates by @dependabot[bot] in #3671
• v8: Bump github.com/google/go-querystring from 1.1.0 to 1.2.0 in the dependencies group by @dependabot[bot] in #3673
• v8: Bump the dependencies group with 7 updates by @dependabot[bot] in #3680
• [v8] Optimize integration test execution to reduce infrastructure load related flakes by @anujc25 in #3681
• [v8] Enhance "service" command for multiple service bindings by @jochenehret in #3660
• [v8] Command "services": Eliminate duplicate app names by @jochenehret in #3663
• [v8] Add "--strategy" parameter to "bind-service" command by @jochenehret in #3654
• Small fixes (contribution docu, integration tests) by @jochenehret in #3683
• v8: Bump the dependencies group with 8 updates by @dependabot[bot] in #3686
• [v8] Update Go version to 1.25.5 to address CVE-2025-61729 (#3682) by @prkalle in #3689
• v8: Bump the dependencies group across 1 directory with 6 updates by @dependabot[bot] in #3695
• [v8] Fix bbl print-env producing output in wrong format by @vuil in #3701
• [v8] Command "unbind-service" can handle multiple bindings by @jochenehret in #3665
• v8: Bump the dependencies group with 3 updates by @dependabot[bot] in #3705
• v8: Bump aws-actions/configure-aws-credentials from 5 to 6 in the dependencies group by @dependabot[bot] in #3707
• [V8] Update Go version to 1.25.7 by @prkalle in #3715
• [v8] Fix pipeline when USE_LATEST_CAPI=true is used by @anujc25 in #3716
• [v8] RFC-0045: Stack management by @simonjjones in #3687
• v8: Bump the dependencies group with 10 updates by @dependabot[bot] in #3721
• v8: Bump github.com/mattn/go-runewidth from 0.0.19 to 0.0.20 in the dependencies group by @dependabot[bot] in #3724
• [V8] RFC-0045: Stack Management Reason by @simonjjones in #3718
• [v8] Enable multiple service binding feature for int tests by @jochenehret in #3711
• [v8] fix: add --json flag to "service-key" subcommand by @blgm in #3728
• v8: Bump the dependencies group with 4 updates by @dependabot[bot] in #3730
• v8: Bump the dependencies group with 2 updates by @dependabot[bot] in #3732
• [v8] Allow setting the route destination port via the CF CLI map-route command by @sethboyles in #3734
• [v8] New command "cleanup-outdated-service-bindings" by @jochenehret in #3712

Full Changelog: v8.17.0...v8.18.0