---
title: "CLI switches to PKCE authentication"
url: https://www.daytona.com/changelog/cli-switches-to-pkce-authentication
---

# CLI switches to PKCE authentication

Published: 2026-07-09 · Version: v0.195.0

Daytona 0.195.0 strengthens CLI authentication by dropping the embedded client secret in favor of PKCE, with supporting work to make package publishing and testing more reliable.

Daytona 0.195.0 strengthens CLI authentication by dropping the embedded client secret in favor of PKCE, with supporting work to make package publishing and testing more reliable.

## Fixes

**Python SDK**: use cache-busting with exponential backoff to handle PyPI publish propagation

## Refactor

**CLI**: remove embedded Auth0 client secret, switch to PKCE

## Chores

sync go.sum for v0.194.0

run e2e per language in parallel and split TS runtime tests

remove monorepo-migration cruft, pin CI poetry to 2.3.2, and properly deprecate daytona_sdk

bump opentelemetry stack to 0.219.0/2.8.0 to clear npm audit findings

**Go SDK**: bump to v0.195.0