> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zapier.com/llms.txt
> Use this file to discover all available pages before exploring further.

# What's changed in v19.3.0

> A `--fail-for-publishing` flag for `validate`, experimental domain filter commands, secret redaction in error messages, and an auth template query param fix

*Released: 2026-10-30*

This release adds a `--fail-for-publishing` flag to `zapier-platform validate`, so a CI check can fail while your integration still has publishing tasks. It also redacts secret-looking query params from URLs in error messages, fixes duplicated query params in requests built from a rendered auth template, and makes generated TypeScript projects work with any package manager.

It also adds experimental `domain-filter` commands. They are hidden from help while they are in development and may change, so do not rely on them yet.

```bash theme={null}
zapier-platform validate --fail-for-publishing
```

Without the flag, `validate` exits with a non-zero code only when your integration is structurally invalid. With it, `validate` also exits with code 1 when the server-side checks report publishing tasks. A passing run does not guarantee that `zapier-platform promote` succeeds, because `promote` runs more checks. See the [`validate` command reference](https://github.com/zapier/zapier-platform/blob/main/packages/cli/docs/cli.md#validate).

## cli

* \[feature] Add a `--fail-for-publishing` flag to `validate` that exits with a non-zero code when publishing tasks remain ([#1362](https://github.com/zapier/zapier-platform/pull/1362))
* \[feature] Add experimental `domain-filter:get`, `domain-filter:set`, and `domain-filter:unset` commands, hidden from help ([#1351](https://github.com/zapier/zapier-platform/pull/1351))
* \[fix] Set `engines.node` to `>=22` to match the Node.js version the CLI already requires at runtime, so npm warns at install time ([#1360](https://github.com/zapier/zapier-platform/pull/1360))
* \[fix] Generated TypeScript projects no longer hardcode `npm` in their scripts, so they work with pnpm, Yarn, and Bun ([#1363](https://github.com/zapier/zapier-platform/pull/1363))

## core

* \[fix] Redact secret-looking query params, such as `api_key` or `token`, from URLs in thrown error messages, stack traces, and logs ([#1368](https://github.com/zapier/zapier-platform/pull/1368))
* \[fix] Rendered auth templates no longer repeat query params that match the target request, which duplicated them in proxied requests ([#1365](https://github.com/zapier/zapier-platform/pull/1365))

## schema

None!

## misc

* \[chore] Pin `simple-git` to 3.36.0 (CVE-2026-28292, CVE-2026-6951) and bump `tmp`, `@xmldom/xmldom`, `form-data`, `adm-zip`, and `vitest` ([#1355](https://github.com/zapier/zapier-platform/pull/1355))
* \[chore] Speed up and stabilize the Windows CLI test job ([#1356](https://github.com/zapier/zapier-platform/pull/1356))
* \[chore] Replace the unmaintained `mock-fs` test dependency with real temporary directories, ahead of Node.js 26 ([#1367](https://github.com/zapier/zapier-platform/pull/1367))