Gleam v1.15.0 has been released with a major security upgrade: the build tool now exclusively uses Hex's new OAuth2-based authentication system, replacing legacy username/password tokens. Key benefits include mandatory MFA for write operations, short-lived tokens, and password-less client authentication. Other highlights include improved Hex error messages, guard clause ergonomics (string concatenation in guards), JavaScript FFI additions for BitArray, package quality checks requiring a non-default README, code folding support in the language server, improved CLI documentation, snake_case consistency in gleam.toml, and numerous language server improvements including extract anonymous function, module usage renaming, missing type parameter code actions, and more precise completions.
