---
title: "Upgrading Hex security"
url: https://daily.dev/posts/upgrading-hex-security-54sj94nyh
source_url: https://gleam.run/news/upgrading-hex-security
type: article
source: "Gleam"
published: 2026-03-16T16:26:07.996Z
updated: 2026-03-16T16:26:33.623Z
tags: ["erlang", "gleam"]
reading_time: 14
upvotes: 24
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Upgrading Hex security

**[Gleam](https://daily.dev/sources/gleam)** · 14 min read · 24 upvotes · 0 comments

## Summary

Gleam v1.15.0 has been released with a major security upgrade: the build tool now exclusively uses Hex's new OAuth2-based authentication system, replacing legacy username/password tokens. Key benefits include mandatory MFA for write operations, short-lived tokens, and password-less client authentication. Other highlights include improved Hex error messages, guard clause ergonomics (string concatenation in guards), JavaScript FFI additions for BitArray, package quality checks requiring a non-default README, code folding support in the language server, improved CLI documentation, snake_case consistency in gleam.toml, and numerous language server improvements including extract anonymous function, module usage renaming, missing type parameter code actions, and more precise completions.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://gleam.run/news/upgrading-hex-security>

## Similar posts on daily.dev

- [Hex v2.5.0 released](https://daily.dev/posts/hex-v2-5-0-released-3k7bk0e4k) · Elixir Forum · 0 upvotes · 0 comments
- [Hex v2.5.0 released](https://daily.dev/posts/hex-v2-5-0-released-zx5hrogzu) · Elixir Forum · 0 upvotes · 0 comments

---

Tags: [#erlang](https://daily.dev/tags/erlang), [#gleam](https://daily.dev/tags/gleam)

[View this post on daily.dev](https://daily.dev/posts/upgrading-hex-security-54sj94nyh)