chore: merge in main (#348)

Co-authored-by: Johnny Winn <88165065+heroku-johnny@users.noreply.github.com>
Co-authored-by: heroku-devtools-release-workflows[bot] <261039447+heroku-devtools-release-workflows[bot]@users.noreply.github.com>

Author: 3 people

.github/release-configs/release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "12.3.1"
+  ".": "12.3.2"
 }

CHANGELOG.md

@@ -10,6 +10,13 @@
 
 * adopt @heroku-cli/test-utils and modernize test setup ([#308](https://github.com/heroku/heroku-cli-command/issues/308)) ([db7be8e](https://github.com/heroku/heroku-cli-command/commit/db7be8eb0e84422e40240c5df5d063513dbe528f))
 
+## [12.3.2](https://github.com/heroku/heroku-cli-command/compare/command-v12.3.1...command-v12.3.2) (2026-04-29)
+
+
+### Bug Fixes
+
+* dedupe API warning headers within one client invocation ([#343](https://github.com/heroku/heroku-cli-command/issues/343)) ([ac1717a](https://github.com/heroku/heroku-cli-command/commit/ac1717a69a86935a6e75f4c2bcbe77f35ec2e20c))
+
 ## [12.3.1](https://github.com/heroku/heroku-cli-command/compare/command-v12.2.2...command-v12.3.1) (2026-04-03)
 
 

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@heroku-cli/command",
   "description": "base class for Heroku CLI commands",
-  "version": "12.3.1",
+  "version": "12.3.2",
   "author": "Heroku",
   "bugs": "https://github.com/heroku/heroku-cli-command/issues",
   "dependencies": {

package.json

@@ -97,6 +97,7 @@ export class APIClient {
       protocol: apiUrl.protocol,
     }
     const delinquencyConfig: IDelinquencyConfig = {fetch_delinquency: false, warning_shown: false}
+    const shownHeaderWarnings = new Set<string>()
     this.http = class APIHTTPClient<T> extends HTTP.create(opts)<T> {
       static configDelinquency(url: string, opts: APIClient.Options): void {
         if (opts.method?.toUpperCase() !== 'GET' || (opts.hostname && opts.hostname !== apiUrl.hostname)) {
@@ -247,10 +248,17 @@ export class APIClient {
 
       static showWarnings<T>(response: HTTP<T>) {
         const warnings = response.headers['x-heroku-warning'] || response.headers['warning-message']
+        const emitIfNew = (raw: string) => {
+          const normalized = raw.replace(/^\s*warning:?\s*/i, '').trim()
+          if (!normalized || shownHeaderWarnings.has(normalized)) return
+          shownHeaderWarnings.add(normalized)
+          warn(normalized)
+        }
+
         if (Array.isArray(warnings))
-          for (const warning of warnings) warn(warning.replace(/^\s*warning:?\s*/i, ''))
+          for (const warning of warnings) emitIfNew(warning)
         else if (typeof warnings === 'string')
-          warn(warnings.replace(/^\s*warning:?\s*/i, ''))
+          emitIfNew(warnings)
       }
 
       static trackRequestIds<T>(response: HTTP<T>) {

src/api-client.ts

@@ -937,6 +937,60 @@ describe('api_client', () => {
         expect(stderr.output).to.contain('Warning: some other warning')
         expect(stderr.output).not.to.contain('Warning: Warning: some other warning')
       })
+
+    test
+      .it('does not repeat the same warning on subsequent identical responses', async ctx => {
+        api = nock('https://api.heroku.com', {
+          reqheaders: {authorization: 'Bearer mypass'},
+        })
+        api.get('/apps').twice().reply(200, [], {'X-Heroku-Warning': 'Your account password will expire soon.'})
+
+        const cmd = new Command([], ctx.config)
+        stderr.start()
+        await cmd.heroku.get('/apps')
+        await cmd.heroku.get('/apps')
+        stderr.stop()
+
+        expect(stderr.output.match(/Warning: Your account password will expire soon\./g)?.length).to.equal(1)
+      })
+
+    test
+      .it('shows distinct warnings from successive responses', async ctx => {
+        api = nock('https://api.heroku.com', {
+          reqheaders: {authorization: 'Bearer mypass'},
+        })
+        api.get('/apps').twice().reply(200, [], {'X-Heroku-Warning': 'First warning'})
+        api.get('/apps/foo').reply(200, [], {'X-Heroku-Warning': 'Second warning'})
+
+        const cmd = new Command([], ctx.config)
+        stderr.start()
+        await cmd.heroku.get('/apps')
+        await cmd.heroku.get('/apps')
+        await cmd.heroku.get('/apps/foo')
+        stderr.stop()
+
+        expect(stderr.output).to.contain('Warning: First warning')
+        expect(stderr.output.match(/Warning: First warning/g)?.length).to.equal(1)
+        expect(stderr.output).to.contain('Warning: Second warning')
+        expect(stderr.output.match(/Warning: Second warning/g)?.length).to.equal(1)
+      })
+
+    test
+      .it('shows the same header warning again for a new command instance', async ctx => {
+        api = nock('https://api.heroku.com', {
+          reqheaders: {authorization: 'Bearer mypass'},
+        })
+        api.get('/apps').twice().reply(200, [], {'X-Heroku-Warning': 'Password expiry reminder'})
+
+        const cmd1 = new Command([], ctx.config)
+        const cmd2 = new Command([], ctx.config)
+        stderr.start()
+        await cmd1.heroku.get('/apps')
+        await cmd2.heroku.get('/apps')
+        stderr.stop()
+
+        expect(stderr.output.match(/Warning: Password expiry reminder/g)?.length).to.equal(2)
+      })
   })
 
   context('with Warning-Message header set on response', function () {