[app-token-issuer-dev-services]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

cre-cli@1.39.0

Minor Changes

• #566 7276be0 Thanks @russell-stern! - Bump cre-sdk-go to v1.21.0 and @chainlink/cre-sdk to ^1.22.0

Patch Changes

• #620 5a604f5 Thanks @timothyF95! - Update staging url

• #607 29b8ebb Thanks @ejacquier! - Fix telemetry for commands that don't require login (cre generate-bindings, cre workflow build, cre workflow hash, etc.). Credentials are now attached silently when they exist on disk, so usage events from logged-in users are sent instead of being dropped. Commands remain fully usable while logged out.

• #621 5911eba Thanks @j-nowak! - Build the CLI with Go 1.27.3, which distrusts the eight compromised eMudhra (emSign) intermediate CAs (CVE-2026-111943). Earlier builds accept TLS certificates issued from those keys, so an attacker on the network path could impersonate the CRE API, login, Vault gateway or RPC endpoints the CLI connects to. Release builds now take the Go version from go.mod.

• #618 831d425 Thanks @anirudhwarrier! - cre secrets create, update, delete and list now exit non-zero when the Vault rejects a request (for example "key does not exist" on update). Previously the failure was only printed and the command exited 0, so scripts and CI treated it as success.