From 340b444a5a54f3b554801449037c1104769348b5 Mon Sep 17 00:00:00 2001 From: "app-token-issuer-dev-services[bot]" <191631491+app-token-issuer-dev-services[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 16:47:38 +0000 Subject: [PATCH 1/2] Version Packages (deletions) --- .changeset/bump-sdk-versions.md | 5 ----- .changeset/dark-badgers-grab.md | 5 ----- .changeset/fix-offline-command-telemetry.md | 5 ----- .changeset/go-1-27-3-emudhra.md | 5 ----- .changeset/secrets-exit-code.md | 5 ----- 5 files changed, 25 deletions(-) delete mode 100644 .changeset/bump-sdk-versions.md delete mode 100644 .changeset/dark-badgers-grab.md delete mode 100644 .changeset/fix-offline-command-telemetry.md delete mode 100644 .changeset/go-1-27-3-emudhra.md delete mode 100644 .changeset/secrets-exit-code.md diff --git a/.changeset/bump-sdk-versions.md b/.changeset/bump-sdk-versions.md deleted file mode 100644 index 9a93a4ab..00000000 --- a/.changeset/bump-sdk-versions.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"cre-cli": minor ---- - -Bump cre-sdk-go to v1.21.0 and @chainlink/cre-sdk to ^1.22.0 diff --git a/.changeset/dark-badgers-grab.md b/.changeset/dark-badgers-grab.md deleted file mode 100644 index e8ab32c5..00000000 --- a/.changeset/dark-badgers-grab.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"cre-cli": patch ---- - -Update staging url diff --git a/.changeset/fix-offline-command-telemetry.md b/.changeset/fix-offline-command-telemetry.md deleted file mode 100644 index 76f67b56..00000000 --- a/.changeset/fix-offline-command-telemetry.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"cre-cli": patch ---- - -Fix telemetry for commands that don't require login (`cre generate-bindings`, `cre workflow build`, `cre workflow hash`, etc.). Credentials are now attached silently when they exist on disk, so usage events from logged-in users are sent instead of being dropped. Commands remain fully usable while logged out. diff --git a/.changeset/go-1-27-3-emudhra.md b/.changeset/go-1-27-3-emudhra.md deleted file mode 100644 index e3e8b7d5..00000000 --- a/.changeset/go-1-27-3-emudhra.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"cre-cli": patch ---- - -Build the CLI with Go 1.27.3, which distrusts the eight compromised eMudhra (emSign) intermediate CAs (CVE-2026-111943). Earlier builds accept TLS certificates issued from those keys, so an attacker on the network path could impersonate the CRE API, login, Vault gateway or RPC endpoints the CLI connects to. Release builds now take the Go version from `go.mod`. diff --git a/.changeset/secrets-exit-code.md b/.changeset/secrets-exit-code.md deleted file mode 100644 index 0f75d8c6..00000000 --- a/.changeset/secrets-exit-code.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"cre-cli": patch ---- - -`cre secrets create`, `update`, `delete` and `list` now exit non-zero when the Vault rejects a request (for example "key does not exist" on update). Previously the failure was only printed and the command exited 0, so scripts and CI treated it as success. From 880b9dcad15f2097ca864c3a59f5618b9ff080cd Mon Sep 17 00:00:00 2001 From: "app-token-issuer-dev-services[bot]" <191631491+app-token-issuer-dev-services[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 16:47:40 +0000 Subject: [PATCH 2/2] Version Packages (.) --- CHANGELOG.md | 16 ++++++++++++++++ package.json | 2 +- 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5b3d0f65..02305eff 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,21 @@ # cre-cli +## 1.39.0 + +### Minor Changes + +- [#566](https://github.com/smartcontractkit/cre-cli/pull/566) [`7276be0`](https://github.com/smartcontractkit/cre-cli/commit/7276be0eb801037fd04527c990f75f0e745c013d) Thanks [@russell-stern](https://github.com/russell-stern)! - Bump cre-sdk-go to v1.21.0 and @chainlink/cre-sdk to ^1.22.0 + +### Patch Changes + +- [#620](https://github.com/smartcontractkit/cre-cli/pull/620) [`5a604f5`](https://github.com/smartcontractkit/cre-cli/commit/5a604f52c1d195d857bdc334aaa93ea165236e2a) Thanks [@timothyF95](https://github.com/timothyF95)! - Update staging url + +- [#607](https://github.com/smartcontractkit/cre-cli/pull/607) [`29b8ebb`](https://github.com/smartcontractkit/cre-cli/commit/29b8ebb7b14c12486396fde646143cc62d97960c) Thanks [@ejacquier](https://github.com/ejacquier)! - Fix telemetry for commands that don't require login (`cre generate-bindings`, `cre workflow build`, `cre workflow hash`, etc.). Credentials are now attached silently when they exist on disk, so usage events from logged-in users are sent instead of being dropped. Commands remain fully usable while logged out. + +- [#621](https://github.com/smartcontractkit/cre-cli/pull/621) [`5911eba`](https://github.com/smartcontractkit/cre-cli/commit/5911eba6d7b9c66bb5ae45dd83d50dd3bd8637ee) Thanks [@j-nowak](https://github.com/j-nowak)! - Build the CLI with Go 1.27.3, which distrusts the eight compromised eMudhra (emSign) intermediate CAs (CVE-2026-111943). Earlier builds accept TLS certificates issued from those keys, so an attacker on the network path could impersonate the CRE API, login, Vault gateway or RPC endpoints the CLI connects to. Release builds now take the Go version from `go.mod`. + +- [#618](https://github.com/smartcontractkit/cre-cli/pull/618) [`831d425`](https://github.com/smartcontractkit/cre-cli/commit/831d42573aaf574ec06c55d28d4d73086e55f343) Thanks [@anirudhwarrier](https://github.com/anirudhwarrier)! - `cre secrets create`, `update`, `delete` and `list` now exit non-zero when the Vault rejects a request (for example "key does not exist" on update). Previously the failure was only printed and the command exited 0, so scripts and CI treated it as success. + ## 1.38.0 Versions 1.9.0 to 1.38.0 were released from manually created tags, so they don't have changeset entries. See the [GitHub releases](https://github.com/smartcontractkit/cre-cli/releases) for their notes. This entry brings the changesets version back in line with the release tags. diff --git a/package.json b/package.json index b6ded0ce..3681f487 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "cre-cli", "private": true, - "version": "1.38.0", + "version": "1.39.0", "scripts": { "ci:changeset:publish": "bash ./scripts/tag-and-push.sh", "ci:changeset:version": "pnpm changeset version"