Version Packages

CHANGELOG.md

@@ -1,5 +1,21 @@
 # cre-cli
 
+## 1.39.0
+
+### Minor Changes
+
+- [#566](https://github.com/smartcontractkit/cre-cli/pull/566) [`7276be0`](https://github.com/smartcontractkit/cre-cli/commit/7276be0eb801037fd04527c990f75f0e745c013d) Thanks [@russell-stern](https://github.com/russell-stern)! - Bump cre-sdk-go to v1.21.0 and @chainlink/cre-sdk to ^1.22.0
+
+### Patch Changes
+
+- [#620](https://github.com/smartcontractkit/cre-cli/pull/620) [`5a604f5`](https://github.com/smartcontractkit/cre-cli/commit/5a604f52c1d195d857bdc334aaa93ea165236e2a) Thanks [@timothyF95](https://github.com/timothyF95)! - Update staging url
+
+- [#607](https://github.com/smartcontractkit/cre-cli/pull/607) [`29b8ebb`](https://github.com/smartcontractkit/cre-cli/commit/29b8ebb7b14c12486396fde646143cc62d97960c) Thanks [@ejacquier](https://github.com/ejacquier)! - Fix telemetry for commands that don't require login (`cre generate-bindings`, `cre workflow build`, `cre workflow hash`, etc.). Credentials are now attached silently when they exist on disk, so usage events from logged-in users are sent instead of being dropped. Commands remain fully usable while logged out.
+
+- [#621](https://github.com/smartcontractkit/cre-cli/pull/621) [`5911eba`](https://github.com/smartcontractkit/cre-cli/commit/5911eba6d7b9c66bb5ae45dd83d50dd3bd8637ee) Thanks [@j-nowak](https://github.com/j-nowak)! - Build the CLI with Go 1.27.3, which distrusts the eight compromised eMudhra (emSign) intermediate CAs (CVE-2026-111943). Earlier builds accept TLS certificates issued from those keys, so an attacker on the network path could impersonate the CRE API, login, Vault gateway or RPC endpoints the CLI connects to. Release builds now take the Go version from `go.mod`.
+
+- [#618](https://github.com/smartcontractkit/cre-cli/pull/618) [`831d425`](https://github.com/smartcontractkit/cre-cli/commit/831d42573aaf574ec06c55d28d4d73086e55f343) Thanks [@anirudhwarrier](https://github.com/anirudhwarrier)! - `cre secrets create`, `update`, `delete` and `list` now exit non-zero when the Vault rejects a request (for example "key does not exist" on update). Previously the failure was only printed and the command exited 0, so scripts and CI treated it as success.
+
 ## 1.38.0
 
 Versions 1.9.0 to 1.38.0 were released from manually created tags, so they don't have changeset entries. See the [GitHub releases](https://github.com/smartcontractkit/cre-cli/releases) for their notes. This entry brings the changesets version back in line with the release tags.

package.json

@@ -1,7 +1,7 @@
 {
   "name": "cre-cli",
   "private": true,
-  "version": "1.38.0",
+  "version": "1.39.0",
   "scripts": {
     "ci:changeset:publish": "bash ./scripts/tag-and-push.sh",
     "ci:changeset:version": "pnpm changeset version"