cloudsmith-cli 1.19.0__tar.gz → 1.20.0__tar.gz

{cloudsmith_cli-1.19.0/cloudsmith_cli.egg-info → cloudsmith_cli-1.20.0}/PKG-INFO

@@ -1,18 +1,15 @@
 Metadata-Version: 2.4
 Name: cloudsmith-cli
-Version: 1.19.0
+Version: 1.20.0
 Summary: Cloudsmith Command-Line Interface (CLI)
-Home-page: https://github.com/cloudsmith-io/cloudsmith-cli
-Author: Cloudsmith Ltd
-Author-email: support@cloudsmith.io
-License: Apache License 2.0
+Author-email: Cloudsmith Ltd <support@cloudsmith.io>
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/cloudsmith-io/cloudsmith-cli
 Keywords: cloudsmith,cli,devops
-Platform: any
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
-Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3.10
@@ -31,7 +28,7 @@ Requires-Dist: click-configfile>=0.2.3
 Requires-Dist: click-didyoumean>=0.0.3
 Requires-Dist: click-spinner>=0.1.7
 Requires-Dist: json5>=0.9.0
-Requires-Dist: cloudsmith-api<3.0,>=2.0.25
+Requires-Dist: cloudsmith-api<3.0,>=2.0.29
 Requires-Dist: keyring>=25.4.1
 Requires-Dist: mcp==1.27.2
 Requires-Dist: PyJWT[crypto]>=2.0.0
@@ -45,20 +42,7 @@ Provides-Extra: aws
 Requires-Dist: boto3[crt]>=1.26.0; extra == "aws"
 Provides-Extra: all
 Requires-Dist: boto3[crt]>=1.26.0; extra == "all"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
 Dynamic: license-file
-Dynamic: platform
-Dynamic: provides-extra
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
 
 # Cloudsmith Command Line Interface (CLI)
 
@@ -203,6 +187,30 @@ Or you can get the latest pre-release version from Cloudsmith:
 pip install --upgrade cloudsmith-cli --extra-index-url=https://dl.cloudsmith.io/public/cloudsmith/cli/python/index/
 ```
 
+### Standalone Binaries
+
+Each release also ships self-contained binaries that bundle Python and all dependencies — no Python installation required. Download the archive for your platform from the [GitHub releases page](https://github.com/cloudsmith-io/cloudsmith-cli/releases) (or the [Cloudsmith CLI repository](https://cloudsmith.io/~cloudsmith/repos/cli/packages/)), verify it against the accompanying `.sha256` file, extract it, and add the extracted `cloudsmith` directory to your `PATH`:
+
+```bash
+tar -xzf cloudsmith-<version>-<target>.tar.gz
+./cloudsmith/cloudsmith --version
+```
+
+Available targets: `linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`, `macos-arm64`, `macos-x86_64`, and `windows-x86_64` (as a `.zip`).
+
+Standalone binaries include all optional features, including AWS OIDC support.
+
+#### Verifying Linux binaries
+
+The four Linux archives (`linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`) are GPG-signed with a detached binary signature published alongside each archive as `<archive>.sig`. To verify, import the Cloudsmith CLI release public key (`cloudsmith-cli-release-key.asc`, attached to each GitHub release) and check the signature:
+
+```
+gpg --import cloudsmith-cli-release-key.asc
+gpg --verify cloudsmith-<version>-linux-x86_64-gnu.tar.gz.sig cloudsmith-<version>-linux-x86_64-gnu.tar.gz
+```
+
+A successful verification reports a good signature from the Cloudsmith CLI release key. (The macOS and Windows binaries are not GPG-signed; native signing for those platforms is tracked separately.)
+
 ### Optional Dependencies
 
 The CLI supports optional extras for additional functionality:

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/README.md

@@ -141,6 +141,30 @@ Or you can get the latest pre-release version from Cloudsmith:
 pip install --upgrade cloudsmith-cli --extra-index-url=https://dl.cloudsmith.io/public/cloudsmith/cli/python/index/
 ```
 
+### Standalone Binaries
+
+Each release also ships self-contained binaries that bundle Python and all dependencies — no Python installation required. Download the archive for your platform from the [GitHub releases page](https://github.com/cloudsmith-io/cloudsmith-cli/releases) (or the [Cloudsmith CLI repository](https://cloudsmith.io/~cloudsmith/repos/cli/packages/)), verify it against the accompanying `.sha256` file, extract it, and add the extracted `cloudsmith` directory to your `PATH`:
+
+```bash
+tar -xzf cloudsmith-<version>-<target>.tar.gz
+./cloudsmith/cloudsmith --version
+```
+
+Available targets: `linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`, `macos-arm64`, `macos-x86_64`, and `windows-x86_64` (as a `.zip`).
+
+Standalone binaries include all optional features, including AWS OIDC support.
+
+#### Verifying Linux binaries
+
+The four Linux archives (`linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`) are GPG-signed with a detached binary signature published alongside each archive as `<archive>.sig`. To verify, import the Cloudsmith CLI release public key (`cloudsmith-cli-release-key.asc`, attached to each GitHub release) and check the signature:
+
+```
+gpg --import cloudsmith-cli-release-key.asc
+gpg --verify cloudsmith-<version>-linux-x86_64-gnu.tar.gz.sig cloudsmith-<version>-linux-x86_64-gnu.tar.gz
+```
+
+A successful verification reports a good signature from the Cloudsmith CLI release key. (The macOS and Windows binaries are not GPG-signed; native signing for those platforms is tracked separately.)
+
 ### Optional Dependencies
 
 The CLI supports optional extras for additional functionality:

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/commands/mcp.py

@@ -291,7 +291,7 @@ def configure(ctx, opts, client, is_global):  # pylint: disable=unused-argument
 
 def _get_server_config(profile=None):
     """Determine the first available command configuration to run the MCP server."""
-    # Check if running in a virtual environment
+    is_frozen = getattr(sys, "frozen", False)
     in_venv = hasattr(sys, "real_prefix") or (
         hasattr(sys, "base_prefix") and sys.base_prefix != sys.prefix
     )
@@ -301,6 +301,9 @@ def _get_server_config(profile=None):
     if profile:
         base_args.extend(["-P", profile])
 
+    if is_frozen:
+        return {"command": sys.executable, "args": base_args + ["mcp", "start"]}
+
     # In a venv, always use python -m to ensure we use the venv's packages
     if in_venv:
         return {

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/commands/whoami.py

@@ -172,12 +172,14 @@ def whoami(ctx, opts):
         data["auth"] = _get_verbose_auth_data(opts, api_host)
 
     if utils.maybe_print_as_json(opts, data):
+        if not is_auth:
+            ctx.exit(1)
         return
 
     if not is_auth:
         click.echo("You are authenticated as:")
         click.secho("Nobody (i.e. anonymous user)", fg="yellow")
-        return
+        ctx.exit(1)
 
     if opts.verbose:
         _print_verbose_text(data)

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/config.py

@@ -155,6 +155,30 @@ class ConfigReader(ConfigFileReader):
 
         return False
 
+    @classmethod
+    def read_relative_config_value(cls, key, profile=None):
+        """Read `key` as loaded from directory-relative (untrusted) configs only.
+
+        Loads via the normal machinery but through a reader narrowed to the
+        relative search paths/files (e.g. the current working directory);
+        absolute/user-level paths and any explicit ``--config-file`` are
+        excluded. The value is parsed and quote-stripped exactly as a real run
+        would. Returns None when the key is absent or empty.
+        """
+        relative_searchpath = [p for p in cls.config_searchpath if not os.path.isabs(p)]
+        relative_files = [f for f in cls.config_files if not os.path.isabs(f)]
+        if not relative_searchpath or not relative_files:
+            return None
+
+        relative_reader = type(
+            "RelativeConfigReader",
+            (cls,),
+            {"config_searchpath": relative_searchpath, "config_files": relative_files},
+        )
+        probe = Options()
+        relative_reader.load_config(probe, profile=profile)
+        return probe.opts.get(key)
+
     @classmethod
     def load_config(cls, opts, path=None, profile=None):
         """Load a configuration file into an options object."""

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/decorators.py

@@ -255,6 +255,40 @@ def common_api_auth_options(f):
     return wrapper
 
 
+def _parse_suffixes(value):
+    """Split a CSV of trusted host suffixes into a normalised tuple."""
+    return tuple(
+        token.strip().lstrip(".") for token in (value or "").split(",") if token.strip()
+    )
+
+
+def _guard_untrusted_endpoints(ctx, opts, host_suffixes, proxy_suffixes):
+    """Reject api_host/api_proxy redirections from directory-relative config.
+
+    Enforcement applies only when the effective value originated from an
+    untrusted (relative) config file and was not supplied via a CLI flag or
+    environment variable. Both must match their allow-listed host suffixes;
+    api_proxy has no public default suffixes, so it is rejected unless one is
+    supplied via the environment.
+    """
+    trusted_sources = (ParameterSource.COMMANDLINE, ParameterSource.ENVIRONMENT)
+    profile = ctx.meta.get("profile")
+
+    if ctx.get_parameter_source("api_host") not in trusted_sources:
+        relative_host = config.ConfigReader.read_relative_config_value(
+            "api_host", profile=profile
+        )
+        if relative_host and opts.api_host == relative_host:
+            validators.validate_untrusted_api_host(opts.api_host, host_suffixes)
+
+    if ctx.get_parameter_source("api_proxy") not in trusted_sources:
+        relative_proxy = config.ConfigReader.read_relative_config_value(
+            "api_proxy", profile=profile
+        )
+        if relative_proxy and opts.api_proxy == relative_proxy:
+            validators.validate_untrusted_api_proxy(opts.api_proxy, proxy_suffixes)
+
+
 def initialise_session(f):
     """Create a shared HTTP session with proxy/SSL/user-agent settings."""
 
@@ -286,11 +320,25 @@ def initialise_session(f):
         envvar="CLOUDSMITH_API_HEADERS",
         help="A CSV list of extra headers (key=value) to send to the API.",
     )
+    @click.option(
+        "--allowed-api-host-suffixes",
+        envvar="CLOUDSMITH_ALLOWED_API_HOST_SUFFIXES",
+        hidden=True,
+        help="Comma-separated extra trusted api_host suffixes (internal use).",
+    )
+    @click.option(
+        "--allowed-api-proxy-suffixes",
+        envvar="CLOUDSMITH_ALLOWED_API_PROXY_SUFFIXES",
+        hidden=True,
+        help="Comma-separated trusted api_proxy host suffixes (internal use).",
+    )
     @click.pass_context
     @functools.wraps(f)
     def wrapper(ctx, *args, **kwargs):
         # pylint: disable=missing-docstring
         opts = config.get_or_create_options(ctx)
+        host_suffixes = _parse_suffixes(kwargs.pop("allowed_api_host_suffixes"))
+        proxy_suffixes = _parse_suffixes(kwargs.pop("allowed_api_proxy_suffixes"))
         opts.api_host = kwargs.pop("api_host")
         opts.api_proxy = kwargs.pop("api_proxy")
         opts.api_ssl_verify = _pop_boolean_flag(
@@ -299,6 +347,8 @@ def initialise_session(f):
         opts.api_user_agent = kwargs.pop("api_user_agent")
         opts.api_headers = kwargs.pop("api_headers")
 
+        _guard_untrusted_endpoints(ctx, opts, host_suffixes, proxy_suffixes)
+
         opts.session = _create_session(
             proxy=opts.api_proxy,
             ssl_verify=opts.api_ssl_verify,

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/utils.py

@@ -194,6 +194,25 @@ def maybe_truncate_list(data, max_len=5):
     return data
 
 
+def maybe_unstyle_prompt(prompt, err=False):
+    """Strip ANSI styling from a prompt when the target stream is not a TTY.
+
+    As of click 8.4, ``click.prompt``/``click.confirm`` pass the prompt text
+    straight to the (readline-backed) prompt function instead of routing it
+    through ``echo()``. This means click's ``should_strip_ansi`` logic no
+    longer fires for prompt text, so any ANSI codes baked into the prompt via
+    ``click.style(..., bold=True)`` leak raw into non-TTY output (piped
+    output, CI logs, captured streams). Restore the pre-8.4 behaviour by
+    unstyling the prompt ourselves when the destination stream isn't a TTY.
+
+    Applying ``click.unstyle`` to plain text is a harmless no-op.
+    """
+    stream = click.get_text_stream("stderr" if err else "stdout")
+    if not stream.isatty():
+        prompt = click.unstyle(prompt)
+    return prompt
+
+
 def confirm_operation(prompt, prefix=None, assume_yes=False, err=False):
     """Prompt the user for confirmation for dangerous actions."""
     if assume_yes:
@@ -203,7 +222,7 @@ def confirm_operation(prompt, prefix=None, assume_yes=False, err=False):
         "Are you %s certain you want to" % (click.style("absolutely", bold=True))
     )
 
-    prompt = f"{prefix} {prompt}?"
+    prompt = maybe_unstyle_prompt(f"{prefix} {prompt}?", err=err)
 
     answered = click.confirm(prompt, err=err)
 

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/cli/validators.py

@@ -2,6 +2,7 @@
 
 import base64
 from datetime import datetime
+from urllib.parse import urlsplit
 
 import click
 from click.core import ParameterSource
@@ -11,6 +12,7 @@ from .types import ExpandPath
 CONTEXT_SETTINGS = dict(help_option_names=["-h", "--help"])
 BAD_API_HEADERS = ("user-agent", "host")
 API_HEADER_TRANSFORMS = {}
+PUBLIC_API_HOST_SUFFIXES = ("cloudsmith.io", "cloudsmith.com")
 
 
 class IntOrWildcard(click.ParamType):
@@ -84,6 +86,48 @@ def validate_api_headers(param, value):
     return headers
 
 
+def host_matches_suffixes(url, suffixes):
+    """True if url's hostname equals or is a subdomain of one of the suffixes.
+
+    Parsing the hostname (rather than substring-matching the URL) ensures
+    userinfo, port, and path components cannot smuggle a host past the check.
+    """
+    hostname = (urlsplit(url).hostname or "").lower()
+    return bool(hostname) and any(
+        hostname == suffix or hostname.endswith(f".{suffix}") for suffix in suffixes
+    )
+
+
+def is_trusted_api_host(host, extra_suffixes=()):
+    """True if host is an allowed Cloudsmith host (or matches an extra suffix)."""
+    return host_matches_suffixes(host, PUBLIC_API_HOST_SUFFIXES + tuple(extra_suffixes))
+
+
+def validate_untrusted_api_host(host, extra_suffixes=()):
+    """Raise if an api_host from an untrusted config is not an allowed host."""
+    if is_trusted_api_host(host, extra_suffixes):
+        return
+    raise click.UsageError(
+        f'api_host "{host}" is set by a config file in the current directory '
+        "and is not an allowed Cloudsmith host. Allowed hosts must be under "
+        "*.cloudsmith.io or *.cloudsmith.com. To use a custom host, set it via "
+        "--api-host, the CLOUDSMITH_API_HOST environment variable, an explicit "
+        "--config-file, or your user-level config."
+    )
+
+
+def validate_untrusted_api_proxy(proxy, allowed_suffixes=()):
+    """Raise if an api_proxy from an untrusted config is not an allowed proxy."""
+    if host_matches_suffixes(proxy, allowed_suffixes):
+        return
+    raise click.UsageError(
+        f'api_proxy "{proxy}" is set by a config file in the current directory '
+        "and is not an allowed proxy. To use a proxy, set it via --api-proxy, "
+        "the CLOUDSMITH_API_PROXY environment variable, an explicit "
+        "--config-file, or your user-level config."
+    )
+
+
 def validate_slashes(
     param, value, minimum=2, maximum=None, form=None, allow_blank=False
 ):

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli/credential_helpers/docker/installer.py

@@ -11,6 +11,7 @@ from __future__ import annotations
 import json
 import logging
 import os
+import sys
 from pathlib import Path
 
 from ...core.cache_utils import merge_json_file
@@ -56,6 +57,21 @@ class DockerInstaller:
     name = "docker"
     summary = "Docker credential helper for Cloudsmith registries"
 
+    @classmethod
+    def _resolve_target_cmd(cls) -> str:
+        """Return the command the launcher forwards to.
+
+        A pip/source install resolves the bare ``cloudsmith`` command via
+        ``PATH``.  A frozen standalone binary (PyInstaller) is not guaranteed
+        to be on ``PATH`` under that name, so point the launcher at the
+        absolute executable instead — mirroring the frozen handling in
+        :func:`cloudsmith_cli.cli.commands.mcp._get_server_config`.  The path
+        is quoted so a directory containing spaces still execs correctly.
+        """
+        if getattr(sys, "frozen", False):
+            return f'"{sys.executable}" credential-helper docker'
+        return cls.TARGET_CMD
+
     def install(
         self,
         *,
@@ -190,7 +206,9 @@ class DockerInstaller:
             return actions
 
         # Real install
-        launcher_path = write_launcher(target_dir, self.LAUNCHER_NAME, self.TARGET_CMD)
+        launcher_path = write_launcher(
+            target_dir, self.LAUNCHER_NAME, self._resolve_target_cmd()
+        )
         actions.append(f"wrote launcher {launcher_path}")
 
         changed = merge_json_file(config_path, mutate)

cloudsmith_cli-1.20.0/cloudsmith_cli/data/VERSION

@@ -0,0 +1 @@
+1.20.0

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0/cloudsmith_cli.egg-info}/PKG-INFO

@@ -1,18 +1,15 @@
 Metadata-Version: 2.4
 Name: cloudsmith-cli
-Version: 1.19.0
+Version: 1.20.0
 Summary: Cloudsmith Command-Line Interface (CLI)
-Home-page: https://github.com/cloudsmith-io/cloudsmith-cli
-Author: Cloudsmith Ltd
-Author-email: support@cloudsmith.io
-License: Apache License 2.0
+Author-email: Cloudsmith Ltd <support@cloudsmith.io>
+License-Expression: Apache-2.0
+Project-URL: Homepage, https://github.com/cloudsmith-io/cloudsmith-cli
 Keywords: cloudsmith,cli,devops
-Platform: any
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
-Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Operating System :: POSIX :: Linux
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 3.10
@@ -31,7 +28,7 @@ Requires-Dist: click-configfile>=0.2.3
 Requires-Dist: click-didyoumean>=0.0.3
 Requires-Dist: click-spinner>=0.1.7
 Requires-Dist: json5>=0.9.0
-Requires-Dist: cloudsmith-api<3.0,>=2.0.25
+Requires-Dist: cloudsmith-api<3.0,>=2.0.29
 Requires-Dist: keyring>=25.4.1
 Requires-Dist: mcp==1.27.2
 Requires-Dist: PyJWT[crypto]>=2.0.0
@@ -45,20 +42,7 @@ Provides-Extra: aws
 Requires-Dist: boto3[crt]>=1.26.0; extra == "aws"
 Provides-Extra: all
 Requires-Dist: boto3[crt]>=1.26.0; extra == "all"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
 Dynamic: license-file
-Dynamic: platform
-Dynamic: provides-extra
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
 
 # Cloudsmith Command Line Interface (CLI)
 
@@ -203,6 +187,30 @@ Or you can get the latest pre-release version from Cloudsmith:
 pip install --upgrade cloudsmith-cli --extra-index-url=https://dl.cloudsmith.io/public/cloudsmith/cli/python/index/
 ```
 
+### Standalone Binaries
+
+Each release also ships self-contained binaries that bundle Python and all dependencies — no Python installation required. Download the archive for your platform from the [GitHub releases page](https://github.com/cloudsmith-io/cloudsmith-cli/releases) (or the [Cloudsmith CLI repository](https://cloudsmith.io/~cloudsmith/repos/cli/packages/)), verify it against the accompanying `.sha256` file, extract it, and add the extracted `cloudsmith` directory to your `PATH`:
+
+```bash
+tar -xzf cloudsmith-<version>-<target>.tar.gz
+./cloudsmith/cloudsmith --version
+```
+
+Available targets: `linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`, `macos-arm64`, `macos-x86_64`, and `windows-x86_64` (as a `.zip`).
+
+Standalone binaries include all optional features, including AWS OIDC support.
+
+#### Verifying Linux binaries
+
+The four Linux archives (`linux-x86_64-gnu`, `linux-x86_64-musl`, `linux-aarch64-gnu`, `linux-aarch64-musl`) are GPG-signed with a detached binary signature published alongside each archive as `<archive>.sig`. To verify, import the Cloudsmith CLI release public key (`cloudsmith-cli-release-key.asc`, attached to each GitHub release) and check the signature:
+
+```
+gpg --import cloudsmith-cli-release-key.asc
+gpg --verify cloudsmith-<version>-linux-x86_64-gnu.tar.gz.sig cloudsmith-<version>-linux-x86_64-gnu.tar.gz
+```
+
+A successful verification reports a good signature from the Cloudsmith CLI release key. (The macOS and Windows binaries are not GPG-signed; native signing for those platforms is tracked separately.)
+
 ### Optional Dependencies
 
 The CLI supports optional extras for additional functionality:

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli.egg-info/SOURCES.txt

@@ -1,15 +1,13 @@
 LICENSE
 MANIFEST.in
 README.md
-setup.cfg
-setup.py
+pyproject.toml
 cloudsmith_cli/__init__.py
 cloudsmith_cli/__main__.py
 cloudsmith_cli.egg-info/PKG-INFO
 cloudsmith_cli.egg-info/SOURCES.txt
 cloudsmith_cli.egg-info/dependency_links.txt
 cloudsmith_cli.egg-info/entry_points.txt
-cloudsmith_cli.egg-info/not-zip-safe
 cloudsmith_cli.egg-info/requires.txt
 cloudsmith_cli.egg-info/top_level.txt
 cloudsmith_cli/cli/__init__.py
@@ -67,37 +65,6 @@ cloudsmith_cli/cli/commands/quota/__init__.py
 cloudsmith_cli/cli/commands/quota/command.py
 cloudsmith_cli/cli/commands/quota/history.py
 cloudsmith_cli/cli/commands/quota/quota.py
-cloudsmith_cli/cli/tests/__init__.py
-cloudsmith_cli/cli/tests/conftest.py
-cloudsmith_cli/cli/tests/test_metadata_common.py
-cloudsmith_cli/cli/tests/test_oidc_detector_config.py
-cloudsmith_cli/cli/tests/test_push.py
-cloudsmith_cli/cli/tests/test_saml.py
-cloudsmith_cli/cli/tests/test_utils.py
-cloudsmith_cli/cli/tests/test_webserver.py
-cloudsmith_cli/cli/tests/utils.py
-cloudsmith_cli/cli/tests/commands/__init__.py
-cloudsmith_cli/cli/tests/commands/conftest.py
-cloudsmith_cli/cli/tests/commands/test_auth.py
-cloudsmith_cli/cli/tests/commands/test_check.py
-cloudsmith_cli/cli/tests/commands/test_credential_helper.py
-cloudsmith_cli/cli/tests/commands/test_credential_helper_install.py
-cloudsmith_cli/cli/tests/commands/test_download.py
-cloudsmith_cli/cli/tests/commands/test_entitlements.py
-cloudsmith_cli/cli/tests/commands/test_login.py
-cloudsmith_cli/cli/tests/commands/test_logout.py
-cloudsmith_cli/cli/tests/commands/test_main.py
-cloudsmith_cli/cli/tests/commands/test_mcp.py
-cloudsmith_cli/cli/tests/commands/test_metadata.py
-cloudsmith_cli/cli/tests/commands/test_package_commands.py
-cloudsmith_cli/cli/tests/commands/test_repos.py
-cloudsmith_cli/cli/tests/commands/test_tokens.py
-cloudsmith_cli/cli/tests/commands/test_upstream.py
-cloudsmith_cli/cli/tests/commands/test_vulnerabilities.py
-cloudsmith_cli/cli/tests/commands/policy/__init__.py
-cloudsmith_cli/cli/tests/commands/policy/test_deny.py
-cloudsmith_cli/cli/tests/commands/policy/test_licence.py
-cloudsmith_cli/cli/tests/commands/policy/test_vulnerability.py
 cloudsmith_cli/core/__init__.py
 cloudsmith_cli/core/cache_utils.py
 cloudsmith_cli/core/config.py
@@ -151,28 +118,6 @@ cloudsmith_cli/core/credentials/providers/oidc_provider.py
 cloudsmith_cli/core/mcp/__init__.py
 cloudsmith_cli/core/mcp/data.py
 cloudsmith_cli/core/mcp/server.py
-cloudsmith_cli/core/tests/__init__.py
-cloudsmith_cli/core/tests/test_azure_devops_detector.py
-cloudsmith_cli/core/tests/test_bitbucket_pipelines_detector.py
-cloudsmith_cli/core/tests/test_cache_utils.py
-cloudsmith_cli/core/tests/test_circleci_detector.py
-cloudsmith_cli/core/tests/test_cli_flag_provider.py
-cloudsmith_cli/core/tests/test_credential_chain_priority.py
-cloudsmith_cli/core/tests/test_credential_context.py
-cloudsmith_cli/core/tests/test_credential_provider_chain.py
-cloudsmith_cli/core/tests/test_credentials_file_provider.py
-cloudsmith_cli/core/tests/test_detector_controls.py
-cloudsmith_cli/core/tests/test_download.py
-cloudsmith_cli/core/tests/test_env_var_provider.py
-cloudsmith_cli/core/tests/test_generic_detector.py
-cloudsmith_cli/core/tests/test_github_actions_detector.py
-cloudsmith_cli/core/tests/test_gitlab_ci_detector.py
-cloudsmith_cli/core/tests/test_init.py
-cloudsmith_cli/core/tests/test_keyring.py
-cloudsmith_cli/core/tests/test_keyring_provider.py
-cloudsmith_cli/core/tests/test_metadata.py
-cloudsmith_cli/core/tests/test_rest.py
-cloudsmith_cli/core/tests/test_version.py
 cloudsmith_cli/credential_helpers/__init__.py
 cloudsmith_cli/credential_helpers/backends.py
 cloudsmith_cli/credential_helpers/common.py

{cloudsmith_cli-1.19.0 → cloudsmith_cli-1.20.0}/cloudsmith_cli.egg-info/requires.txt

@@ -3,7 +3,7 @@ click-configfile>=0.2.3
 click-didyoumean>=0.0.3
 click-spinner>=0.1.7
 json5>=0.9.0
-cloudsmith-api<3.0,>=2.0.25
+cloudsmith-api<3.0,>=2.0.29
 keyring>=25.4.1
 mcp==1.27.2
 PyJWT[crypto]>=2.0.0