release: cloudsmith-cli v1.20.0

[BartoszBlizniak]

Description

Release cloudsmith-cli v1.20.0.

Highlights since v1.19.0:

• Standalone binaries (feat(ENG-12826): build standalone CLI binaries with PyInstaller + clean-room smoketest #318, feat(ENG-12827): publish standalone binaries via the release + Docker pipelines  #319, chore(ENG-12828): remove PEX .platforms config  #320): the CLI now ships as self-contained binaries for Linux (glibc/musl, x86_64/aarch64), macOS (arm64/x86_64) and Windows — no Python installation required. Archives are attached to the GitHub release and published to the cloudsmith/cli repository with per-target install manifests, SHA-256 checksums and GPG signatures (Linux). The Docker image now ships the standalone musl binary on a plain Alpine base, and the multi-platform PEX zipapp (cloudsmith.pyz) is retired.
• Behavior change (fix(no-ticket): whoami exits 1 when not authenticated #321): cloudsmith whoami now exits with code 1 when not authenticated (0 when authenticated), across all output formats. Output is unchanged.
• Homebrew (feat(ENG-13436): publish standalone binaries via the Homebrew tap #322): the tap now installs the standalone binary instead of the Python zipapp; brew install cloudsmith-io/cloudsmith-cli/cloudsmith works as a shorter alias.
• Packaging (build(ENG-12825): migrate packaging to uv + pyproject.toml #317): migrated to pyproject.toml + uv (setup.py/setup.cfg retired); no change to how the CLI is installed from PyPI.
• Security (fix(no-ticket): stricter acceptance of api hosts and proxies #315): stricter acceptance of API hosts and proxies — api_host/api_proxy values from a directory-relative config.ini must match an allow-listed suffix, so a checked-in config can no longer redirect credentials to an arbitrary endpoint.

See CHANGELOG.md for full details.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• Other (please describe): Release

Additional Notes