Release v1.19.0

Bump version: 1.18.0 → 1.19.0

Release v1.18.0

Bump version: 1.17.0 → 1.18.0

Release v1.17.0

Bump version: 1.16.0 → 1.17.0

Release v1.16.0

Bump version: 1.15.0 → 1.16.0

Release v1.15.0

Bump version: 1.15.0 → 1.15.0

Release v1.14.0

[1.14.0] - 2026-03-13

Added

• Added vulnerabilities command to retrieve security scan results for a package
  • Summary View (Default): Displays a high-level count of vulnerabilities broken down by severity (Critical, High, Medium, Low, Unknown).
  • Assessment View --show-assessment (-A): Provides a detailed breakdown where vulnerabilities are:
    • Grouped by the specific affected upstream package / dependency.
    • Sorted by severity (Critical first).
    • Richly formatted tables.
  • Filtering Capabilities:
    • By Severity: --severity Show only specific levels (e.g., just Critical and High).
    • By Status: --fixable | --non-fixable Filter to show only "Fixable" vulnerabilities (where a patch exists) or "Non-Fixable" ones.
  • Supports --output-format json | pretty_json for programmatic usage

Release v1.13.0

Bump version: 1.12.1 → 1.13.0

Release v1.12.1

Added

• Added Model Context Protocol (MCP) server support via cloudsmith mcp commands. Only STDIO transport is supported for now.
• Auto-configure supported clients (Claude Desktop, Cursor, VS Code, Gemini CLI) with cloudsmith mcp configure
• List available tools with cloudsmith mcp list_tools and tool groups with cloudsmith mcp list_groups
• Filter tools via mcp_allowed_tools and mcp_allowed_tool_groups configuration options to control which API operations are exposed

Release v1.12.0

Release version v1.12.0

Release v1.11.2

Bump version: 1.11.1 → 1.11.2