Release v1.13.0

[BartoszBlizniak]

Description

Bumpversion + release of the following PRs:

• feat(CENG-686): Add --verbose output for cloudsmith whoami command #264
• fix(mcp): v2 API Spec loading #262
• feat(CENG-683): Add logout command to the CLI #263
• fix(no-ticket) update python-toon dependency name #265
• chore(CENG-682): Skip keyring checks and add a new --request-api-key flag for cloudsmith auth command #261

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• Other (please describe)

Additional Notes

[Copilot]

Pull request overview

This is a version bump release PR that updates the Cloudsmith CLI from version 1.12.1 to 1.13.0. The release consolidates five feature and bug fix PRs: authentication improvements (#261, #264, #263), MCP bug fix (#262), and a dependency correction (#265).

Changes:

• Bumped version from 1.12.1 to 1.13.0 across VERSION files and .bumpversion.cfg
• Added CHANGELOG.md entry for v1.13.0 documenting new features and deprecation notices

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
cloudsmith_cli/data/VERSION	Updated version number from 1.12.1 to 1.13.0
.bumpversion.cfg	Updated current_version to 1.13.0 for consistency
CHANGELOG.md	Added v1.13.0 release entry with new features and deprecation notices

Comments suppressed due to low confidence (1)

CHANGELOG.md:28

• The CHANGELOG.md is missing a "### Fixed" section for this release. According to the mentioned PRs, there are two bug fixes that should be documented:

1. PR #262: Fixed v2 API spec loading (MCP endpoints now available)
2. PR #265: Fixed toon-python dependency name to python-toon

Following the Keep a Changelog format used in this project, add a "### Fixed" section after line 22 (after the "### Added" section) to document these bug fixes.

## [1.13.0] - 2026-02-16

### Added

- Added `CLOUDSMITH_NO_KEYRING` environment variable to disable keyring usage globally. Set `CLOUDSMITH_NO_KEYRING=1` to skip system keyring operations.
- Added `--request-api-key` flag to `cloudsmith auth` command for fully automated, non-interactive API token retrieval. Auto-creates a token if none exists, or auto-rotates (with warning) if one already exists. Compatible with `--save-config` and `CLOUDSMITH_NO_KEYRING`.
- Added `--verbose` (`-v`) flag to `cloudsmith whoami` to show detailed authentication information including active method (API Key or SSO Token), credential source, token metadata, and SSO status. Supports `--output-format json`.
- Added `cloudsmith logout` command to clear stored authentication credentials and SSO tokens.
  - Clears credentials from `credentials.ini` and SSO tokens from the system keyring
  - `--keyring-only` to only clear SSO tokens from the system keyring
  - `--config-only` to only clear credentials from `credentials.ini`
  - `--dry-run` to preview what would be removed without making changes
  - Supports `--output-format json` for programmatic usage

### Deprecation Notices

- The `--token` flag on `cloudsmith auth` is deprecated. Use `--request-api-key` instead.
- The `--force` flag on `cloudsmith auth` is deprecated. Use `--request-api-key` instead (force behavior is implied).
- The `--json` flag on `cloudsmith auth` is deprecated. Use `--output-format json` instead.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.