release: cloudsmith-cli v1.27.0

[cloudsmith-iduffy]

Description

Prepare Cloudsmith CLI 1.27.0 from the changes already merged into master since v1.26.0.

• Bump the release version to 1.27.0 in .bumpversion.cfg and cloudsmith_cli/data/VERSION.
• Finalize the 1.27.0 changelog to describe the behavior already present in master.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• Other (release)

[Copilot]

Pull request overview

Prepares the Cloudsmith CLI v1.27.0 release by bumping version metadata, finalizing the changelog, and hardening/validating new auth + Terraform credentials-helper behaviors (including packaging and smoke tests).

Changes:

• Bump release version to 1.27.0 and add the 1.27.0 changelog entry.
• Harden and test the Terraform credentials helper (HCL arg escaping, stable installer binding, foreign-registry fallback, packaging/smoke assertions).
• Improve non-interactive auth behavior, terminal color inheritance, and restrict OIDC exchange diagnostics to safe standard fields.

Reviewed changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
packaging/smoketest.sh	Adds an offline smoke check ensuring the Terraform helper executable is present and returns {} for foreign registries.
cloudsmith_cli/data/VERSION	Bumps packaged CLI version to 1.27.0.
cloudsmith_cli/credential_helpers/terraform/terraformrc.py	Uses JSON escaping to safely render HCL string literals for terraformrc args.
cloudsmith_cli/credential_helpers/terraform/installer.py	Binds the Terraform launcher to the installing environment (frozen vs sibling console scripts) and avoids PATH ambiguity.
cloudsmith_cli/core/utils.py	Adds conventional env-flag parsing and exposes terminal_is_interactive() for safe prompt gating.
cloudsmith_cli/core/tests/test_terminal_color.py	Extends coverage for numeric/disabled env flags affecting color + interactivity.
cloudsmith_cli/core/tests/test_oidc_provider.py	Updates assertions to ensure only selected safe OIDC JWT fields are logged.
cloudsmith_cli/core/credentials/providers/oidc_provider.py	Restricts OIDC diagnostics to selected standard JWT header/claim fields.
cloudsmith_cli/cli/webserver.py	Rejects 2FA prompting when no interactive terminal is available.
cloudsmith_cli/cli/tests/test_webserver.py	Adds test ensuring non-interactive 2FA paths fail without prompting.
cloudsmith_cli/cli/tests/test_decorators.py	Adds regression test for group→subcommand --color inheritance behavior.
cloudsmith_cli/cli/tests/test_credential_helper_terraform.py	Tightens runtime error expectations and adds foreign-host behavior tests without repo configured.
cloudsmith_cli/cli/tests/test_credential_helper_terraform_installer.py	Adds tests for HCL escaping and installer target command binding (and related env cleanup).
cloudsmith_cli/cli/tests/commands/test_auth.py	Adds coverage for non-interactive missing-workspace failure and --relogin behavior.
cloudsmith_cli/cli/decorators.py	Implements --color inheritance from group contexts when subcommands use defaults.
cloudsmith_cli/cli/commands/credential_helper/terraform.py	Makes --repo optional at parse-time to allow {} fallback for foreign hosts.
cloudsmith_cli/cli/commands/auth.py	Adds --relogin and prevents prompting for Workspace in non-interactive contexts.
CHANGELOG.md	Adds the 1.27.0 release notes detailing Terraform helper, auth, OIDC diagnostics, and related fixes.
.github/workflows/binaries.yml	Requires standalone archives to include terraform-credentials-cloudsmith (and .exe).
.bumpversion.cfg	Updates bumpversion’s current_version to 1.27.0.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.