[BartoszBlizniak]

Description

Cut the 1.30.0 release.

• Move the [Unreleased] entries under a [1.30.0] heading dated 2026-10-21.
• Add missing entries for fix(no-ticket): update vulnerability examples to use correct term on_violation_quarantine #501 (vulnerability policy help examples) and the Terraform credential helper token change in feat(no-ticket): get Workspace domains from the v2 API #476.
• Fold the fix(ENG-15090): find default-installed launchers in credential-helper list #491 credential-helper list fix into the feat(ENG-15090): creating default credential helper dir in user's home directory #482 entry, since the default ~/.cloudsmith/bin directory has not been released yet.
• Check every entry against the code and correct the details: the error reporting opt-out values and per-profile opt-out (feat(ENG-14146): Report errors to sentry #459, Iduffy/eng 14146 redact cloudsmith credentials #480), how to turn strict verification off and where it applies (Add --without-ssl-verify-strict to disable VERIFY_X509_STRICT #499), the previous default launcher directory (feat(ENG-15090): creating default credential helper dir in user's home directory #482), and the domains list changes (feat(no-ticket): get Workspace domains from the v2 API #476).
• Add the PR number to every entry.
• Merge master and add entries for the changes merged on 2026-10-20 and 2026-10-21:
  • fix(ENG-15211): explain TLS certificate failures and stop retrying them #504: a failed TLS certificate check stops at once with a hint (--without-ssl-verify-strict or REQUESTS_CA_BUNDLE) and is no longer sent to error reporting, SAML renewal errors include the cause, push upload host errors, the download exit code, tokens create errors, the usage error for create commands without name, and SAML instead of SSO in messages.
  • fix(cargo-provider): register the Cargo provider when config.toml has no [registry] table #506: credential-helper install cargo registers the provider when config.toml has no [registry] table. master had no entry for it.
  • bug(token): stop tokens create --save-config crashing when no token is returned #508: folded into the fix(ENG-15211): explain TLS certificate failures and stop retrying them #504 tokens create entry.
  • Upgrade certifi to 2026.10.19 #507 (certifi in uv.lock) has no entry.
• Add entries for feat(no-ticket): add --proxy and apply it to all HTTP requests #505: the new --proxy option (CLOUDSMITH_PROXY, proxy) for all HTTP requests, with --api-proxy kept as an alias, the background update check using the command's proxy and certificate options, --proxy in the Terraform helper args, and two fixes: connections that ignored the proxy, and HTTPS_PROXY/HTTP_PROXY overriding the configured proxy. feat(no-ticket): add --proxy and apply it to all HTTP requests #505 is now merged, and master is merged into this branch again.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• Other (release)

Additional Notes

Tagging the merged master commit as v1.30.0 publishes the release.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

Version metadata is consistent, and the release notes align with the reviewed implementation and linked PR context.

No open issues 🎉

What changed in this PR

Prepares the CLI’s 1.30.0 release with synchronized version metadata and finalized release notes.

Changes:

• Updates the package and bumpversion versions to 1.30.0.
• Dates the release notes, adds missing entries and PR references, and clarifies behavior and breaking changes.

File	Description
cloudsmith_cli/​data/​VERSION	Sets the CLI version to 1.30.0.
CHANGELOG.md	Finalizes and corrects the 1.30.0 release notes.
.bumpversion.cfg	Synchronizes release tooling with version 1.30.0.

_{Review effort: Balanced}