---
title: "CLI GitHub Action v2.0.0"
description: "The v2.0.0 release of the Cloudsmith CLI GitHub Action migrates the action to the Node.js 24 runtime and updates default OIDC audience claims to align with modern security standards."
canonical_url: "https://cloudsmith.com/changelog/cli-github-action-v2-0-0"
last_updated: "2025-12-19T17:35:35.728Z"
---
# CLI GitHub Action v2.0.0

The v2.0.0 release of the [Cloudsmith CLI GitHub Action](https://github.com/cloudsmith-io/cloudsmith-cli-action) migrates the action to the **Node.js 24** runtime and updates default OIDC audience claims to align with modern security standards.

This is a major version release to prevent breaking changes for users pinned to `@v1`. While core CLI functionality remains unchanged, environment requirements and OIDC defaults have been updated to ensure long-term compatibility and improved security.

## Key changes

### Node.js 24 Runtime Migration

The action now utilizes the **Node.js 24** (Current LTS) runtime.

- **GitHub-Hosted Runners:** GitHub automatically provides the necessary runtime; no user intervention is required.
- **Self-Hosted Runners:** You must ensure Node 24+ is installed on your environment to run `v2.0.0`.
- **Deprecation Notice:** Support for Node 20 is now deprecated in this major version. We will continue to maintain `v1` until the Node 20 End-of-Life (EOL) scheduled in **April 2026**, but we recommend migrating to `v2` as soon as possible.

### Updated OIDC audience defaults

The default `oidc-audience` input has been updated to provide organization-specific audience claims, increasing the security of the OIDC exchange.

- **New default:** `https://github.com/{org-name}` (using `GITHUB_REPOSITORY_OWNER`)
- **Previous default:** `api://AzureADTokenExchange`

```json
{
  "_key": "13756cc72c91",
  "_type": "callout",
  "content": [
    {
      "_key": "d81e8783aff6",
      "_type": "block",
      "children": [
        {
          "_key": "c615ff5ac578",
          "_type": "span",
          "marks": [
            "strong"
          ],
          "text": "I"
        },
        {
          "_key": "8baf38fcd02e",
          "_type": "span",
          "marks": [],
          "text": "f your existing OIDC trust configuration relies on the legacy "
        },
        {
          "_key": "cd475a00586f",
          "_type": "span",
          "marks": [
            "code"
          ],
          "text": "api://"
        },
        {
          "_key": "24bd9fe93330",
          "_type": "span",
          "marks": [],
          "text": " claim, you must either update your validation logic within Cloudsmith or explicitly set "
        },
        {
          "_key": "3c58133def2a",
          "_type": "span",
          "marks": [
            "code"
          ],
          "text": "oidc-audience: 'api://AzureADTokenExchange'"
        },
        {
          "_key": "6325eacef704",
          "_type": "span",
          "marks": [],
          "text": " in your workflow YAML to maintain current behavior."
        }
      ],
      "markDefs": [],
      "style": "normal"
    }
  ],
  "markDefs": null,
  "variant": "warning"
}
```

For a detailed list of all technical commits and specific file changes, please refer to the [official GitHub Changelog](https://github.com/cloudsmith-io/cloudsmith-cli-action/blob/master/CHANGELOG.md).