Continuous risk detection replaces Trivy scanning, which is deprecated. Continuous risk detection checks every package against new vulnerability data as soon as it arrives, with no scheduled or manual rescans. It is powered by the Open Source Vulnerabilities database (OSV.dev) and has been generally available since August 2026…
Username and password login with cloudsmith login and cloudsmith token is deprecated and stops working on November 20, 2026. If you authenticate the CLI by running cloudsmith login or cloudsmith token with a username and password — including from scripts and CI jobs — you need to switch to an API key before that date…
Cloudsmith CLI Action v1 is now deprecated. Security-only patches will continue until 31st December 2026, after which v1 reaches end-of-life (EOL). Migrate to v2 before 31st December 2026 to avoid disruption…
We are deprecating the Client Logs, Client Statistics, and Package Statistics views within the classic Cloudsmith web app. Users navigating to these pages will now see a notice directing them to our new web application to view their data…
It's time to formalize the sunsetting plan for our old documentation website (help.cloudsmith.io). Maintaining a single, modern documentation platform helps Cloudsmith ensure technical accuracy, deliver updates faster, and invest in a great user experience for documentation across our platform…
We are extending the sunset timeline for the Cloudsmith classic web app. The classic app will now remain available through the second half of 2026…
On December 17th, 2025, Cloudsmith will no longer store historical scan results from Trivy scans; only the latest scan results from Trivy scans for each package will be available. This change affects historical data that is exclusively available via the API. Historical scan results are not displayed in the Cloudsmith web app. Usage analysis indica…
Starting October 16, 2025, the Client Logs and Client Statistics views in the classic web app will remain visible but will no longer receive updated data…
Last year, we introduced Cloudsmith’s new web app user interface hosted at app.cloudsmith.com and shared our plans to retire the legacy interface on cloudsmith.io. We knew there were a few key features we wanted to bring to the new UI before deprecating the old one, and customer feedback since launch has reinforced those priorities. As such, we have updated our timeline…
To ensure that Cloudsmith continues to provide a consistent and secure experience for users of Dart packages, from February 28th 2025 Cloudsmith will only support Dart SDK version 2.15 or greater. After this date, support for older versions of the Dart SDK will be dropped…