We’ve added support for generic upstreams to the 

. This update allows customers to automate the proxying and caching of any file-based asset - such as raw binaries or scripts - directly via Infrastructure as Code.

 resource, you can integrate external file sources into your supply chain with consistent, repeatable configurations.

 for more details on the new generic format and upstreams.

We’ve updated the Cloudsmith web app with several improvements to streamline your daily workflow and provide better visibility into your account usage.

 The Usage Limits UI now displays your maximum account capacity alongside current consumption, providing a more accurate picture of your remaining limits at a glance.

 When viewing package groups, packages are now sorted by version number in descending order. The most recent and relevant versions are now automatically positioned at the top of the list.

 Users attempting to log in via username/password when SAML is enforced will now receive clear guidance to use SSO, reducing confusion and failed login attempts.

 A new alert will now warn you before you navigate away from a page with unsaved changes, preventing accidental data loss.

 Form validation now provides real-time error messages (such as character limits) within the form. This allows you to fix issues immediately without waiting for a failed submission message.

Recent quality of life improvements in the Cloudsmith web app

We are deprecating the Client Logs, Client Statistics, and Package Statistics views within the classic Cloudsmith web app. Users navigating to these pages will now see a notice directing them to our new web application to view their data.

To provide a faster, more reliable experience, we are sunsetting legacy infrastructure that is no longer receiving live updates. By retiring these dormant datasets and the underlying databases, we can reduce platform complexity and focus our resources on the high-speed data pipelines in the 

This affects all users of the classic web app. Instead of an empty table, you will see a direct link to your logs in the new interface.

No data has been deleted. All historical and current logs remain fully accessible and searchable within the new web app.

While there isn't a 1:1 "graph" replacement for individual package stats in the new UI, all the raw data is still there! Since the classic graph stopped updating in mid-December 2025, you can find the most current information by filtering your Client Logs by package in the new web app.

If you have any questions or need help finding a specific view in the new app, 

Deprecation: Client logs and statistics in the classic web app

. This brings our automated exports into parity with the Cloudsmith UI and manual CSV downloads, giving you deeper visibility into your package delivery performance.

For teams managing high-traffic repositories or optimizing CI/CD pipelines, understanding cache performance is vital. This update ensures your external logging and observability tools have the same level of granularity as the Cloudsmith web app.

 Identifies whether a package was served from an existing cache (

 This field is now live and included in the JSON payload. As a standard JSON addition, this is a non-breaking change for downstream consumers.

 To prevent breaking existing automated workflows, we are releasing the CSV update separately. We are currently coordinating with customers who utilize our larger CSV delivery format to ensure a smooth transition.

New field: Cache hit / miss data added to client log exports

We’ve rolled out a suite of updates to 

 to help you deliver a more professional, secure, and transparent experience to your end users.

: Ultra and Enterprise customers can now remove Cloudsmith branding from their portal. Keep your brand front and center with a fully white-labeled interface.

 Docker tags are now visible directly within the package table and details page, providing full context at a glance for faster discovery.

 GPG fingerprint information is now displayed prominently, giving your users immediate confidence in the security and integrity of every package they install.

No more guessing with long version numbers

: Tooltips now display the full version string on hover, ensuring you can identify the exact package you need without confusion.

 are now generally available for all customers. If you're interested in distributing proprietary software securely, 

Recent improvements to Broadcasts

 offers a flexible way to upload and manage any file or binary within Cloudsmith. This release includes 

, enabling teams to fetch assets from external sources that don’t fit into standard package ecosystems.

This brings your custom scripts, installers, and zipped binaries into your managed supply chain, automating ingestion and ensuring that your internal URLs remain consistent with upstream sources.

The Generic format is designed for artifacts that rely on specific file paths rather than semantic versions. By using the filepath as the unique identifier, this format allows you to mirror the exact directory structures of external sources (like a raw Apache file server or a Gradle distribution) directly within Cloudsmith.

 Use filepaths as unique identifiers to replicate upstream directory structures exactly as they exist at the source.

Proxy & cache from upstream repositories:

 Securely fetch and cache files from external sources, creating a more secure and reliable internal supply chain.

 We merge local packages and cached upstream files into a single, browsable HTML index.

 Prevent file collisions between multiple upstreams by assigning unique path prefixes (e.g., gradle_distributions/) to keep assets distinct.

The Generic format connects to a wide variety of sources via three primary methods:

 Connects to any simple, unstyled HTML directory (no JavaScript) to index and download files. Works out-of-the-box for sources like 

 We offer specialized handlers for specific ecosystems, including 

 that use JavaScript rendering, we support integration via their APIs. 

Note: Due to the variability of these environments, these upstreams require a dedicated configuration. Please contact us to help set this up.

. You can begin using it today by creating a new repository and selecting "Generic" as the format type for upload.

 for additional instructions, and please 

 with any questions or feedback as we continue to refine the format.

Mirror external file structures and secure your binaries with the new Generic format

We’ve added multi-select support for packages in the Cloudsmith web app, making it easier and faster to take action across multiple packages at once.

You can now select up to 100 packages within a repository and apply common actions in a single step—such as copying packages, triggering a resync, quarantining content, and more. This helps teams maintain control and consistency across their repositories while reducing manual effort.

Perform bulk actions instead of repeating the same operation package by package.

Apply actions consistently across selected packages, lowering the chance of missed steps or configuration drift.

Whether you’re responding to a security issue, promoting artifacts, or cleaning up repositories, multi-select makes large-scale package management far more efficient.

 This release supports actions on up to 100 packages at a time. We plan to increase this capacity to 1,000 packages in early Q2.

 To ensure data safety, bulk deletion is currently disabled. It will be enabled alongside our upcoming 

 feature (scheduled for early Q2), ensuring you can recover accidentally deleted assets.

Manage generic upstreams via the Cloudsmith Terraform provider

Other logs

Recent quality of life improvements in the Cloudsmith web app

Deprecation: Client logs and statistics in the classic web app

New field: Cache hit / miss data added to client log exports

Recent improvements to Broadcasts

Mirror external file structures and secure your binaries with the new Generic format

Multi-select package actions are now available on the web app