Cloudsmith Changelog

Power users of the Cloudsmith API and CLI have long enjoyed search functionality of repository entitlement tokens. Today we're delighted to announce that our UI-using friends are now also covered! Entitlement token search uses the same query syntax as our other search fields and provides a simple way to perform searches based on name, kind, or ass…

Great news! We've just released an integration with Roadie, a start-up that provides SaaS for Backstage, a service catalog open-sourced by Spotify that automatically tracks your microservices. Organizations use Roadie to build a software catalog and developer portal for internal systems, centralizing information in one convenient location. We kno…

Great news! Based on customer feedback, we've made improvements to how you manage access and permissions for Service Accounts, improving their usability and extending the capabilities of what a Service Account can do. What's changed? With this release, there are two key feature improvements. First, Service Accounts can now be assigned a manager…

Managing users with Cloudsmith should be easy. That's why we have support for SAML sign-on and SAML group sync, two features that let you automate user access. With our latest feature release - deprovisioning users with SCIM - we've made it just as easy for you to remove users from your organization, too. By integrating Cloudsmith with your IdP vi…

This week, the Cloudsmith team made the following improvements: Allow users to specify the use of an entitlement tokens name, rather than its identifier when configuring their webhook Fixes an issue where general Permission Denied API responses were including "Geo/IP" when not relevant. Fixed an issue where the Repository>Access Controls UI woul…

This week, the Cloudsmith team made the following improvements: Fixed an issue where an unprivileged user could send an Organization invite via the API which granted elevated privileges. Fixed a sporadic issue where the security scan result detail view would not show all vulnerabilities, and the graphs would not display any data. Fixed an issue…

Great news! We've made more progress in our mission to help ensure our customers can automate everything by extending the Cloudsmith API to support managing team and organization invites. You can now fetch all teams within an organization, create new teams or update existing ones, and delete teams. The API also supports listing team members, along…

This week, the Cloudsmith team made the following improvements: Fixed an issue where Managers had Admin privileges on Repositories when the Default Object Permission was set to Read or Write Fixed a bug preventing upload of GPG signing keys without a passphrase Fixed an issue that caused HTTP 413 errors when trying to perform DELETE requests usi…

Organization Managers will no longer have implicit Admin-level access for repositories in which they have been given explicit Read (or more) access. They will now need to be assigned a higher level if required. The change may be a breaking one that requires action on your part but brings it in line with intent. A Manager user is intended to have p…

This week, the Cloudsmith team made the following improvements: Fixed the API documentation for the Entitlement creation endpoint to reflect a 201 status on success Updated RPM setup script to alleviate GPG signature verification errors Added pagination to the team view page in order to improve performance…