Cloudsmith Changelog

This week, the Cloudsmith team made the following improvements: Improve UX of filter toggles on entitlements page Fixed bug when pressing enter on 2FA deletion form Fix an error in the docker api. User with an entitlement token received a http 500 response when they should have received a http 403. Fixed issue where token creation or deletion a…

This week, the Cloudsmith team made the following improvements: The NPM format now uses semantic versioning to determine the latest package, in line with most other formats on the service Terraform backend updated to support semantic versioning pre-releases and build metadata. Fixed an issue where organization invites emails could sometimes cont…

Good news! We've updated Cloudsmith's SAML Single Sign-On capabilities to include SAML Group Sync. This new functionality streamlines team management and reduces onboarding time for new team members. SAML Group Sync maps an attribute from your Identity Provider to a team in your Cloudsmith Organization. This allows you to add or remove users from…

This week, the Cloudsmith team made seven platform improvements: Bugfixes Fixed the use of the 'enter' key when deleting entitlement tokens in the UI Fixed an issue where setting global org privileges would sometimes not be applied Fixed an issue where many tags on a package could prevent moves and copies to other repositories Fixed an issue p…

We're pleased to announce the release of Cloudsmith's audit logs feature to general availability. With audit logs, organizations have a historical record of activity within their Cloudsmith organization for compliance and troubleshooting purposes. Audit logs capture all actions performed by the system, users, and service accounts. This allows an o…

Good news! Cloudsmith now supports Rocky and Alma Linux as aliases for Enterprise Linux instead of different distributions, which is less work for you and your users. Why did we make this change? When Red Hat announced they would discontinue the development of CentOS, alternatives began emerging, including Rocky and Alma Linux. Based on customer…

We're pleased to announce the release of Service Accounts to Beta for Cloudsmith customers. Service accounts are a specific type of account that allows you to create a Cloudsmith API Key not tied to a specific user. Service accounts are ideal for any use case where you have automated processes that require write access to a repository, and will im…

Only second in excitement to new features: the legal docs for the service have been updated! You can follow the link below to read the latest documentation, versioned 20220623, but in summary: We believe in the most robust protection for you and your user's data, so we've added Standard Contractual Clauses (SCCs) and a UK International Data Trans…

You can now easily host signed SBOMs alongside your OCI artifacts in Cloudsmith, and use them for incident investigations and run-time protection, further securing your software supply chain. SBOMs are fundamental to software supply chain security, so much so that the Open Source Security Foundation included "SBOMs Everywhere" as one of the 10 str…

At Cloudsmith, our mission is to be the universal package management solution for teams and enterprises. As a result, we continually expand and improve the package formats we support. We are delighted to be able to introduce support for public and private Conda package repositories. You can now securely host your Conda packages alongside other pac…