Cloudsmith Changelog

Integrating Cloudsmith with Azure DevOps pipelines just got easier with the release of Cloudsmith’s command-line interface (CLI) extension for Azure DevOps. With this extension, there’s no need to manually install or configure the Cloudsmith CLI. Our task automates everything, ensuring the Cloudsmith CLI is ready to go on Linux and Windows runners…

In addition to Cloudsmith’s Roadie Backstage plugin now being an official Roadie plugin, we’ve added new functionality and given the components a fresher look. Roadie is a SaaS application with a fully customizable internal developer portal built on Backstage. If your organization is not yet using an internal developer portal, we recommend explori…

You can now integrate Cloudsmith with Argo CD to automate the deployment of your Kubernetes applications using Helm charts and Docker images securely stored in Cloudsmith repositories. 🚀 With flexible authentication options, including API keys and OpenID Connect (OIDC), you can automate deployment workflows while ensuring security and efficiency…

The latest version of the Cloudsmith command-line interface (CLI) now supports authenticating your Cloudsmith account with SAML single sign-on. 🌟 This is useful for users who do not have a username and password and who primarily interact with Cloudsmith through the CLI, as you no longer have to go to the web application to retrieve your API key. �…

Cloudsmith now supports Composer Upstreams, making dependency management easier, faster, and more secure for your PHP projects. Composer is a powerful dependency management tool for PHP, and with our new Composer Upstreams support, you can now proxy and cache dependencies from upstream sources like Packagist and private repositories. This gives yo…

We’ve recently added support for Ultra customers to claim and verify their organization’s domain. ✨ This addition to the platform streamlines user provisioning and onboarding for SCIM-provisioned users by removing the unnecessary steps for new users to verify their identity via email and for existing users to accept an invitation to join the organi…

Cloudsmith’s support of OpenID Connect (OIDC) gives you a more secure method for programmatic access to Cloudsmith. 🔐 OIDC allows trusted systems - such as GitHub Actions - to authenticate to Cloudsmith using short-lived JWT tokens, eliminating the need for long-lived tokens in your pipelines. Today, we’ve added support for the wildcard operator…

As part of our transition to more secure authentication methods, we are beginning the 24-hour brownout for username and password authentication for API requests. 🚧 What this means: From 5 pm EDT September 16th to 5 pm EDT September 17th, API requests using username and password authentication will fail. This brownout period is designed to help…

Cloudsmith has extended its support for Maven by allowing users to upload multiple files (.pom, .jar, .zip, and -sources.jar) to a single Cloudsmith Maven package and cache from upstream sources. Previously, you could upload multiple but specific combinations of files (e.g., .pom + .jar + -sources.jar or .pom + .zip + -sources.jar), but not all at…

The new Cloudsmith command-line interface (CLI) GitHub Action is now available! This action simplifies your CI/CD workflows by automating the Cloudsmith CLI's setup and authentication process. With support for pre-authenticating with OpenID Connect (OIDC), you can securely authenticate without the need to manage API keys. Key benefits Easy instal…