What's new with TinaCloud

chore: update TinaCMS dependencies[bot]

fix(identity): treat Cognito UserNotFound as idempotent on disable

fix(content-api): surface wrapped error cause in transaction event log

feat: enable branch-aware media by default for all apps

feat: transfer project ownership to another collaborator

docs(identity): DynamoDB update-in-place convention + support-ops identity check

docs(adr): WorkOS POC planning artifacts + decision investigations

setup for feature flag for WorkOS

fix(media): self-heal orphaned media uploads that dead-lock with "already exists"

fix(content-api): skip and clean up schema-less branches on reset and repo-binding changes

Upgrade dashboard to React 17

fix(ci): install gosec via Go proxy to stop Security scans rate-limit flakes

chore: update TinaCMS dependencies[bot]

refactor(identity): rename JWT claim tinacloud_client_id to tinacloud_user_id

add new oauthRevoke endpoint and point from identityStack

revert: back out #3613 e2e auth tests pushed to main without review

test(dashboard): e2e GitHub OAuth sign-in + sign-out (#3613)

feat: add cli auth endpoints

feat: add tinacloud client id to jwt token

🐛 Write framework-aware env var prefixes for Vercel quickstart

fix(assets-api): redirect oversized originals to presigned S3 URL (#3532)

feat: automatically detect installation id from repo

chore: update TinaCMS dependencies[bot]

fix: set Cognito UserPool featurePlan to ESSENTIALS

fix: seed branch media indexes regardless of branch-aware flag, drop MediaRoot from index schema

✨ Add CLI Cognito app client (PKCE) to IdentityStack

feat(content-api): server-side media editorial workflow

fix(identity): unblock project deletion when Stripe subscription is already canceled

feat: add account deletion request button

fix(emails): restore TinaCloud lockup in transactional email templates

✨ Add /authme endpoint for CLI PKCE auth

fix(dashboard): show SSO option when login email is autofilled

fix(media): allow .html and .htm in the media index allowlist

Playwright setup for e2e auth login

Pass ExclusiveStartKey in paginated DynamoDB queries

Add project-selector loading feedback

chore(deps): bump sqlite-level 2.1.0 → 2.1.1

fix(content-api): wrap unhandled DynamoDB errors so Lambda runtime survives (closes #3572)

their first contribution

polish(dashboard): Configuration UI + "Repo" naming sweep

docs(adr): WorkOS AuthKit vs raw WorkOS API spike decision