What's new with TinaCloud

docs(adr): make Stripe the source of truth for subscription state

feat(identity): finish the migration scan's outputs for the merge and transform

fix: check push formatting in the husky pre-push hook instead of a Claude hook

feat(identity): pin each migration run and check every stage's inputs

fix(content-api): write multi-repo media and content under the content repo root

feat: erase marketing contacts when an account is deleted

feat(identity): move support CLIs off Cognito path when using WorkOS

feat(content-api): support a per-project contentPath for the content repo

feat(identity): add an optional content path to projects

feat(dashboard): add a content folder setting for multi-repo projects

feat(ses): add auth cutover reminder email template

email: update auth cutover reminder

fix(identity): bind WorkOS editor-login code to the project and check access at token exchange

feat(identity): plan, apply, verify and roll back the duplicate-account merge

feat(identity): build the WorkOS import file and check it independently

feat(content-api): truncate logged GraphQL request body to 2 KB

perf(content-api): bundle each ESM graphql version into one file in the router image

feat: add hourly SES send canary and alarms for prod

feat(content-api): trim DynamoDB-layer router logging

fix(content-api,dashboard): send the GitHub token to identity when finishing the Vercel integration

admin-dashboard: show tinacms project version for default branch

chore(deps-dev): bump @types/jsonwebtoken from 8.5.9 to 9.0.10[bot]

chore(deps): bump the patch-and-minor group in /identity with 2 updates[bot]

chore(deps): bump the patch-and-minor group with 23 updates[bot]

chore(deps): bump seroval from 1.6.8 to 1.6.12[bot]

chore(deps-dev): bump vite from 6.4.3 to 8.3.5[bot]

chore: update TinaCMS dependencies[bot]

fix(dashboard): gate Editorial Workflow on the plan's Stripe flag

feat(dashboard): match the plan cards to the tina.io pricing page

feat(identity): add script to merge Team Plus into Team on Stripe

chore(deps): bump postcss-selector-parser from 6.1.4 to 6.1.5[bot]

Fix multi-repo pull branch indexing

fix(identity): never unverify a user on WorkOS sync

chore: sync the Code reviewer field options with assignable people

fix(deps): refresh solid-js so its seroval copy moves to the patched 1.6 line

feat(dashboard): ask EU visitors for consent before loading tracking scripts

feat: move cli analytics to server

fix(assets-api): keep Cache-Control on media served from assets.tina.io

fix(identity): refuse demoting a project's last admin

docs: decide how GitHub accounts migrate and restructure the account docs

chore: update TinaCMS dependencies[bot]

chore: set the board's Priority from each card's Priority Score

chore: move closed items that never shipped from Done to Won't do on the board

feat(ses): add content-neutral TinaCMS email template

chore(deps): bump the patch-and-minor group across 1 directory with 26 updates[bot]

chore(deps): bump handlebars from 4.7.9 to 4.7.10[bot]

chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 in /e2e/tinacms-compat[bot]

chore(deps-dev): bump vite-tsconfig-paths from 4.3.2 to 6.1.1[bot]

chore(deps-dev): bump stripe from 10.17.0 to 23.0.0[bot]

chore(deps): bump the patch-and-minor group with 2 updates[bot]

chore(deps): bump the patch-and-minor group in /identity with 3 updates[bot]

chore(deps): bump mime-types and @types/mime-types[bot]

chore(deps): bump the patch-and-minor group with 20 updates[bot]

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /admin[bot]

chore(deps): bump picomatch from 2.3.2 to 4.0.7[bot]

chore(deps): bump the patch-and-minor group in /identity with 2 updates[bot]

chore(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.7 in /identity[bot]

chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 in the patch-and-minor group[bot]

chore(deps-dev): bump vite from 8.3.0 to 8.3.3 in /e2e/tinacms-compat[bot]

chore(deps): bump follow-redirects from 1.16.0 to 1.16.1[bot]

chore(deps): bump markdown-it from 14.3.2 to 14.3.3[bot]

chore(deps): bump launch-editor from 2.14.1 to 2.14.2[bot]

chore(deps): bump the patch-and-minor group with 35 updates[bot]

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 in /ui[bot]

chore(deps): bump @octokit/auth-app from 4.0.13 to 8.3.1[bot]

chore(deps): bump dompurify from 3.4.16 to 3.4.17[bot]

chore(deps): bump body-parser from 1.20.6 to 1.20.9[bot]

chore(deps): bump fast-uri from 3.1.8 to 3.1.9[bot]

chore(deps): bump zod from 3.24.2 to 4.6.6[bot]

chore: update TinaCMS dependencies[bot]

perf(content-api): write index batches 4 at a time on prod as well

feat(dashboard): show a nav dropdown on phones

feat(identity): add WorkOS migration export and scan tool

chore: remove 14 dependency declarations nothing in the repo uses

fix(identity): deny disabled users at the authorizer and remove org create-user

fix(assets-api): serve robots.txt and noindex header on the assets domain

fix(identity): count the account deletion grace period in UTC

fix(dashboard): send unknown signed-in paths to /projects

perf(content-api): declare buffer encoding so index sublevels stop throwing errors

fix(dashboard): hide the Security tab when the account has nothing to manage there

fix(identity): keep the stored name on WorkOS user.updated

🧹 Dependabot: ignore deps owned by other automation

Check the token and its branches on the database status route without a branch

fix(content-api): promote silent indexer skip to WARN

fix(content-api): surface indexing cause through the status endpoint

chore(deps): bump shell-quote from 1.10.0 to 1.12.0[bot]

chore(deps): bump proxy-addr from 2.0.7 to 2.0.8[bot]

chore(deps): bump source-map-js from 1.2.1 to 1.2.2[bot]

chore(deps): bump the patch-and-minor group with 13 updates[bot]

chore(deps): bump github.com/posthog/posthog-go from 1.29.0 to 1.32.0 in /identity in the patch-and-minor group[bot]

feat(identity): Self heal verified flag work os

docs: mark the account-activity signals as load-bearing

ci: scan Go only when identity changes and cancel superseded PR builds

fix(ci): wait for npm to serve a new tinacms version before the auto-bump installs it

docs: name the deployed e2e fixture and correct the zstd note

fix: alarm on spikes in failed content changes, not the content DLQ's standing depth

fix: target login-screen announcements by the TinaCMS version a project declares, not its @tinacms/graphql version

fix(auth): preserve editor context when retrying login

fix(assets-api): stage git-push deletes when the media branch is missing

feat(identity): send TinaCloud's own password reset email from the WorkOS webhook

chore(deps): upgrade final-form to 5 and react-final-form to 7 in the dashboard

feat(dashboard): full-width Create Project chooser buttons on phones

feat(identity): Unify TinaCloud WorkOS email policy

chore(deps): hold Amplify on 5 and abstract-level on 1 in Dependabot

fix: gate bulk announcement sends on a rolling SES reputation window

feat(dashboard): explain why account deletion is paused instead of hiding it

fix(deps): pin brace-expansion's 2.x and 5.x copies to their patched releases

feat(auth): Revoke all other WorkOS sessions

feat(dashboard): Add dashboard controls for signing out other sessions

feat(auth): Restore WorkOS auth analytics parity

fix(identity): cache the authorizer policy for 5 minutes and re-check access on fresh reads

chore(deps): take the October patch-and-minor group with the AWS types deduped

perf(content-api): write index batches to DynamoDB in parallel

chore(deps): bump brace-expansion from 1.1.18 to 1.1.21[bot]

chore(deps): bump fast-uri from 3.1.7 to 3.1.8[bot]

chore(deps): bump the patch-and-minor group across 1 directory with 4 updates[bot]

chore(deps): bump markdown-it from 14.3.0 to 14.3.2[bot]

chore(deps): bump dompurify from 3.4.14 to 3.4.16[bot]

chore(deps): bump the patch-and-minor group in /identity with 2 updates[bot]

chore(deps): bump the patch-and-minor group across 1 directory with 22 updates[bot]

chore(deps-dev): bump vite-plugin-svgr from 4.5.0 to 5.2.0[bot]

fix(dashboard): keep Update Payment Method reachable when no card resolves

feat(admin): find customer projects from the staff admin panel

feat(admin): add project and organisation pages to the staff panel

feat(admin): let staff grant a project extra contributor seats

feat(admin): show staff change history in the panel

feat(content-api): alarm when editorial workflow saves keep failing for one project

chore(deps): take the September patch-and-minor group except react-icons

feat: freeze new account deletion requests before WorkOS migration

feat: Heal unprovisioned WorkOS user on retry

test: add deployed TinaCMS client compatibility coverage

feat(dashboard): orange primary buttons, llama welcome hero, responsive Create Project chooser

📝 Remove "may" from the deploy popup warning

feat: add bulk-send email logic

fix(billing): resolve a project's live subscription when it holds more than one row

feat(ses-email-templates): tell announcement recipients what happens to their sign-in

feat: show announcements on the TinaCloud login screen

fix(deps): bump the stale axios copies onto patched releases

chore(identity): log authorizer and gateway errors in the Identity API access log

feat: alarm when the latest @tinacms/graphql has no alias in the deployed content API

chore(deps): bump the patch-and-minor group across 1 directory with 3 updates[bot]

chore(deps): bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 in the patch-and-minor group across 1 directory[bot]

chore(deps-dev): bump vite from 5.4.21 to 6.4.3 in /e2e/tinacms-compat[bot]

chore(deps): bump sonner from 1.7.4 to 2.0.8[bot]

chore(deps-dev): bump vite from 6.4.3 to 8.3.0 in /e2e/tinacms-compat[bot]

🐛 Surface the real indexing failure instead of "Please try again"

chore: upgrade serverless-http from 2.7.0 to 4.0.0 in content-api and assets-api

fix: stop editorial workflow saves crashing on a commit event with no email

chore(deps): bump the patch-and-minor group across 1 directory with 2 updates[bot]

chore(deps): bump the patch-and-minor group across 1 directory with 6 updates[bot]

chore(deps): bump js-yaml from 3.15.1 to 3.15.2[bot]

chore(deps): bump fs-extra and @types/fs-extra[bot]

chore(deps-dev): bump jsdom from 21.1.2 to 30.0.1[bot]

Stop reporting a blocked GitHub call as missing push access

feat(identity): backfill owners on projects and orgs that have none

Administer the CMS announcement bar from a staff admin panel

feat: add MFA enrolment for AuthKit accounts

chore: upgrade koa to 3 with @koa/cors 5, koa-router 12 and @koa/bodyparser 6

chore: update TinaCMS dependencies[bot]