What's new with TinaCloud

remove word last from header

feat(dashboard): block transferring ownership to a deactivated user

feat(dashboard): gate account deletion on ownership + type-to-confirm

feat(identity): WorkOS webhook endpoint with signature verification, gated behind WORKOS_AUTH

feat(identity): WorkOS user-provisioning webhook handler

fix(auth): route new invitees to /register, not /signin

fix(auth): stop link-preview crawlers locking invitees out of their own invite

📝 Add ADR: source of truth for document `lastUpdated` in collection listings

✨ Add isDraft body param to editorial workflow PR creation

feat(identity): gate account deletion on org/project ownership

fix(content-api): skip full media mirror for branch-aware non-default branches

feat(identity): block ownership transfer to a disabled user

💄 Tighten projects table spacing and labels

✨ Cache per-item Timestamp during collection-list iteration

fix(identity): harden user provisioning against duplicate records, retries and race conditions

fix(identity): whitelist localhost dev port range for OAuth callbacks

Add unit tests for dual-issuer JWT authorizer

⏪ Revert gitleaks hook + stray test.txt commits pushed to main

✨ Surface per-document last-write Timestamp from the content DynamoDB read

🔒 Add Husky hooks: gitleaks secret scan, format check, and main-push block

fix(content-api): guard DDB iterator throttles so Lambda runtime survives

fix(content-api): retry transient 5xx from identity-v2

Bump actions to use Node 24 and pin SHAs

🧹 Add Dependabot config with 3-day cooldown and grouped updates

✨ Show actionable build/index failure details in the Event Log

📝 Document the dependency cooldown policy in AGENTS.md

update to tinacloud logo

Support workos backend jwt authorization for tinacloud

change avatar logo to initials

docs(adr): restructure WorkOS AuthKit migration docs into a layered ADR + action plan

💄 Fix squished logo and inconsistent spacing/buttons across email templates

🐛 Send firstName/lastName to Segment so Mailchimp welcome email greeting fills

Add Instructions-Security.md

fix(identity): disable federated users by resolved Cognito username

chore: update TinaCMS dependencies[bot]

fix(identity): treat Cognito UserNotFound as idempotent on disable

fix(content-api): surface wrapped error cause in transaction event log

feat: enable branch-aware media by default for all apps

feat: transfer project ownership to another collaborator

docs(identity): DynamoDB update-in-place convention + support-ops identity check

docs(adr): WorkOS POC planning artifacts + decision investigations

setup for feature flag for WorkOS

fix(media): self-heal orphaned media uploads that dead-lock with "already exists"

fix(content-api): skip and clean up schema-less branches on reset and repo-binding changes

Upgrade dashboard to React 17

fix(ci): install gosec via Go proxy to stop Security scans rate-limit flakes

chore: update TinaCMS dependencies[bot]

refactor(identity): rename JWT claim tinacloud_client_id to tinacloud_user_id

add new oauthRevoke endpoint and point from identityStack