You can now upload and distribute arbitrary files via Cloudsmith Maven repositories, whether pulled from upstream sources or directly uploaded.
Previously we supported artifacts that were using well known file names (Maven coordinates). As Maven doesn't enforce any standard when uploading a filename, we were not proxying and caching non-standard files from upstream repositories, nor supporting the direct upload of those non-standard files. Now, if you depend on non-standard Maven file names (such as custom dependencies or miscellaneous files) you can cache these from upstream repositories, as well as upload directly to Cloudsmith.
Cloudsmith has expanded support for the Maven format to include arbitrary (non-standard) files. These are files that don’t follow the typical Maven artifact structure but are still versioned and distributed using Maven-compatible tooling.
These include:
Arbitrary file support applies to:
Check out our Maven Repository documentation for more information, or contact us if you have questions or feedback on these new capabilities.
We now verify the authenticity of sign-ins from new or unrecognized devices. Because this is a new change, you may be asked to verify a device even if it has accessed Cloudsmith before. By confirming both your login credentials and the device, we help prevent unauthorized access with minimal disruption to your workflow.
Cloudsmith’s Enterprise Policy Management (EPM) now supports the Exploit Prediction Scoring System (EPSS), a data-driven metric designed to estimate the probability of a software vulnerability being exploited in the wild.
Cloudsmith has extended our Swift support to include the native signing of Swift packages. This update brings seamless, secure, and high-performance signing capabilities directly to iOS developers, eliminating the need for third-party workarounds or custom implementations.
Cloudsmith now supports natively signing all NuGet packages using an X.509 certificate. This feature enables consumers to verify a package’s repository signatures in native tooling using the NuGet or .NET CLI, ensuring integrity and authenticity.
Package groups are now available in Cloudsmith’s new web application. This view groups all packages within a repository by their format and name, allowing you to scan over repository contents more easily if you have multiple versions of packages within a repository.
We are pleased to announce dark mode for Cloudsmith’s new web application. Dark mode is an essential feature for modern web applications, and has been a frequent customer request since the new web app was released in Early Access.
By submitting this form, you agree to our privacy policy
