Cloudsmith now supports ComposerĀ Upstreams, making dependency management easier, faster, and more secure for your PHP projects.
Composer is a powerful dependency management tool for PHP, and with our new Composer Upstreams support, you can now proxy and cache dependencies from upstream sources like Packagist and private repositories. This gives your organization a single source of truth for all PHP packages and dependencies, streamlining your build and deployment processes.
Proxying Packages: Directly proxy Composer packages from upstream sources, such as Packagist or private repositories. Simplify your integration by setting up Cloudsmith as the central hub for all your PHP dependencies. By setting up Cloudsmith as your proxy, Composer will see remote packages as belonging to Cloudsmith repositories.
Caching Packages: Speed up your development process by caching Composer packages within your Cloudsmith repository. This ensures fast delivery and improved performance while reducing reliance on external sources. By caching Composer packages within Cloudsmith, you gain greater control over security and compliance. This allows you to scan for vulnerabilities, review licensing information, and monitor package usage within your projects.
Simplified Package Management: With Composer Upstreams, you can now manage all your PHP dependencies through a single, easy-to-use interface. This means better software, faster builds, and a more secure development process.
Check out our documentation and in-app examples to help you set up Composer Upstreams with ease. Whether you're managing open-source, public, or private packages, we're here to support your journey.
Your feedback is crucial in helping us improve. If you have any questions or suggestions, donāt hesitate to reach out. We love š hearing from developers!
Weāve recently added support for Ultra customers to claim and verify their organizationās domain. āØ This addition to the platform streamlines user provisioning and onboarding for SCIM-provisioned users by removing the unnecessary steps for new users to verify their identity via email and for existing users to accept an invitation to join the organiā¦
Cloudsmithās support of OpenID Connect (OIDC) gives you a more secure method for programmatic access to Cloudsmith. š OIDC allows trusted systems - such as GitHub Actions - to authenticate to Cloudsmith using short-lived JWT tokens, eliminating the need for long-lived tokens in your pipelines. Today, weāve added support for the wildcard operatorā¦
As part of our transition to more secure authentication methods, we are beginning the 24-hour brownout for username and password authentication for API requests. š§ What this means: From 5 pm EDT September 16th to 5 pm EDT September 17th, API requests using username and password authentication will fail. This brownout period is designed to helpā¦
Cloudsmith has extended its support for Maven by allowing users to upload multiple files (.pom, .jar, .zip, and -sources.jar) to a single Cloudsmith Maven package and cache from upstream sources. Previously, you could upload multiple but specific combinations of files (e.g., .pom + .jar + -sources.jar or .pom + .zip + -sources.jar), but not all atā¦
The new Cloudsmith command-line interface (CLI) GitHub Action is now available! This action simplifies your CI/CD workflows by automating the Cloudsmith CLI's setup and authentication process. With support for pre-authenticating with OpenID Connect (OIDC), you can securely authenticate without the need to manage API keys. Key benefits Easy instalā¦
You can now export Cloudsmith logs directly to Azure Blob Storage, in addition to our existing support for Amazon S3. š„³ Log exports enable you to take control of your data by automating the export of client and audit logs from your Cloudsmith account. Customize the frequency and output format, and weāll handle the rest, ensuring a seamless and hasā¦
By submitting this form, you agree to our privacy policy
