Hi everyone!
Back for the May roundup. Here’s what landed in CloudCannon over the last month.
Manage your login sessions
A new Sessions page in Account Settings shows every login session signed in to your account, with the browser and operating system, IP address, sign-in time, last active time, and the login method used (email, GitHub, GitLab, Bitbucket, or SAML/SSO). Sessions that used MFA are flagged with a security badge, and your current session is highlighted with a Current tag.
The new Logout of all sessions button signs you out of every active session across all devices, and you can search by IP address to filter the list.
See when team members were last active
Team member cards on the Team page under Org Settings now show a Last active indicator. It reflects activity within the Organization you’re viewing — so if a team member is also in another Organization, their activity there won’t show here. Useful for periodic access reviews of your own team.
Disable multi-factor authentication
If you have MFA enabled on your account, there’s now a Disable multi-factor authentication button on the Multi-factor Authentication page under Account Settings.
Sign-in and the Account Menu
A few related changes that should make moving between Organizations feel smoother:
- If you belong to exactly one Organization, CloudCannon now takes you straight into it when you open the app, instead of showing the Organizations Browser first.
- Pending invitations now live in the Account Menu. A badge appears on your avatar when you have invitations waiting, and clicking it opens a modal where you can Accept or Decline each one without leaving your current page.
- Create new organization also lives in the Account Menu now, opening a modal so you can create an Organization directly.
- The Account Menu itself has been reworked so it offers the same options whether you’re inside an Organization or viewing the Organizations Browser.
- New accounts created from an email invitation now land on a dedicated page showing their pending invitations.
- Accepting an invitation now updates your Organizations list and the rest of the app immediately, without needing a refresh.
Confirm Billing Change modal for invitations
The Confirm Billing Change modal now appears when inviting a Team Member to your Organization — specifically when someone accepting that invitation would extend your plan with a User Add-On. You’ll see exactly what the invite will do to your bill before you send it.
Configure inputs inside rich text data panels
New _editables options let you configure the inputs that appear when editing links, images, and code blocks inside rich text interfaces. You can use link_options, image_options, and code_block_options to control which inputs are shown and how they behave. See the Rich Text Options reference for the full list.
Editor improvements
- You can now double-click a Snippet to open it.
- Data panels are wider and the toolbar inside them is smaller, giving you more breathing room when editing.
- Read-only checkboxes have a clearer background colour so it’s easier to tell when they’re locked.
- Fixed an issue where extra empty paragraphs could be inserted around unsupported HTML elements when edited.
Improved File Browser performance
The File Browser and Collection Browser are now faster for Sites with many files.
More pages on Lit
Following last month’s Account Settings conversion, lots more pages across CloudCannon have been moved to Lit this month, including most of Org Settings, the full Partner Program UI, several Project Settings pages, and Site Settings → Site Mountings. The list filter controls used across the app and the Snippet and rich text cards in the editor are now on Lit too. You should notice pages feeling snappier across the board.
A few other things worth mentioning
- The trial counter in the App Sidebar now caps at 30+ Days left in trial instead of showing the exact day count for long trials.
- Context Menus now open in the correct position even when they contain nested elements or content that loads after the menu opens.
- Improved spacing on the Delete Account page in Account Settings.
- The User item in the App Sidebar (name and avatar) now fills the full width of the Sidebar, and the Account Menu no longer opens slightly off-screen.
- The View button on each commit on the Publishing page → Commits tab is aligned correctly again.
- Several Select field fixes: keyboard navigation, dropdowns with no height in Safari, dropdowns opening in the wrong position in Safari, and hovered items obscuring the filter.
- Collection groups with no heading now appear in the Choose a collection select when using the Link to a page option on a URL input.
- Reordering items in a Multiselect Input by dragging them now works.
- Clicking outside a Multiselect field that lets you create your own values (such as the Email Address field on the Invite team members to your Organization modal) no longer discards what you typed.
- The link summary image now shows up correctly in File and URL Inputs.
- The Reset using Git repository option now performs a forced reconnect.
- The Repository select field now shows the default value configured for a Project, and the Target select field shows the default configured for a Permission or Exception in the Edit Permission and Edit Exception modals.
- Non-unified Sites created via Fast Branching now apply their Site configuration immediately.
- Switching syncing provider or Organization now resets the Repository select field, and the Branch select shows a loading indicator while branches are fetched instead of appearing empty.
- The Branding page under Org Settings now correctly saves your selected brand colour.
- Fixed an issue where you couldn’t invite new users to your Organization.
- Country codes are now submitted in the correct format when adding a credit card.
- Fixed a bug that could prevent profile images from uploading, and another that could cause site backups to fail continuously.
- Improved error handling around GitLab authentication, Client Sharing, subscription updates, and transfer requests.
- A bug in CloudCannon’s site-deletion logic affected some Sites this month. All affected files have been fully recovered from S3 versioning, and we’ve deployed defensive programming to prevent the underlying issue. The full incident postmortem is on our status page.
- Dependencies were updated several times to patch security vulnerabilities.
That’s May! As always, drop questions or feedback below, or get in touch with support. 