Device settings and device policies are quicker to scan and change, and show which policy is in control: each setting is a tile with its current value that flags only what needs attention (unsaved, still applying, or controlled by a named, linked policy, tinted by whether the device complies) and opens its editor in place, so the whole configuration fits on one screen and wide screens edit beside the overview. The policy shown is the one the server actually enforces, by priority and platform. A device policy keeps all its device settings on one tab, where you see at a glance what it enforces, tick what it should manage and save everything at once; each platform it covers gets its own tile with the platform icon. The rest of the device policy screens (list filters, create and duplicate, devices using a policy, packages) match the current Box look
iPadOS devices (the ipados application type) are shown with an iPadOS label and icon and can be filtered by platform; their settings follow the capabilities the iPad reports, so settings it cannot apply (volume, time, firmware, application version, native timers, scheduled reboot) are hidden, and only the orientations it reports are offered. iPadOS is not offered for device policy platform settings or core app builds
The Update Applet (Update timing) bulk action sends only the applet configuration shown under "Modify". Choosing "Keep current" or another applet version discards the values entered before, so they no longer overwrite the devices' applet configuration. Coming back to the configuration step from the schedule step keeps the chosen applet version and shows the configuration entered under "Modify" again, instead of dropping both while the Version field still showed the version
The resolution list in device Settings and in device policies no longer shows the same resolution twice when the device reports it in a different form than its list of supported resolutions
The Locations page Table and Map views respect the Status filter. With "Archived" selected they listed active locations; only the default view showed archived ones
The "Install package versions" drawer on the device Packages tab and on device policies fits its table to the drawer width, so the Action column is visible without scrolling sideways, and the expanded package details list one item per line
Generate deployment app has a "Branding" section that gives webOS, Tizen and Android builds a custom application title and logo, for companies with the branded apps feature
The Locations page has a "How does this work?" tutorial: five steps covering the list and its views, adding a location, the map with its preview, the location detail, and assigning a location on the device detail.
On supported devices, Remote debugging also enables Chii, and the device Debug card links to the Chii debugger
The loading screen after a page refresh shows what the app is waiting for. When loading takes more than 8 seconds it offers to reload or sign out, and a failed account load or a crash shows the error instead of spinning forever. The login and loading screens match the Auth0 sign-in page: the logo above one card on the brand (or white-label top-bar) colour.
The legacy email and password login is removed, together with the sign-in, sign-up, email check and set-password actions it used and its reCAPTCHA setup. Sign-in and sign-up always go through Auth0
Old legacy login sessions are no longer accepted anywhere. Page loads, the white label lookup and the admin CSV export use only Auth0, and the admin CSV export works again for Auth0 admins
The password reset from the Profile page always resets the signed-in account. The request can no longer name another account, so it can no longer send a password reset or invite email to someone else
The bulk action schedule step updates the "Bulk action will be performed in N batches. Each batch is N devices." message when the custom batch size slider moves, and the slider keeps its position when you come back to the step. The message always assumed the default 25 % batch size before
The Support page shows every ticket you requested or are CC'd on. Before, some of these tickets could be missing from the list
The applet configuration in the Update Applet (Update timing) bulk action is readable again after choosing "Modify": each configuration key, its value and description, and the "Additional configuration" picker take their own row instead of being drawn on top of each other
Clicking a sortable column header in the All devices table a third time resets the list to its default order again. Before, the third click did nothing and the list stayed sorted descending
Wi-Fi signal strength on the device detail stays up to date and is shown as a whole percentage. Tizen devices running an application version below 2.11.0 no longer show a signal strength, because the value they report is unreliable.
LG webOS and Samsung Tizen devices with Custom Scripts get an Extended control tab: deploy the recommended production configuration with a result per setting, set the tile (video wall) layout on LG, and set auto source switching on Samsung, which a Samsung configuration deploy also turns on with HDMI1 as the primary source
Alert and Alert Rule dates and times are shown in UTC in a readable format, e.g. "Sat, Sep 26, 2026 2:00 AM (UTC)", the same time zone in which alert rule active time windows have always been evaluated, so an alert no longer seems to trigger outside its active window. The active time windows card is titled "Active time windows (UTC)"; saved time windows are not changed. Elsewhere in Box, dates at offset zero read "(UTC)" instead of "(UTC+00:00)". Triggered alerts on the Alert Rule detail open in a new tab
Resending an invite from the company or organization members list now goes through the API, which checks that you can manage that company or organization. The old way of resending an invite has been removed
Payloads arriving over the websocket are validated before they reach a database query: query operators and regular expressions are rejected for every action, data-model action handlers now parse the request schema on the backend instead of trusting the browser, and the unauthenticated scanner, location, organization tag and account handlers parse their identifiers. The unauthenticated location lookup no longer takes a client-supplied checkPrivileges flag, the API authorization route rejects a non-string session id, and the scanner page receives only the fields it renders instead of the raw database document. A rejected payload answers the client with a failed query instead of leaving it pending, signing out is acknowledged even when the server-side cleanup fails, and a schema failure no longer echoes the expected payload shape back to an unauthenticated client
The Custom Script Code Mode in Box and Judo accepts scripts up to 30,000 characters per platform (previously 10,000)
The File System tab no longer needs the file-system-browser Custom Script uploaded to each organization: it runs the signageOS-managed script on every supported platform, Linux included (through its bash runtime, replacing the inline shell scripts sent over the legacy custom-script relay). Files up to 120 KB can be saved on Linux, up from 7 KB, and directory listings show folders before files on every platform
The Runners list page has a "How does this work?" walkthrough â a five-step modal covering what runners are, creating one, versions and their input/output contract, assigning one to a device, and reading back Get, Set and custom telemetry. It opens on the first visit, can be reopened from the page header, and is remembered per account, the same as the Alerts, Alert Rules, Custom Scripts, Device Policy and Plugins walkthroughs.
Solution Hub is a new section in the navigation where you can browse ready-made applets, scripts, plugins, runners, alert rules and Content Guard templates and install them into your organization.
Applet management has a redesigned interface: the list and create/edit forms use standard filters and controls, while applet details organize information, code/files and Smart Builder builds into clear tabs with a compact overview, version status, build history and a clearer preview-device workflow in Code Mode
The location assigned to a device appears immediately on the device detail, instead of reading "Assign location" for tens of seconds on locations with many devices. The location preview drawer loads its per-device numbers only when it is opened
A Sony power/input bulk action can no longer be confirmed while its affected-device preview is still loading, refreshing or failed, which could run the action against a stale device selection
Policy alert rules now match the devices they describe: selecting "Violated" alerts on devices breaking the policy instead of on devices complying with it. Rules saved before this fix keep the behavior they have today, so they will now show the opposite option to the one they were created with and need to be re-selected.
An alert rule that was never assigned an organization can now be archived; previously the confirmation did nothing and the rule stayed in the list forever.
A custom script name that another script in the organization already uses is reported on the name field when creating or renaming a script, instead of only a generic failure notification.
Applets can be created by dropping in an HTML package: a ZIP of the built applet (dist folder with an index.html entry file) uploaded on the new applet's detail page creates a multifile CLI applet version from its contents. The same ZIP drop-in creates new versions on the CLI applet detail page, with optional configuration definition and supported platforms set during upload (prefilled from the previous version), and the configuration definition of CLI applet versions is editable on the detail page
The "Projected Credit Usage" banner on the company detail reports the monthly credit cost instead of the device count. The two were interchangeable only while every device cost exactly one credit; with per-device-plan pricing they are not.
Configuration Health evaluates Core App and firmware versions using device-reported version telemetry, with current and latest versions and grouped lists of affected devices.
Firmware updates are available as bulk actions for compatible devices, accessible from the device list and Configuration Health.
Custom Script versions can be created and managed directly in the UI: a fullscreen Code Mode with a Monaco editor, per-platform scripts and runtimes, a configuration parameter builder, pre-fill from the previous version, and a code-first script detail page showing each platform's code inline, with in-place editing of draft versions and a collapsible overview.
New File system tab (Beta) on device detail: browse the files on a device, open them in an editor, and create, edit, rename, move or delete them without a site visit. Linux devices expose the whole filesystem; on Tizen, webOS and BrightSign it is the device's storage units. The selected path is mirrored in the URL, so a location in a device's filesystem can be shared by copying the address. The tab is gated by the new filesystem organization feature entitlement together with scripts â both must be granted for the tab to be usable.
Event Stream exporter configurations let the user pick the exported delivery format version. New exporters default to the newest version, existing ones keep version 1 (Legacy) until changed.
Added authentication to the file upload endpoints, along with server-side validation of the uploaded files
A device that has moved to the new gateway is now recognized whichever of the configured gateway domains it uses. The device gateway card no longer reports such a device as disconnected, and its platform URI is no longer flagged as unusual
Deleting a runner or a plugin from its detail page now takes you back to the list, instead of leaving a page that reports the deleted item does not exist. The list no longer shows the deleted runner or plugin either
Runner and plugin assignments on a device now show the change straight away. Assigning, editing the configuration of, or removing an assignment updates the list and the detail without reloading the page
The assign runner and assign plugin drawers on a device open empty, instead of keeping the configuration typed into them the last time they were used
"Select all devices" in the device list now selects only the devices matching the active filters, instead of every device the account can access. The bulk action count reflects the filtered selection
The connections listed for a device are now accurate. A device holding several connections could have a live one dropped from the list, with an already-closed connection left in its place, so the connection count and the socket types shown were both wrong
"Rotate view" in the remote desktop fullscreen mode no longer collapses the modal to a thin strip. The screenshot now always fits the visible part of the modal, in both landscape and portrait, and follows a window resize
Applet selection and version loading now work consistently across timings, assignments, device filters and applet detail: active published versions are listed and searchable correctly, authorized users can reveal unpublished versions, preferred and selected applets remain available across organizations, referenced applets resolve to their names, and timing forms retain a fallback device name
Device detail no longer shows stale alerts: the Alerts card and drawer refetch when the page regains focus (e.g. after resolving the alert on its detail page in another tab) and drop the previous organization's alerts right after the device is moved to another organization; alerts resolved or snoozed for the device now also appear under the drawer's Resolved/Snoozed tabs, because the device's alerts are filtered server-side instead of by a client-side categorization that could not see per-device resolutions
The member role picker and the invite forms offer the Owner role only to accounts allowed to assign it, and the role of an existing owner can be changed only by a different company owner
Custom script runs with successful exit codes are no longer marked as failed when they produce stderr output
The trial period label in the top bar is no longer a link to the signageOS Calendly scheduling page on white-labeled instances; non-white-labeled instances keep the link
Smart Builder deployment URLs for Linux builds link directly to the installable package instead of the bare storage prefix, which was not downloadable: Fedora/Ubuntu to the .rpm/.deb, Raspberry Pi 4 to the versioned .apk resolved from the build's version file
Users with the Viewer role can create and delete their own API security tokens on the profile and organization pages, giving them read-only API access matching their role; a token only authenticates as the account itself, so it can never grant more access than the creating account's role. Previously the profile token even required a Master role at some company, which contradicted the UI that offered it to every non-Viewer
Power Actions no longer offer App restart, System reboot, and Display on/off on devices whose reported management capabilities do not include the corresponding capability (APP_RESTART, SYSTEM_REBOOT, DISPLAY_POWER). Devices which report no management capabilities at all, either because their front display is older than 9.19.0 or because the capabilities have not been reported yet, keep offering these actions.
The device detail Auto Recovery box now notes that BrightSign devices need the Supervisor and the Core App installed together, with the Supervisor enabled. The note is shown on BrightSign devices managed by Cloud Control as well, which do not report the BrightSign application type.
Command center search no longer lets a sidebar section label stand in for a result's own name: a short query like "te" matched the word "Favorites", so every favorited device scored a hit and filled the palette's navigation rows ahead of the real device and location results. Section labels now match only on a word prefix, and rows matched by their section rather than their own title are listed after the named matches. Tray chips follow the same rule for their entity type, and are ordered by name and UID before type
The API tokens page shows the environment's actual API URL in the example curl command instead of the hardcoded production
Additional users entered when creating a support ticket are now actually added as CCs and collaborators of the Zendesk ticket, so they can see the ticket on the Support page and respond to it
Assigning a plugin on device detail sends the filled configuration values instead of an empty object, the runner/plugin update drawers no longer silently drop changed configuration values, and runner/plugin assignments and unassignments now show up in the device History tab with their own label, color, and action filter
The All devices table has a selectable "Bundled applet" column showing the applet and version the device reports as bundled.
Supra Server devices can install uploaded Android APK packages from the Supra tab, and screens in the same location can be assigned to installed apps
Admin API company list and count endpoints can filter companies by when their trial period ended, using the new trialPeriodEndedAtSince (inclusive) and trialPeriodEndedAtBefore (exclusive) query parameters, which also combine with the existing trialStatus filter.
Migrate the CompanyDetail accounts saga to the data-model action handler pipeline: the invite email pre-check moved into the Company/Member data-model, and the admin drawer Assign me/Leave actions now go through a new admin API company member endpoint and poll the company projection until the membership change is visible.
Event Stream Exporters: Azure Event Hub exporters can now be created, edited, and inspected next to webhooks, and the event-type picker offers each protocol its own allowed set â including the system log event types, which are exportable to Azure Event Hub only, and the per-device alert events, which both protocols can export
Sony Extra bulk actions for legacy (Android 10/12) and Android 14+ BRAVIA devices: pro settings, input source, Pro Mode, firmware update, Wi-Fi, and per-app enable/disable pushed through the Sony RMS API with automatic device-variant scoping.
The Cmd/Ctrl+K modal is now a command center: unified search across pages, devices, locations, and commands; slash commands (/reboot-style power actions, /monitoring, /tray and /pin for pasted UID lists); Tab scoping; an explicit Switch company command; Send to Slack; and a sidebar search entry that opens it. Available to all users.
Working-set multitasking: visited detail pages (devices, locations, alerts, policies, applets, scripts, and more) collect into a subtle bottom tray (pin, remove), the Cmd/Ctrl+K palette switches between them, with Alt+1..9 and Alt+Arrow shortcuts and a mobile bottom sheet.
Onboarding tutorials are shown in a wider modal so the screenshots and screen recordings inside are legible, and their "How does this work?" page-header button collapses to a tooltipped icon on narrow viewports instead of being cut off mid-label.
Tags now provide an organization quick filter beside search, use the standard device icon, and show clickable hierarchy context for nested tags in flat text-search results.
Adding a new device uses a six-character code input with a live device-screen preview, provisioning tips, optional location and tag assignment, and a list of recently provisioned devices.
Power actions (device detail, device list, bulk actions) are grouped into sections with icons and hover descriptions.
APK package version uploads are now completed in a single step, making package publishing simpler and more reliable
Package management now uses the same API-backed data flow as the rest of Box, improving consistency and reliability when browsing and managing packages
Tag statistics on the Tags page, the Locations list statistics (locations, cities and locations without devices, moved out of the page header) and the location detail information can now be minimized into a compact toolbar row and expanded back into cards, the same way as the device detail overview. The minimized location detail row shows devices, alerts, uptime, city and state, custom ID, tags and photo thumbnails. Each of them remembers a previously made Show more/Show less choice; the Tags and Locations list statistics start minimized, the location detail starts expanded.
Device detail Telemetries tab now shows Plugin, Runner and other telemetries, with per-field cards, change timelines and a change history drawer. Plugin and Runner fields declared as secret or encrypted are masked everywhere (card value, tooltip, timeline, records table and drawer), change timelines mark only real value changes instead of every periodic report, and the Online status card no longer shows a device with no reported online status as fully available â such time is grey and unknown, including the part of a bucket before the device was created. As a side effect of that, an averaged uptime percentage across devices no longer counts a device with no uptime record as 0 %.
Remote Desktop tab on device detail shows a history of remote desktop session starts and finishes with date, action and user
Sony Extra adjustments: extended control data loads on demand via a refresh button (correct settings require the display to be on), bulk confirm no longer reports zero devices for a valid selection, management agents removed from the Android 14 bulk app list, the app restart power action description no longer brands the application, and the single-device Select apps to enable list matches the bulk per-variant app lists including custom apps.
The Support page no longer becomes unavailable.
The Cmd/Ctrl+K command center now ranks device and location results by how well they match what was typed, so short queries no longer fill the list with hits matched on a hidden field (serial number, MAC or IP address) while the obvious name matches stay off screen. Scoped searches (Search devices, Search locations, power-action targets) also got a Back button in the dialog header, so returning to the full search no longer means closing the whole modal.
Device time and its incorrect-time warning are now read from the latest device telemetry everywhere they are shown (device Info, Settings and Troubleshooting tabs, device list, monitoring detail), so a device that fixed its clock stops being flagged.
Duplicate sos_redis_driver_errors series with identical labels (dropped by Prometheus as "different value but same timestamp") and sos_redis_driver_connection_ready/_end counters silently not counting after the first redis error
The alert list and alert detail no longer query devices per alert to show the affected device count; the count is derived from the alert itself.
Device history rows no longer show an empty Action column for action types without a translated label. The remaining unlabeled types (set organization, stop package, clear package data, enable/disable extended telemetry, send applet command, revoke device key) now have proper labels, a group color and can be filtered for.
Applet detail links in device timing records now open in a new browser tab.
The antd UI library was upgraded to the latest v5.
Sidebar navigation no longer renders the open section's title (Devices, Organize, Monitor, Build, Settings, Account & Help) in dark navy â almost invisible against the dark menu â while one of its pages is open. The antd v5 upgrade moved the selected submenu title onto a new theme token that fell back to the primary color instead of the menu's selected item color.
Creating and updating a location no longer requires the organization manager role, so a member with the user role can do it again (archiving and restoring a location already worked for them).
Config Health no longer reports Locations Configured and Policy Assigned as configured for an organization that has no locations or no device policies. Both checks now verify that the items exist instead of only checking that no device is missing one, a failing check no longer counts towards the health score as compliant, and either check reports an error instead of a pass when it cannot determine whether the items exist. For an organization with no devices, the device-level checks and the Device Configuration score now report as not applicable instead of a full 100%.
Device Uptime tab no longer shows a device as online for a whole month while it was offline the entire time. Outages that started before the displayed month are taken into account again, days of the neighbouring months shown in the calendar grid are filled with their real data instead of the selected month's, and switching months back and forth no longer flips the results.
The AI Content Guard listing no longer shows an empty page in companies that own an item the API returns in an unexpected shape â a single such item used to fail the validation of the whole response and discard every item on the page, while the total count kept showing them; each item is now validated on its own, so only the unusable one is skipped (and reported in the browser console)
The Status filter of the Locations page no longer shows NaN â the location status from the URL is a text value (active/archived) and was being converted to a number, which also meant the city, country and state filter options were requested with an invalid status
The Tags field of an AI Content Guard item (image, prompt and AI helper forms) no longer offers tags of the whole company â it lists only tags of the organization owning the selected category, and already picked tags are dropped when the category changes to another organization
Form buttons and drawers no longer stay stuck in their initial state after editing a field â the Apply button of the plugin filter drawer (and every other form submit button and form drawer) now enables as soon as the form becomes dirty, bulk operation configuration items (Debug, VPN, RM server, Scheduled power action, Applet command) react to their own field changes again, and the device Packages tab filter and pagination update the listing
Dropdowns, date pickers and tree selects across the app once again open anchored to the scrolling main panel instead of jumping to their trigger when the page is reached without a loading skeleton, product analytics events fired before the analytics script finishes loading are no longer dropped, and the developer feature-flag override applies without a page reload
Non-mandatory string configuration fields in runner/plugin assignment and policy forms are no longer marked as required, and selecting a version with an empty configuration definition no longer keeps showing the previous version's fields
Telemetry intervals show the limits of the organization's own device plan. Every organization was shown the highest plan's limits (15 min for screenshots) and could save intervals its plan does not allow, which the server then silently raised â so auto generated screenshots did not follow the interval displayed in Box.
Tags across the whole app (including the Admin app) now derive their text, border and tinted background color from the tag color itself (matching the built-in status tags), replacing solid chips with plain black/white text. Text color is stepped to always meet WCAG AA contrast against the tinted background. In the high-contrast (WCAG optimized) theme, built-in status and preset tags whose colors fell below WCAG AA (success, warning, green, orange, cyan) use darker text. The tag create/edit color picker now offers a preset palette of vivid colors across twelve hues next to the custom picker, and dark tag colors are lifted to their vivid hue equivalent so chips always look fresh. The device Online status indicator returns to its classic teal instead of the generic success green
Device detail redesign: the page header shows the device status and last ping next to the device name, device statistics & health moved into a collapsible card overview, and the Info tab was restructured into bordered tables with a recent-screenshots carousel and side-by-side connection info. Single-value telemetries (uptime, CPU, memory, temperature and the active wifi/ethernet connection) share one compact metrics strip above the cards instead of taking a card each, and the remaining cards flow as a single grid that fills every line, so devices not reporting all telemetries no longer leave gaps; the cards are clickable and open the matching tab or drawer. Storage values all derive from one telemetry snapshot and label each unit by its reported type instead of misreporting SD cards as internal storage, the page no longer hangs on the loading skeleton when the device proprietary package version lookup fails, and tooltips opening near the left edge of a page no longer render underneath the main navigation menu. Present-but-wrong values (starting with incorrect device time) are now marked with a compact warning chip next to the value â short label always visible, full explanation in its tooltip â replacing the truncated red error sentence. The collapsed overview row now shows the last action name, result dot (green/red/pulsing blue for success/failed/pending) and a condensed time next to the icon, and the expanded Last action card shows the result as a color badge with the full date
Switching company from the sidebar company menu now opens a searchable modal instead of a nested submenu, fully operable by keyboard: Cmd/Ctrl+K opens it, arrow keys move the selection and Enter confirms the switch.
Paid company licences such as SSO, Secrets, GodMode and Priority Support can no longer be enabled by customers themselves â only by signageOS. Selecting your own DevSpace platforms still works, now limited to the number of target platforms included in your plan.
Editing company details â name, icon, terms region and default device plan â now requires the company manager or owner role.
Paid organization features such as AI Content Guard, Remote Desktop and VPN can no longer be enabled by customers themselves â only by signageOS.
Bulk provisioning CSV upload no longer fails with a Content Security Policy violation â the connect-src directive now allows the bulk provisioning parser S3 bucket
Company masters and owners opening a device in an organization they are not assigned to no longer get a blocking "Get device access" modal that had to be confirmed twice. The modal gated nothing â company masters and owners already have full access to their company's organizations â and joining an organization deliberately is still available in Company Settings â Organizations.
The Organization column on the Alerts page labelled every organization as "production". It now shows "test" for organizations that have not been marked as production.
Device Scripts tab redesigned with inline expandable rows: the latest result, execution history, and parameters now open under the script row (replacing the result modal and history drawer), results update automatically while a script runs, a toast announces run completion, recently run scripts are grouped at the top, and scripts can be re-run in one click with the parameters of the last run
New predefined content for Content Guard.
Tags page redesigned to display data as tree table
Improved tag create/update/delete interface and drawer layout
Tags can be unassigned directly from tags panel
Tag elements across project are clickable and work as navigation to entity filters
Company credit statistics no longer swap the values of "Projected usage in months" and "Current monthly usage", and the remaining-credits alert now reports the correct number of months left.
Applet detail pages no longer repeatedly reload when the selected and latest applet version is 0.0.0.
Applet detail pages now refresh all version-specific content when switching versions.
Member invite flows look up accounts case-insensitively (the pre-check and post-invite lookups now match the lowercased email the platform stores), adding an organization member no longer resets an existing company member's role to guest, and admin role changes for existing company members go through the privilege command instead of the invite command, which now rejects existing members
The Event Stream exporter tab, detail drawer and create action no longer fail for a freshly created exporter, whose last successful export timestamp is empty until the first delivery succeeds. A single such exporter previously broke the parse of the whole list response.
Device pairing no longer fails to load while a pairing is still unverified.
Device plan history card on the organization detail Device Plan tab, showing who changed the device plan, to which plan, and when; visible to organization owners and managers only
Core App version selector no longer shows duplicate, stale, or internal loading values while searching and loading results.
Device package type filtering no longer leaves the package list stuck in a loading state when filter updates overlap, loading fails, or a device has many system packages.
Solution Hub detail pages now keep the shared Solution Hub sidebar item selected in both CloudControl and DevSpace, entitlement refreshes no longer make the CC/DS switcher alternate, and Solution Hub actions are hidden without GodMode access.
Firmware version search now matches the new firmware metadata, displays a human-friendly name, and updates devices by the selected firmware UID.
Device settings now provide searchable, paginated core app and firmware version selectors with release details.
Added a "How does this work?" onboarding walkthrough on the Plugins list page, covering what plugins are, creating them, versions & configuration, assigning to devices, and monitoring.
Sidebar navigation no longer reanimates or switches between CC and DS when moving between pages such as Home and Solution Hub.
Sidebar navigation no longer rebuilds and reanimates its menu when opening Solution Hub within the current navigation section.
Content Guard cards now keep a readable width and spacing on smaller desktop resolutions instead of squeezing or overlapping their content.
Sony Extra settings: the Device name field was removed from the About section, because the device name is synced natively and automatically
Device detail: switching tabs no longer freezes the page for several seconds. Selectors holding the organization list and the device alert lists deep-compared their whole contents on every Redux action; they now derive from stable references instead
Device history now shows and filters device location and organization tag assignment changes
Hardened authorization across many entities
Monitoring detail: selecting a policy in the filter sidebar now filters the device list again, and the policy list is capped with a Show more / Show less toggle like the alerts list
Tag statistics on the Tags page are counted again, including the Policy tags counter; unassigned tags no longer include tags assigned to policies
Opening the detail of a newly created organization no longer shows an insufficient-privileges error
Organizations are no longer created without a device plan: the create-organization drawer always preselects a valid allowed plan and refuses to submit an empty plan id, and the Device Plan tab no longer hides the plan selector for an organization without an assigned plan when the company has a single allowed plan, so the plan can now be assigned
Creating or deleting an organization no longer leaves the page blank, and the delete confirmation now shows a loading state until the organization is removed
The package version delete button spinner no longer keeps spinning after a successful delete
Removed the outdated "coming Q4 2024" organization-unit provisioning notice on the ChromeOS Provisioning page; the alert now simply links to the Google ChromeOS provisioning documentation
Device detail history tab "Filter by action" dropdown now includes Plugin and Runner action groups, which were previously missing
Open Emulator now passes the configuration-server URL (config_base_url) instead of the platform/gateway URL, so newly created emulators can fetch their configuration and connect
Google Cloud Storage presigned uploads under Workload Identity no longer fail with "Premature close" on Node 24: the transitive node-fetch reached through gaxios (used by the IAM signBlob call) is overridden to v3
Device configuration widget now offers a "Production US1" environment preset (us1.signageos.io subdomains); renamed the existing "Production" preset to "Production Root"
New telemetries tab on device detail
Renamed the device "Scripts legacy" tab to "Shell" and made it available to all users with access to the CustomScripts feature entitlement (on Linux devices), instead of being restricted to GodMode admins
Object storage can now be backed by either AWS S3 or Google Cloud Storage, selected with STORAGE_TYPE=s3|gcs. The storage bucket is configured with a single BUCKET option for both providers (the previous AWS_S3_BUCKET option still works as a fallback).
Bump @signageos/lib to 23.22.0 â serves /ready on main HTTP port to fix GCP LB health check (503 unconditional drop overload on US1)
Object storage can now be split into two buckets: user-data (applet, package, icon, content-guard, location, organization, exports) and public files (device firmware, front-applet, static assets). Configure with BUCKET_USER_DATA / BUCKET_PUBLIC_FILES and STORAGE_BASE_URL_USER_DATA / STORAGE_BASE_URL_PUBLIC_FILES; each falls back to AWS_S3_BUCKET and storage_base_url when unset, so existing single-bucket deployments are unchanged.
Single file applets now support defining configuration schemas (configDefinition) â users can define typed config fields (string, number, url, enum, secret, encrypted) directly in Box UI for singlefile applets
Config definition schema editor for creating and editing configuration schemas on singlefile applet versions
Timing configuration masking now uses DB-stored configDefinition with S3 fallback for multifile applets
Configuration Health now calls the API through the standard data-model layer (device list, latest telemetries, published application versions), fixing CORS failures on white-label instances caused by its custom API client
Clicking a location in the location list navigates client-side instead of triggering a full page reload
Organization list search input is now debounced (500ms) to reduce the number of API calls while typing
Long text in detail-page Descriptions rows (script/runner/plugin/alert-rule descriptions, Supra hostname/clientId, billing info, device-plan IDs, organization/account names, deprovision summaries) is now truncated to a single line with the full value shown in a tooltip on hover, instead of wrapping to multiple lines
Show time source (timezone abbreviation or UTC offset) in all formatted date/time strings across Box UI
Country-based legal terms agreement: account profile and welcome flow let users pick their country (grouped by region) to determine which legal terms apply, replacing the previous direct region selector
Device list table column headers and export column picker are now translated (English and Chinese)
Configuration Health blank screen check now uses Content Guard alert rules (CONTENT_GUARD_IMAGE_SIMILARITY with "Blank screen" managed category) instead of SCREENSHOT condition
"Keep applet running" checkbox for proprietary timers (device timer tab and device policy), keeping the applet running while the timer turns the display off. On the per-device timer tab the checkbox is shown only when the device reports the KEEP_APPLET_RUNNING management capability
Fixed Vite asset path resolution causing bundler-imported assets (loader GIF, fonts, images) to be unreachable at runtime
Invite company member now provides better UI feedback during the invite process
Organization list search now uses the search query parameter to match by name, title, or UID instead of filtering by title only
Configuration Health Check page optimization â use Organization entity counts for instant location/tag checks and device count progress initialization, eliminating redundant API calls
Fix company member invite sending 'master' role instead of 'manager' to the API
Remove single-company restriction when adding users to companies and organizations
Configuration Health blank screen alert detection â read op field (not operator) in CONTENT_GUARD_IMAGE_SIMILARITY conditions to match actual API data structure, fixing false "not configured" result
Supra UX improvements: show info banner when device applet/timing is controlled by Policy; disable Supra toggle on timing list when device is not colocated with Supra server or when Policy governs applet (toggle still reflects current status)
DevSpace access page: show "Assign now" button for Company Master/Owner linking to Company accounts settings
Updated and optimized application platform icons, added flavour-specific icons for BrightSign (Nine), Tizen (TEP, ePaper), and webOS (IDCAP)
Improve Scripts UX: auto-select latest version when executing, tooltips on action buttons, filter bulk operation scripts by device organization
Organization updated action log
Content Guard UX improvements: replace valid/invalid labels with Badge dots and tooltips, move type tabs to filter Select dropdown, add URL param for item drawer deep-linking
Harmonized loading indicators across all pages â replaced WaitIndicator (yellow GIF) and legacy Spin with Ant Design Skeleton and native antd Spin
Improved detail page loading skeletons to match final page layouts (Device, Location, Organization, Alert Rule, Plugin, Runner, Applet, Package, Custom Script, Device Policy, Bulk Operation)
Centralized detail page loading skeleton in Page component â removed per-page custom loading content for uniform loading experience
Replaced WaitIndicator early-return pattern in Terms and Conditions page with Page loading prop
Auto-resize icon uploads to 50x50 pixels instead of rejecting wrong dimensions
Harmonize button icons (PlusOutlined) and list page button consistency across all pages
Harmonize detail page header buttons with More dropdown pattern
Device Export using api
FeatureFlags management in policy
Filtering and search for Plugin and Runner list pages (search by title, filter by platform and tags)
Client-side search for Scripts tab on device detail page (search by name or description)
Display banned reason in device detail header info
Supra on-premise: device detail Supra tab with status, install/uninstall actions, connected clients, and monitoring; Supra Server badge on location device list; Supra toggle column in timings table
Supra on-premise: dedicated SupraActions RBAC permission; optimized SupraClients row-level data fetching
Device Export using api
Device Export drawer UX improvements: Export to CSV button in header, checkbox list for column selection with search and select all, filter-awareness note, improved close confirmation message
Company member list is automatically refreshed after successfully inviting a new account to the company. This provides immediate feedback to users without requiring a manual page refresh.
Test new device gateway feature on device detail Info tab allowing users to manually switch individual devices between old and new endpoints device can connect to
Refactored core UI components to align with the updated Design system guidelines, ensuring consistent styles, spacing, and interactions across the application
Create new license form â instead of separate inputs for the number of devices and number of months, there is now a single input for the total number of credits
Additional validation step before creating bulk action that allows users to preview how a bulk action will affect their devices before actual execution
Credit transactions are now loaded using a REST API (Credits tab on a company detail page, out of credits page)
Added basic licenses stats to company overview page
Added license balance info on company detail page
Added new version of custom script tab on device detail page
Execution of custom script is showed properly in device history on the device detail page
Show license stats and other info only for companies with credit billing type
Bulk actions support custom script execution
Users can list scripts by selecting the Scripts menu item under the DevSpace menu section.
Script has its own detail page with detailed information about the particular script. Additionally, the source code can be downloaded for each supported platform.
New license form that allow users to create application licenses
Company network - list companies page
Added new page for company network managers to allow them to create new account & company
Allow to set company billing model for company network managers
Handle missing device timezone by falling back to UTC
Fixed an issue with finding the latest application version by application type, added proper handling for cases where no application version is available
Fixed determining the success of power action scheduling based on policy for Android devices
Bulk action wizard keeps current filter even when socket is reconnected
Bulk action from alert detail for specific devices selection works
If secret value types are present in an applet configuration, whether through a bundled applet or a device policy, they are now properly masked in the user interface
Policy applet item configuration does not set empty object
The user interface has been refined for a lighter, more streamlined look.
Added an option on the Profile section to switch to a high-contrast theme, improving accessibility for users with visual impairments.
Added firmware filter function for WebOS
Removed the "Tags" and "Packages" tabs from the organization detail page; packages and tags now have dedicated pages under the "Organize" group in the main menu
Device auto recovery enable settings configuration moved to confirm popup
Catching of component crashes on device detail page doesn't lead to an error page with only main menu available. Now only detail tab with error shows error and other tabs are still accessible.
Custom pin icons to location and default custom pins for organization
Bulk provisioning QR code scanner sends the scanned data correctly so recipe can be created
Fix organizations devices count for non-admin users
Device network connections behavior - showing only data that device reports. Active connections are those with reported IP address. Prevented crashes when no DNS servers are reported.
If you try to save the NTP server along with the timezone for the Emulator, it appears to save initially, but the NTP server gets automatically deleted when the timezone is changed. The Emulator does not support this setting, and it is no longer available for this type of device.
Alert rule target filters are visually aligned
Changing the filter now correctly resets the "Generate CSV" button for applet and system logs
Simplified sorting of device network connections (info tab on device detail page)
Before creating a new support ticket, users are prompted to fill in a Pre-Deployment Checklist to ensure that common solutions have not resolved their issue.
Locations and location tags to alert rule filter
Alert rule allows to add multiple emails that will be notified when alert is triggered
Custom scripts editor has correct syntax highlighting on Linux devices, using bash instead of powershell
Device policy "EXTENDED_MANAGEMENT" (RM server) is now stable propagated to assigned devices
The device detail now accurately displays âLast Pingâ as âa few seconds agoâ instead of incorrectly showing âa minute agoâ for the 60-second ping interval.
Better page errors handling - no white pages anymore, user will be able to continue in the app
Based on a new secret value field the value is masked during the creation or update of the applet. Also, all configuration values are masked in the device history log by default.
Sometimes the "Predicate not met after the specified number of attempts error" occurred during a new account invitation to a company. It is fixed now and should not happen anymore.
Auth0 authentication was fully released as default authentication method
Waiting for a new screenshot taken after clicking on a "Take screenshot now" button (no confusing "There was problem taking screenshot" message anymore)
For some addresses the Add Location form couldn´t be saved because of wrong parsing of the address. The Add Location form accepts wider range of places now.
Security improvements of signup process - during signup process there is no information if email is already registered. All instructions are send by email so potential attacker has no access to them.
Security improvements of forgotten password process - system does not report on if the email is in the application or not.
Add Content Security Policy to application response headers
Password validation enhancement. Password requires more strict combination of characters
Failed login attempt limitation. After some amount of failed attempts login will be disabled, and needs to be enabled again
Security exceptions for terms and conditions and applet files
Page not found screen is shown for wrong or unaccessible URLs instead of automatic redirecting to homepage
Alert Rules page has unified table look and feel
Alert rule detail page has now validation for condition fields as well as for target organization field. User can't save alert rule when these obligate fields are empty
Pagination on Live Status page works correctly now
User can't sort alerts by affected devices and last change at
Console warnings about preload loader asset
Device policy detail - Device specific tab - confusing administration of application types is now working as expected (After click on checkbox, the order of tabs does not change.)
Alert rule detail - temperature condition - adding value by writing a number into input is now working as expected
Remove the extra timezone offset sign in timing form
Device policy detail - brightness and brightness schedule settings now works as expected, hours are correctly saved, schedule box can be unchecked, etc.
Prevent user from setting undefined alert rule condition value by accident
Not working page size changer in pagination is now disabled on all pages
Network status bar now shows correct number of online devices which are on organization and also Company Masters and Owners can see all organizations on their Company
Billing report shows all Organizations of Company where user is Manager or Owner
Back button on Applet detail page now works well. It gets user to previous page, not previous tab on Applet detail page
Use NProgress to handle device screenshot history
Correct timer format for lg devices when changed from api
Remove Antd loading spinner from company and organization user list
Replaced legacy Emulator icon with new one with current logo
Power Actions have new location in device detail, replacing selectbox for nice dropdown
Device detail stats looks better thanks to new layout
Pagination on Alert rule list page shows correct number of pages and works properly again
Use "no device matching filter" screen instead of "no device" screen when choosing an organization without any device as a filter selection on Device List page
Show correct list of built applets according to selected app version and device vendor
Back navigation from device detail page is now working on first click and also url keeps data about filter
Condition for allow debugging applet based on certain front-display version
Organization select shows all organizations for account in all components and pages
Organization search is not dissapearing while fetching the data, changing pages does not call two renders instead of one and also organization list does not show empty list page when search does not match any letters
Devices page pagination position
Organizations fulltext search (middle parts of organization name)
Optimizations: Prepared separation of telemetry & other data
Loading indicator added to Organization -> Packages screen
Badge within icon indicates CC, CC Front or application version
Icon is extracted from APK file and saved with package version
Umanaged packages (labeled as system packages) are also listed in Device detail -> Packages section, android-specific information after the managed package row expanded
Packages which are incompatible (SDK version and ABIs) with device can't be installed on that device and they can be hidden in list in Device detail -> Packages section
Added validation of version and packageName of Package version after it is uploaded