October 2026
The main change so far this month is that the Android build image we tested in September is now the default. Other changes include the upload page and the sign-in page handling failures more clearly.
Builds
Changed
- The rebuilt Android build image from the September beta became the default
for Android builds on 14 October. It is the image described in the September
entry: built on Ubuntu 26.04, with JDK 8, 11, 17 and 21 chosen by your
cordova-androidversion, and the Gradle, Kotlin, Node and Cordova versions pinned. The beta option on the upload page no longer sends an Android build to a separate queue.
Work continues on an iOS build image with Xcode 26.6 on macOS 26.7.1.
Uploads
Fixed
- For roughly five days, the upload page’s script did not run in Chrome 80 and other browsers of that age, because it used one piece of syntax they cannot parse. It is fixed. As far as we can tell, one person was affected.
Changed
- If the upload page cannot refresh a build’s status after your upload was accepted, it now says so: the upload was accepted and the build may still be running. After a server error or a dropped connection it retries after 5, 10 and 20 seconds, then shows a Check status button. Other failures show the message and the button straight away. The button that stops the page following a build is now labelled Stop monitoring, and the message after pressing it says the build may still be running on the server.
Signing in
Changed
- When a sign-in attempt cannot be completed, you now stay on the sign-in page with a message saying so, instead of being sent back to the home page. The message is still there if you reload, and signing in again takes you back to the page you were on. If you turn out to be signed in already, the page says that instead.
API
Added
GET /v1/appandPOST /v1/clientnow return anX-Request-IDresponse header, including on 401 and 403 responses, and browsers on allowed origins can read it. If you have a problem with the API, send us the request ID and we can find that request in our logs. If you send your ownX-Request-ID(a UUID or 32 hex characters) it is returned unchanged. If you sendX-Correlation-IDinstead, that is used. Any other value is replaced by a short hash. The OpenAPI spec now documentsPOST /v1/clientand the header.
Behind the scenes
- Security improvements to the build pipeline.