← Back to all sparks
T

TinaCMS

MARKETING
Velocity6.3

Open-source Git-backed headless content management system.

A media manager worth the name, and roughly 250MB of dependencies deleted.

headless-cmsgit-backedmedia-managerdependency-weightweb-components
Current state
TinaCMS is a Git-backed headless CMS with a visual editor, released as a pnpm monorepo where every package version-bumps together. The 17 August cluster is the largest release in the visible window: the media manager gains rename, search, and a folder/file filter behind two new opt-in MediaStore flags, and the admin's dependency tree is cut by monaco-editor, react-icons, heroicons, headlessui, and a stray TypeScript compiler. A tina-markdown web component and a visual-editing library for web components ship alongside.
Where it's heading
Two threads dominate. The media manager is being built out from an asset picker into something editors can actually manage files in, with the new capabilities exposed as interface flags so third-party stores opt in rather than break. In parallel the project keeps auditing what it makes users install - July's release fixed workspace pins that were nesting 320MB of duplicate trees, and this one removes about 250MB more of production dependencies that were either unused or duplicated. Security-driven upgrades run underneath both: vite off the end-of-life 4.x line, esbuild, mermaid, multer.
Prediction
The media notes flag TinaCloud search parity as still to come and say rename is local-dev only, so the next release most likely extends both to the hosted store; the WorkOS redirect flow that landed here points to more authentication work behind it.

Recent moves

  1. 2d ago

    Media manager gains rename and search; 250MB of deps dropped

    ⚡ SPARK

    The umbrella package for the 17 August cluster, and where the release's two threads meet: the media manager becomes a file manager, and the admin stops shipping dependencies it never used. Both are visible to every user on upgrade, one in the UI and one in install size.

    View source ↗
  2. 2d ago

    multer bumped off its end-of-life 1.x line

    The DigitalOcean Spaces adapter's share of the cluster: an end-of-life upload dependency replaced, with a warning that 2.x changes file handling. It carries no changes of its own beyond the bump.

    View source ↗
  3. 2d ago

    Cloudinary search expressions escape folder names

    Interpolating an unescaped directory into a Cloudinary search expression let folder names be read as query syntax. Escaping it makes matching literal - a small fix, but of a kind worth noticing in a media adapter that takes user-supplied paths.

    View source ↗
  4. 2d ago

    Astro becomes the default starter template

    Moving Astro to the top of the starter list and making it the non-TTY default is a positioning statement about where TinaCMS expects new projects to come from. The notes are candid that a bare run in CI still stops at the package-manager prompt.

    View source ↗
  5. 2d ago

    tina-markdown web component and visual-editing library

    Rich-text rendering and visual editing arrive as web components with a per-node components map matching the React and Astro renderers. The same changeset appears in the umbrella release; this is where the package itself lands.

    View source ↗
  6. 2d ago

    vite moved off the end-of-life 4.x line to 6

    A security-driven major upgrade - vite 4 never received backports for several path-traversal and file-disclosure advisories - with the base-path and Fast Refresh fallout documented rather than left to be discovered. The Node floor rises to 18 as a consequence.

    View source ↗