We recently added four new webhooks for apps that are monetized by monday:

• app_subscription_cancelled: sent when a subscription is canceled
• app_subscription_cancellation_revoked_by_user: sent when a user undoes their subscription cancellation
• app_trial_subscription_started: sent when a trial subscription starts
• app_trial_subscription_ended: sent when a trial subscription ends

We also added two new fields to our webhooks that return the account_name and account_slug. You can read more about each webhook and see sample payloads in our documentation!

If your app has a workspace template feature, users from all regions can now access it!

Before, EU accounts could not access the workspace template feature of an app if it was in an account on a US server. With this update, EU accounts can now access all workspace template app features!

This change is effective immediately, but please note that you must release a new minor version of your app and promote it to live before users see the impact!

The post-install flow is integral to helping users get the most value from your app as quickly as possible. A seamless use flow can increase app adoption and usage, ultimately helping make your app more successful. We’ve been creating a flow that optimizes app initial usage and value, and we are excited to announce that it is finally here!

As part of this flow, you can access the new onboarding configuration tab to define a starting point that best represents your app’s initial and essential functionality.

Why it’s important?

We gathered feedback about the app marketplace from our extended community, and the interviews pointed to the feature selection screen as a major friction point in the flow from monday users. We introduced the starting point feature to eliminate the feature selection step and provide a smoother experience.

The starting point is crucial in the post-install flow because it helps reduce the time between installation and usage. When a user selects this option, the app will direct them to the starting point you defined so they can use the app immediately. Our initial testing results show a nearly 100% improvement from our data of app-usage-metrics, indicating that the flow significantly helps increase app usage.

What do you need to do?

This is where you come in! You can use this new post-install flow and define your starting point in the onboarding configuration tab. Doing so will increase app usage and a better customer experience. We recommend defining your start point by April 16th, 2023.

If you don’t have a defined starting point by then, one of your app’s features will be randomly selected, but it may not be the best representation of your app. Therefore, we recommend defining your own starting point to take advantage of the new and improved post-install flow to help your customers get the most value from your app!

Starting Thursday, March 30th, 2023, we will implement sandboxing for all apps running in iframes (view apps)!

These apps will be subject to additional security measures to help protect our users from XSS attacks by only allowing specific actions in the sandboxed environment.

While we do not expect this update to break anything, we recommend testing all the flows in your app in the sandboxed environment just to be sure. You can do so by adding the _apps_sandbox=v1 query param to a monday URL.

On June 28th, 2023, we will then implement the second part of sandboxing by limiting these apps’ actions and only allowing the following directives in our iframes:

• allow-forms: Allows the page to submit forms. The form will be displayed as normal, but submitting it will not trigger input validation, sending data to a web server, or closing a dialog if this keyword is not used.
• allow-downloads: Allows downloading files through an <a> or <area> element with the download attribute and through the navigation that leads to a file download. This works regardless of whether the user clicked on the link or JS code initiated it without user interaction.
• allow-presentation: Allows embedders to have control over whether an iframe can start a presentation session.
• allow-same-origin: The resource is treated as being from a special origin that always fails the same-origin policy (potentially preventing access to data storage/cookies and some JavaScript APIs) if this token is not used.
• allow-scripts: Allows the page to run scripts (but not create pop-up windows). This operation is not allowed if this keyword is not used.

We again recommend testing your app in the sandboxed environment with the new restrictions to ensure nothing breaks. You can do so by adding the _apps_sandbox=v2 query param to a monday URL. If something breaks and there’s no workaround, please complete a support request so we can find a resolution.

Keep your eyes out for more reminders as we get closer to implementing the second part of sandboxing!

We recently released the integration error handling mechanism that enables you to display descriptive errors when custom integrations fail. Our framework supports two different methods to communicate errors: severity codes and HTTP status codes. Check out our error handling doc to learn more about this new feature!

We recently added new get, set, and listen methods to the SDK called location. You can use these new methods to help improve routing and navigation inside your app. The monday.get("location") and monday.listen("location") methods can show you the URL location inside an app, and the monday.set("location") method can help you set the query params in the URL.

The monday.com SDK now supports TypeScript to expand its functionality and provide a better developer experience. Our updated SDK now includes type declarations for each SDK method, and you can find them in the types/index.d.ts file.

Please take note that you must update the version to 0.3.0 in all of your code to take advantage of all of the new features.

We recently added the ability to view app ratings and reviews in the App Analytics tab in the developer's section. You can access each rating, including the score, text review, and account ID.

Only app developers can see ratings and reviews, but we will expose the score to marketplace users in the next few weeks. The score will be an average of all the ratings submitted in the past 365 days by paying monday.com customers. Each app must meet the minimum threshold of 3 or more ratings to display the average in the marketplace.

You can use the new custom URL feature to encourage your customers to rate your app and boost your score, or you can directly reach out to those who previously rated your app to understand their rating better and improve your app’s user experience.

Please note that you cannot create a new major version if you already have a major version in your drafts. Check out our documentation to learn more about app versioning!

We recently added the openAppFeatureIntegrations SDK method that enables you to open a modal with integrations. You can find the required parameters and a code sample in our documentation!