Part 2 of sandboxing for all iframes will now be implemented on July 5th, 2023 to give developers more time to test their apps against the new restrictions. Please note that the original directives will remain the same:

  • allow-forms: Allows the page to submit forms. The form will be displayed as normal, but submitting it will not trigger input validation, sending data to a web server, or closing a dialog if this keyword is not used.
  • allow-downloads: Allows downloading files through an <a> or <area> element with the download attribute and through the navigation that leads to a file download. This works regardless of whether the user clicked on the link or JS code initiated it without user interaction.
  • allow-presentation: Allows embedders to have control over whether an iframe can start a presentation session.
  • allow-same-origin: The resource is treated as being from a special origin that always fails the same-origin policy (potentially preventing access to data storage/cookies and some JavaScript APIs) if this token is not used.
  • allow-scripts: Allows the page to run scripts (but not create pop-up windows). This operation is not allowed if this keyword is not used.

If you need to open a link in a new tab, you can use the new monday.execute("openLinkInTab") method.

We recommend testing your app in the sandboxed environment with the new restrictions to ensure nothing breaks. You can do so by adding the _apps_sandbox=v2 query param to a monday URL. If something breaks and there’s no workaround, please complete a support request so we can find a resolution.

We recently deployed a bug fix so the change_column_value webhook fires whenever column values in new columns on the relevant board change.

Before, the webhook would only fire after registering a second change_column_value webhook on the same board.

You can find more information about webhooks in our documentation!

We released a new version of monday vibe (our react components library). It has some breaking changes for some of you. Check out v2.0.0 on npm here.

Potential breaking change: This new version uses CSS modules, so any code that tries to override the styles from the library will not work correctly.

If you’re not overriding the CSS, it should be a seamless upgrade. I recommend upgrading as soon as yopu can so that new components we release will work as expected.

And if you’re not using Vibe yet, we suggest you do 😄 Check out the docs here: monday vibe

Drop a note in our community if you're having any trouble with the upgrade!

We recently added three new query parameters for custom URLs that allow you to direct users to the plan and pricing, billing, and how to use screens inside your app! Check out our documentation to learn more about each query parameter and how to create the URLs.

We recently added four new webhooks for apps that are monetized by monday:

  • app_subscription_cancelled: sent when a subscription is canceled
  • app_subscription_cancellation_revoked_by_user: sent when a user undoes their subscription cancellation
  • app_trial_subscription_started: sent when a trial subscription starts
  • app_trial_subscription_ended: sent when a trial subscription ends

We also added two new fields to our webhooks that return the account_name and account_slug. You can read more about each webhook and see sample payloads in our documentation!

If your app has a workspace template feature, users from all regions can now access it!

Before, EU accounts could not access the workspace template feature of an app if it was in an account on a US server. With this update, EU accounts can now access all workspace template app features!

This change is effective immediately, but please note that you must release a new minor version of your app and promote it to live before users see the impact!

The post-install flow is integral to helping users get the most value from your app as quickly as possible. A seamless use flow can increase app adoption and usage, ultimately helping make your app more successful. We’ve been creating a flow that optimizes app initial usage and value, and we are excited to announce that it is finally here!

As part of this flow, you can access the new onboarding configuration tab to define a starting point that best represents your app’s initial and essential functionality.

Why it’s important?

We gathered feedback about the app marketplace from our extended community, and the interviews pointed to the feature selection screen as a major friction point in the flow from monday users. We introduced the starting point feature to eliminate the feature selection step and provide a smoother experience.

The starting point is crucial in the post-install flow because it helps reduce the time between installation and usage. When a user selects this option, the app will direct them to the starting point you defined so they can use the app immediately. Our initial testing results show a nearly 100% improvement from our data of app-usage-metrics, indicating that the flow significantly helps increase app usage.

What do you need to do?

This is where you come in! You can use this new post-install flow and define your starting point in the onboarding configuration tab. Doing so will increase app usage and a better customer experience. We recommend defining your start point by April 16th, 2023.

If you don’t have a defined starting point by then, one of your app’s features will be randomly selected, but it may not be the best representation of your app. Therefore, we recommend defining your own starting point to take advantage of the new and improved post-install flow to help your customers get the most value from your app!