CMS Dev Server: Security update for version 1.0.33 and ending support for previous versions 1.0.32

We have released a security update to our cms-dev-server - version 1.0.33. Due to this update, we will also be sunsetting older versions of the cms-dev-server from 1.0.32 and below starting today (June 23rd, 2025). To see a full list of versions which will become sunset, please visit the HubSpot CMS Dev Server NPM Versions page.

When is this happening?

The sunset of versions 1.0.32 and below will go into effect today June 23rd, 2025.

What will happen to users currently using 1.0.32 and below?

Users who are using versions that are sunset will no longer be able to preview modules locally and will receive a 401 “INVALID_SIGNATURE” error message.

What do I need to do?

Users will need to update to the latest version of the cms-dev-server by using

npm update @hubspot/cms-dev-server

If you are already on the latest version of 1.0.33, there is no further action needed.

View this update on the HubSpot Community forums.