Bug Fix Bulletin

1. Purpose & Scope

For SOC 2 CC7.4 (incident response) requirements, this bulletin provides evidence that identified control deficiencies were remediated in a timely manner.

2. Defect Resolution Record

Ticket	Area	Resolution Description
TD-6754	Sharing / Security	Password-protected share links were not enforcing the password requirement in certain edge cases. The gate is now enforced reliably for all password-protected links.
TD-6640	Builder — Lottie / Fonts	A Lottie tile animation crash and associated font rendering breakage affecting the Manulife customer environment have been resolved.
TD-6638	Builder — Canvas	Dragging a tile from the tile panel onto the builder canvas was intermittently creating duplicate tile instances. The drag-to-create action now creates exactly one tile.
TD-6397	UI Copy	Grammar and copy errors in the Required Fields modal have been corrected.
TD-6146	Builder — Layers	Layer ordering was not preserved correctly when performing copy/paste and undo/redo operations across multiple pages. Ordering is now stable across all multi-page scenarios.
TD-6689	Color Picker	Selecting a non-brand color now correctly populates the Recent Colors list. Previously, only brand palette colors were recorded.
TD-6125	Text Tile	The up and down arrow keys now correctly adjust font size when the font size input field is focused in the Builder.
TD-5941	Builder — UI	The lock icon in the Builder has been updated to reflect the current visual design standard.
TD-6613	Builder — Layers	Content pasted from one screen to another is now placed on the top layer, consistent with expected paste behavior.
TD-6619	Builder — Canvas	Drag-to-select and tile creation actions now function correctly when performed in areas off the main canvas boundary.
TD-6745	Color Picker	Recent Colors were being visually cut off when the side navigation panel entered a scrollable state. The display is now correct regardless of nav panel scroll state.
TD-6744	Color Picker	The eyedropper section within the color picker now displays a hover state, improving discoverability of the tool.
TD-6743	Color Picker	Selecting a color from the Recent Colors section now correctly updates the full color palette UI to reflect the selection.
TD-6740	Color Picker	Dragging the color gradient slider was firing excessive API requests per drag event. Request frequency is now throttled to prevent unnecessary server load.
TD-6738	Notifications	API token notifications for library-level and account-level tokens were incorrectly replacing each other in the Notification Center. Both notification types now appear as independent, non-collapsing items.
TD-6736	Notifications	Microapp Share and Republish notifications were being incorrectly reused (collapsed into a single notification for repeat events). Each event now generates a distinct notification entry.

3. Defect Origins & Retro Note

Of the 16 defects resolved in v60.0.0, 7 were late-cycle additions identified after the initial release scope was set (4 color picker issues, 2 Notification Center issues, 1 password-protected share link issue). The release scope grew from 50 to 57 tickets as a result.

For SOC 2 CC4.2 (evaluation of control deficiencies), the following is noted:

All late-cycle defects were identified through internal QA processes prior to customer impact.
The password-protected share link defect (TD-6754) represents a security control gap that was identified and remediated within the same release cycle. No customer-reported incidents are associated with this defect.
A retrospective review of the late-cycle additions is recommended to determine whether detection occurred via internal QA, customer reports, or pre-release dogfooding, and to improve future defect detection timing.

4. Change History

v1.0 — May 5, 2026

Initial bulletin. All defects resolved in Tiled v60.0.0 (released May 5, 2026).

Bug Fix Bulletin — v60.0.0

Resolved defects across Builder, sharing, and color picker — May 2026

1. Purpose & Scope

2. Defect Resolution Record

3. Defect Origins & Retro Note

4. Change History