Starstruk Logo MarkStarstruk

v0.0.19

CoreBunch/Instaticv0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from yue2-v0.1.6 → v0.0.19?What's new in v0.5.2 after v0.0.19?

AI Summary

This release introduces runnable server artifacts and expands the plugin SDK with media ingestion capabilities. It incorporates security fixes, including a coordinated release and SSRF-safe fetch guards for media uploads, alongside improvements to site import logic and runtime path handling.

Key Highlights

  • Added runnable server artifacts to facilitate easier development.
  • Enhanced plugin SDK with managed media ingestion capabilities.
  • Implemented security fixes, including SSRF-safe fetch guards and a CSPRNG for the sandbox.
  • Improved site import handling to respect alt text, script order, and folder structures.

New Features

  • Runnable server artifacts
  • CSPRNG for plugin sandbox
  • Ingest managed media from plugins

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

openclaw/openclaw★ 392,727

The AI that really does things. Any OS. Any Platform. The lobster way. 🦞

nilbuild/developer-roadmap★ 370,105

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

morluto/rea★ 361,388

Reverse engineer anything with agents, from app behavior down to native binaries.

anomalyco/opencode★ 219,915

The open source coding agent.

n8n-io/n8n★ 208,292

Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.