v0.0.17 v1.43.0
Gen-Verse/MMaDAAug 30, 2026 → Aug 31, 20261 day between releases
What's New
Major upgrade to v1.43.0 adds SSRF protection and Spanish (Mexico) localization.
Breaking Changes
- Outbound requests to private IPs are now blocked (SSRF protection).
- Third-party applications can no longer mutate account data.
- Token exchange now requires specific JWT types.
- Identifier lockouts use normalized forms, potentially resetting buckets.
New Features
- SSRF protection for webhooks and enterprise SSO.
- Token exchange validation for JWT types.
- Third-party API access restrictions.
- es-MX (Spanish Mexico) localization support.
- Webhook retry logic (up to 3 times).
Bug Fixes
- Fixes list formatter placeholders and untranslated MFA messages in Spanish locales.
Upgrade Notes
Review webhook and SSO configurations to ensure they only target public IPs, as private IP requests are now blocked. Update third-party applications to comply with the new account data mutation restrictions and verify JWT token configurations for token exchange.
The Two Releases
Instatic 0.0.17
Aug 30, 2026· 2 months ago
Version 0.0.17 introduces TypeScript tooling and advanced loop capabilities for data filtering and custom HTML attributes. It also addresses critical publishing issues, SEO integration, and fixes for reverse proxy compatibility.
Full release notesv1.43.0
Aug 31, 2026· 2 months ago
Security hardening for webhooks and SSO flows, plus localization support for Spanish (Mexico).
Full release notes