v0.0.19

Name: semble
Author: MinishLab

MinishLab/semblev0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from version/2026.8.2 → v0.0.19?What's new in v0.6.19 after v0.0.19?

AI Summary

A coordinated security release that introduces runnable server artifacts and significantly enhances the plugin SDK with media management capabilities and cryptographic randomness.

Key Highlights

Coordinated security release addressing vulnerabilities.
Introduction of runnable server artifacts for easier deployment.
Plugin sandbox gains a CSPRNG (Cryptographically Secure Pseudo-Random Number Generator).
Plugin SDK now supports ingesting and managing media.

New Features

Runnable server artifacts
Plugin sandbox CSPRNG
Ingest managed media from plugins
Carry contentAccess from definePlugin config into the manifest

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

public-apis/public-apis★ 491,123

A collective list of free APIs

NousResearch/hermes-agent★ 255,887

The agent that grows with you

yt-dlp/yt-dlp★ 199,986

A feature-rich command-line audio/video downloader

microsoft/markitdown★ 191,478

Python tool for converting files and office documents to Markdown.

Significant-Gravitas/AutoGPT★ 187,699

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.