v0.0.19

Name: vexa
Author: Vexa-ai

Vexa-ai/vexav0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from open-design-v0.22.2 → v0.0.19?What's new in v0.5.2 after v0.0.19?

AI Summary

This release serves as a coordinated security update, introducing runnable server artifacts for easier deployment and enhancing plugin sandbox security. It improves media handling by routing uploads through SSRF-safe guards and fixes several issues related to site imports and plugin configurations.

Key Highlights

Coordinated security release with runnable server artifacts
Plugin sandbox now uses a CSPRNG
Improved media handling with SSRF-safe fetch guards
Fixes for site import regarding alt text, script order, and folders

New Features

Runnable server artifacts
Plugin sandbox CSPRNG
Ingest managed media from plugins

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

public-apis/public-apis★ 491,133

A collective list of free APIs

NousResearch/hermes-agent★ 255,913

The agent that grows with you

yt-dlp/yt-dlp★ 200,008

A feature-rich command-line audio/video downloader

microsoft/markitdown★ 191,484

Python tool for converting files and office documents to Markdown.

Significant-Gravitas/AutoGPT★ 187,700

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.