engine-v0.1.5 v0.8.6

medium risk

X-PLUG/mPLUG-DocOwlSep 8, 2026 → Sep 3, 20260 days between releases

What's New

Fixed critical rate-limit bypass vulnerability and added authentication helpers to custom-api.

New Features

  • Added `withAllowInsecure` helper for custom API configurations.
  • Added `withBasicAuth` helper for custom API configurations.

Improvements

  • Improved video widget caching to reuse lists on update failures.
  • Fixed X-Forwarded-For spoofing vulnerability allowing rate-limit bypass.
  • Enhanced RSS thumbnail handling for relative image URLs.

Bug Fixes

  • Fixed Reddit widget not fetching posts due to challenge page changes.
  • Fixed Docker containers not being identified correctly.
  • Fixed sorting for engagement in Reddit, Hacker News, and Lobsters widgets.
  • Fixed search bang indicator not clearing after pressing Enter.

Upgrade Notes

The upgrade is backward compatible. New authentication helpers `withAllowInsecure` and `withBasicAuth` are available in the custom-api module for enhanced configuration.

The Two Releases

engine-v0.1.5

impeccable engine engine-v0.1.5

Sep 8, 2026· 1 month ago

Minimal release notes: "Prebuilt impeccable engine binaries (engine-v0.1.5). The launcher, the npm shim and impeccable install download these on"

Full release notes
v0.8.6

v0.8.6

Sep 3, 2026· 2 months ago

This maintenance release addresses various stability and security issues, including a critical rate-limit bypass vulnerability, and introduces new authentication helpers for custom API configurations.

Full release notes