v2.2.1 v0.166.0
high risk
bespokelabsai/nimbleSep 8, 2026 → Sep 9, 20261 day between releases
What's New
Upgraded to Go 1.27, rewrote glob library, and hardened templates against XSS.
Breaking Changes
- Glob library upgrade to v1.0.0 changes pattern matching behavior
- `text/org` content is now denied by default
- `{{ return }}` outside a partial is now an error
New Features
- New `resources.Publish` template function
- New `IndexOf` method on Pages
- New `tokenize` option for related content
- KaTeX 0.18.4 support
- es2025 as supported build target
Improvements
- Upgrade to Go 1.27
- Template improvements with context argument and `return` keyword
- Related content index creation is faster
- Upgrade katex to 0.18.4
- Security fixes blocking `text/org` content by default
Upgrade Notes
You must update your Go version to 1.27. Check your template code for `{{ return }}` usage outside partials and verify glob pattern compatibility. Ensure your configuration does not rely on `text/org` content, as it is now blocked by default.
The Two Releases
v2.2.1
v2.2.1
Sep 8, 2026· 1 month ago
A security and bug patch focused on data protection, GateGuard enhancements, installer hardening, and improved hook handling.
Full release notesv0.166.0
v0.166.0
Sep 9, 2026· 1 month ago
A major update upgrading Go to 1.27, hardening security against XSS, and improving template functionality with new context arguments and a rewritten glob library.
Full release notes