v0.0.19

Name: chonkie
Author: feyninc

feyninc/chonkiev0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from open-design-v0.22.2 → v0.0.19?What's new in v2026.9.10.0 after v0.0.19?

AI Summary

This release prioritizes security fixes and stabilizes the server artifact system. It introduces features for plugin media ingestion and improves import functionality to better preserve content structure and alt text.

Key Highlights

Coordinated security release addressing vulnerabilities
Introduction of runnable server artifacts for easier deployment
Plugin SDK enhancements allowing managed media ingestion
Improved site import handling for alt text, script order, and folders

New Features

Give the sandbox a CSPRNG (Cryptographically Secure Pseudo-Random Number Generator)
Ingest managed media from plugins
Runnable server artifacts and a batch of shared fixes

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

public-apis/public-apis★ 491,127

A collective list of free APIs

NousResearch/hermes-agent★ 255,899

The agent that grows with you

yt-dlp/yt-dlp★ 199,996

A feature-rich command-line audio/video downloader

microsoft/markitdown★ 191,480

Python tool for converting files and office documents to Markdown.

Significant-Gravitas/AutoGPT★ 187,700

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.