Starstruk Logo MarkStarstruk

v2.23.0

gitroomhq/postiz-appv2.23.0Aug 4, 2026by nevo-david

AI Summary

This release focuses on reliability and memory efficiency, introducing streamed media uploads to reduce worker memory usage, a new pending-post workflow to prevent duplicate posts, and stability fixes for the MCP server.

Key Highlights

  • Streamed media uploads for X (Twitter) and LinkedIn using ranged chunks to reduce memory usage.
  • New pending-post workflow (v1.0.6) prevents duplicate posts when publish attempts are interrupted.
  • SSRF protection for webhooks and media-path fetches via a safe request dispatcher.
  • MCP server improvements including stateless HTTP serving and OAuth discovery fixes.
  • Admins can now apply and cancel coupons for an impersonated user.

New Features

  • Admin coupon application and cancellation for impersonated users.
  • Case-insensitive email lookups for login and impersonation.

Full Release Notes

## Highlights

This release focuses on reliability and memory efficiency: provider media uploads are now streamed instead of buffered in memory, a new pending-post workflow prevents duplicate posts, and the MCP server got a round of stability and OAuth fixes.

## 🚀 Performance & Reliability

- **Streamed media uploads** — provider media uploads now stream instead of buffering entire files in memory, dramatically reducing worker memory usage for large videos (#1835)
  - X (Twitter) videos upload in 1MB ranged chunks (#1796)
  - LinkedIn videos upload in 2MB ranges (#1786)
- **Duplicate-post protection** — a new pending-post workflow (v1.0.6) resolves the state of in-flight posts before publishing, preventing duplicate posts when a publish attempt is interrupted (#1813)

## 🔒 Security

- SSRF protection for webhooks and media-path fetches via a safe request dispatcher
- Hardened streamed-upload paths after a full audit, including guarded Reddit S3 upload response parsing

## 🔌 MCP Improvements

- Streamable HTTP is now served statelessly for more reliable connections (#1717)
- OAuth discovery metadata no longer breaks key-in-URL MCP connectors (#1781)

## ✨ Features

- Admins can now apply and cancel coupons for an impersonated user, with full translations (#1801)

## 🐛 Fixes

- Email lookups for login, forgot password and impersonation are now case-insensitive (#1805)
- Pinterest video pins now upload the actual mp4 file instead of the first media item (#1802)