v2.2.1 v0.0.19
google/artemisSep 8, 2026 → Sep 10, 20262 days between releases
What's New
Introduces runnable server artifacts and plugin sandbox CSPRNG, differing significantly from the previous PowerShell security focus.
Breaking Changes
- Runtime path containment logic changed to use relative() instead of string prefix.
- Plugin SDK requires contentAccess to be explicitly carried into the manifest.
New Features
- Runnable server artifacts and a batch of shared fixes for the build pipeline.
- Plugin sandbox CSPRNG for enhanced security.
- Plugin SDK now supports ingesting managed media from plugins.
Improvements
- Media uploads now routed through SSRF-safe fetch guard.
- Site import logic improved for alt text and script order.
- Dev servers now install dependencies before starting.
Bug Fixes
- Import logic preserves content wrapped by compound buttons.
- Site import honors alt text, script order, and re-imports.
- Uninstall respects ECC_DRY_RUN environment variable.
Upgrade Notes
Review plugin configurations as the runtime path handling logic changed to use relative() instead of string prefix. Plugin SDK requires contentAccess to be explicitly carried into the manifest. Ensure media upload configurations are compatible with the new SSRF-safe fetch guard.
The Two Releases
v2.2.1
Sep 8, 2026· 1 month ago
A security patch addressing destructive PowerShell commands, installer collisions, and hook entrypoint handling.
Full release notesInstatic 0.0.19
Sep 10, 2026· 1 month ago
A coordinated security release that introduces runnable server artifacts and improves plugin sandbox security, alongside fixes for media handling and import logic.
Full release notes