open-design-v0.22.2 v0.0.19

medium risk

haiwen/seafileSep 10, 2026 → Sep 10, 20260 days between releases

What's New

Shift from desktop client reliability patch to server security release with runnable artifacts and sandbox improvements

Breaking Changes

  • Runtime path containment logic changed to use relative() instead of string prefix

New Features

  • Runnable server artifacts for easier deployment
  • CSPRNG for sandbox security
  • SSRF-safe fetch guard for storage uploads
  • Ingestion of managed media from plugins

Improvements

  • Coordinated security fixes from version 0.0.18
  • Plugin SDK improvements for content access
  • Site import improvements for alt text and script order

Bug Fixes

  • Fixed path containment logic using relative() instead of string prefix
  • Fixed site import to honour alt text and script order
  • Fixed import to preserve content in compound buttons

Upgrade Notes

The older release is a desktop client update, whereas the newer version is a server artifact release. Verify you are deploying the correct component type. Watch for the runtime path containment logic change.

The Two Releases

open-design-v0.22.2

Open Design 0.22.2 — More reliable update restarts

Sep 10, 2026· 1 month ago

A desktop update reliability patch for macOS and Windows focusing on smoother update restarts and clearer user feedback during shutdown.

Full release notes
v0.0.19

Instatic 0.0.19

Sep 10, 2026· 1 month ago

A security release featuring runnable server artifacts, shared fixes, and plugin improvements including a CSPRNG for the sandbox.

Full release notes