v0.0.19

Name: holehe
Author: megadose

megadose/holehev0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from open-design-v0.22.2 → v0.0.19?What's new in v2026.9.10.0 after v0.0.19?

AI Summary

A security-focused release that introduces runnable server artifacts and updates the plugin SDK to handle media and content access more securely.

Key Highlights

Coordinated security release addressing vulnerabilities found in the previous version.
Introduced runnable server artifacts for easier deployment and testing.
Plugin sandbox now utilizes a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG).
Plugin SDK updated to ingest and manage media from plugins.

New Features

Runnable server artifacts
Plugin sandbox CSPRNG
Plugin SDK: Ingest managed media from plugins

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

public-apis/public-apis★ 491,135

A collective list of free APIs

NousResearch/hermes-agent★ 255,963

The agent that grows with you

yt-dlp/yt-dlp★ 200,054

A feature-rich command-line audio/video downloader

microsoft/markitdown★ 191,491

Python tool for converting files and office documents to Markdown.

Significant-Gravitas/AutoGPT★ 187,703

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.