v0.93.1 v0.0.19
high risk
nari-labs/diaSep 9, 2026 → Sep 10, 20261 day between releases
What's New
Projects differ: v0.93.1 is Crush, v0.0.19 is Instatic
New Features
- Runnable server artifacts
- CSPRNG for sandbox
- Managed media ingestion from plugins
- SSRF-safe media upload handling
Improvements
- Security fixes and shared improvements
- Dependency installation order for dev servers
- Path containment logic using relative()
Bug Fixes
- Memory leak when discover_models is enabled
- Model routing on Copilot and OpenCode
- Content access in plugin manifest
- Alt text and script order handling
Upgrade Notes
These releases belong to different projects (Crush vs Instatic). No migration is required as they are unrelated.
The Two Releases
v0.93.1
v0.93.1
Sep 9, 2026· 1 month ago
This release focuses on UX improvements and bug fixes, including a new configuration option to disable mouse support, validation for vision model attachments, and fixes for memory leaks and authentication issues.
Full release notesv0.0.19
Instatic 0.0.19
Sep 10, 2026· 1 month ago
Instatic release focusing on security fixes, runnable server artifacts, and safe media upload handling.
Full release notes