Starstruk Logo MarkStarstruk

v0.0.19

qdm12/dnsv0.0.19Sep 10, 2026by github-actions[bot]

Upgrading?

What changed from v2.11.2 → v0.0.19?What's new in v2026.9.10.0 after v0.0.19?

AI Summary

This release includes a coordinated security update, introduces runnable server artifacts, and enhances plugin sandbox security and media handling capabilities.

Key Highlights

  • Runnable server artifacts and shared fixes.
  • Security improvements with CSPRNG for the plugin sandbox.
  • Plugin SDK updates for managed media ingestion.
  • SSRF-safe fetch guard for storage uploads.
  • Improved site import handling for alt text and script order.

New Features

  • Runnable server artifacts.
  • CSPRNG in the plugin sandbox.
  • Ingest managed media from plugins.

Full Release Notes

## What's Changed
* fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/478
* feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/479
* fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in https://github.com/CoreBunch/Instatic/pull/333
* feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in https://github.com/CoreBunch/Instatic/pull/390
* fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/480
* fix(import): keep the content a compound button wraps by @m-altaifi in https://github.com/CoreBunch/Instatic/pull/476
* chore(dev): install dependencies before the dev servers start by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/481
* feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/487
* test(e2e): repair two specs left behind by security fixes by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/492
* fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/517
* fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/518
* chore(release): prepare 0.0.19 by @DavidBabinec in https://github.com/CoreBunch/Instatic/pull/519

## New Contributors
* @m-altaifi made their first contribution in https://github.com/CoreBunch/Instatic/pull/476

**Full Changelog**: https://github.com/CoreBunch/Instatic/compare/v0.0.18...v0.0.19

Related Repositories

ollama/ollama★ 184,207

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,051

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,612

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

gohugoio/hugo★ 90,198

The world’s fastest framework for building websites.

junegunn/fzf★ 83,716

:cherry_blossom: A command-line fuzzy finder