Starstruk Logo MarkStarstruk

v0.7.16

simstudioai/simv0.7.16Jun 28, 2026by github-actions[bot]

AI Summary

Focuses heavily on performance optimization, security hardening against SSRF and DoS attacks, and infrastructure improvements like connection pooling and Redis integration.

Key Highlights

  • Security hardening against SSRF and decompression bombs
  • Redis integration for per-block progress markers
  • Postgres connection-pool profiles per role
  • Reduced RAM usage for local dev server
  • Webhook trigger-age instrumentation

New Features

  • Redis progress markers to cut write amplification
  • Expanded block templates and skills in ClickHouse
  • SIM_DEV_MINIMAL_REGISTRY mode
  • Execution snapshot reuse optimization
  • Webhook cleanup inline on deploy
  • SSRF protection for MCP
  • KB document download size caps

Full Release Notes

## Improvements

- improvement(logs): move per-block progress markers to Redis to cut write amplification (#5248)
- improvement(clickhouse): expand block templates and skills, normalize tool versions (#5246)
- perf(dev): SIM_DEV_MINIMAL_REGISTRY mode to slash local dev-server RAM (#5223)
- improvement(execution): stop rewriting execution snapshots on reuse + skip redundant actor lookup (#5242)
- perf(db): per-role Postgres connection-pool profiles (#5232)
- improvement(webhooks): add trigger-age instrumentation + guard env decryption (#5236)
- perf(trigger): cap concurrency on background DB tasks (#5231)

## Bug Fixes

- fix(webhooks): run inactive deployment-version cleanup inline on deploy (#5250)
- fix(webhooks): cast json provider_config for atomic jsonb merge (#5249)
- fix(sso): keep an exit affordance in edit mode when clean (#5247)
- fix(security): gate credential-set invitation listing to admins and drop token (#5243)
- fix(mcp): pin public IP-literal server URLs to block SSRF redirect bypass (#5244)
- fix(copilot): gate post-tool output writes behind write permission (#5241)
- fix(file-parsers): guard OOXML parsers against decompression-bomb memory exhaustion (#5239)
- fix(security): cap KB document download size to prevent memory-exhaustion DoS (#5240)
- fix(connectors): harden Zendesk connector against SSRF (#5237)

## Other Changes

- chore(data-drains): remove settings callout and unused InfoNote component (#5235)

## Contributors

- @TheodoreSpeaks
- @waleedlatif1

[View changes on GitHub](https://github.com/simstudioai/sim/compare/v0.7.15...v0.7.16)