v0.50.0 v1.0.1
skeletonlabs/skeletonSep 2, 2026 → Sep 6, 20263 days between releases
What's New
Major version bump introduces security fixes and stricter defaults, including Node.js 22.19+ requirement.
Breaking Changes
- Client-supplied provider base URLs on loopback/private addresses are rejected outside production.
- Development persistence authenticator fails closed in production.
- POST /api/classroom now rejects scenes not satisfying the slide DSL.
New Features
- Fact-check skill.
- Asynchronous generate_video.
- Interactive-widget hints for generate_scene.
- PPT element references in Pro chat.
- Exa web-search provider.
Improvements
- Outbound URL guard now runs in all builds, not just production.
- Stored slide HTML is now sanitized.
- Redirects on provider requests are now fully re-validated on every hop.
Bug Fixes
- Classroom persistence now validates stage IDs to prevent directory escape.
- Stored slide HTML is sanitized to prevent unsanitized rendering.
- Redirects on provider requests are now re-validated on every hop.
Upgrade Notes
Requires Node.js 22.19+ and review of provider base URLs and persistence authentication configurations, as defaults have been tightened for security.
The Two Releases
v0.50.0
Sep 2, 2026· 2 months ago
Focuses on correctness, accessibility, and performance. Adds HMR support, compiled keyboard shortcuts, screen reader announcements, and build-time tree-shaking via `@lexical/compiler`. Upgraded to pnpm 11.
Full release notesOpenMAIC v1.0.1 — Security and stability
Sep 6, 2026· 2 months ago
A security update fixing four vulnerabilities including path traversal and unsanitized HTML rendering. It introduces stricter defaults for Node.js version, local network access, and development authentication.
Full release notes