v1.0.0-beta.1 v2.0.8-beta

high risk

vadimdemedes/inkSep 21, 2026 → Sep 21, 20260 days between releases

What's New

Switched from Python sandboxing to a web app with critical JWT security fixes and OnlyOffice integration.

Breaking Changes

  • JWT validation now fails closed if no signing key is configured
  • OnlyOffice callbacks now require a configured secret and verify the document key

New Features

  • Upload only what's missing option
  • JWT signing key persistence in database
  • Improved UI responsiveness for larger directories

Improvements

  • Enhanced file download error handling (404/400 instead of 500)
  • OnlyOffice callback verification improvements
  • Improved UI responsiveness for larger directories

Bug Fixes

  • Fixed empty ZIP downloads for anonymous visitors with deny-by-default rules
  • Fixed 401 errors on PDFs

Upgrade Notes

Ensure the database is updated to support JWT key persistence and configure the OnlyOffice secret for callback verification. Existing integrations may fail if JWT keys are not configured.

The Two Releases

v1.0.0-beta.1

v1.0.0-beta.1 - 2026-09-21

Sep 21, 2026· 1 month ago

This beta release for Monty implements core Python built-ins like `format()`, `eval()`, and `exec()`, adds modules such as `random` and `copy`, and introduces sandboxing improvements along with Python 3.14t wheel support.

Full release notes
v2.0.8-beta

v2.0.8-beta

Sep 21, 2026· 1 month ago

A security-focused update that fixes critical JWT authentication vulnerabilities and improves error handling for file downloads.

Full release notes