Starstruk Logo MarkStarstruk

v3.1.1 1.23.1

high risk

zumerlab/snapdomSep 24, 2026 → Sep 25, 20261 day between releases

What's New

The newer release notes are for a different project (Label Studio) but introduce breaking Postgres 14 requirements.

Breaking Changes

  • PostgreSQL 14 or higher is now required
  • SSRF_PROTECTION_ENABLED defaults to true
  • ML_BLOCK_LOCAL_IP defaults to true
  • DEBUG_MODAL_EXCEPTIONS defaults to false

New Features

  • New secure defaults for SSRF protection and ML backend blocking
  • SSRF_PROTECTION_ENABLED default set to true
  • ML_BLOCK_LOCAL_IP default set to true
  • DEBUG_MODAL_EXCEPTIONS default set to false

Improvements

  • Improved HTML sanitization in the labeling interface
  • Stronger SSRF protection for ML backends, webhooks, cloud storage, and URL imports

Bug Fixes

  • Tightened permission checks when you create storages, webhooks, and ML backends
  • Fixed access checks for local file storage and Data Manager filters

Upgrade Notes

Requires PostgreSQL 14 or higher. If your ML backend, MinIO, or storage runs on a local or private network, set SSRF_PROTECTION_ENABLED=false and/or ML_BLOCK_LOCAL_IP=false to maintain connectivity.

The Two Releases

v3.1.1

v3.1.1

Sep 24, 2026· 27 days ago

Fixes for capturing embedded fonts, custom element styles, and document overflow. Includes performance optimizations for cloning and updates to sitemaps.

Full release notes
1.23.1

1.23.1

Sep 25, 2026· 26 days ago

This is a security-focused patch release that introduces stricter security defaults, stronger SSRF protection, and improved HTML sanitization. It requires PostgreSQL 14 or higher due to Django 5.2 dependencies.

Full release notes