What's Changed
- fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in #478
- feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in #479
- fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in #333
- feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in #390
- fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in #480
- fix(import): keep the content a compound button wraps by @m-altaifi in #476
- chore(dev): install dependencies before the dev servers start by @DavidBabinec in #481
- feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in #487
- test(e2e): repair two specs left behind by security fixes by @DavidBabinec in #492
- fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in #517
- fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in #518
- chore(release): prepare 0.0.19 by @DavidBabinec in #519
New Contributors
- @m-altaifi made their first contribution in #476
Full Changelog: v0.0.18...v0.0.19