canvascoding/canvas-notebook v2026.6.17.1

Canvas Notebook 2026.6.17.1

on GitHub

Highlights

• Adds Markdown image upload/import with workspace-relative references.
• Adds inline image insertion in the HTML email composer with CID-backed attachments.
• Adds Canvas plugin and skill store improvements, standalone skill materialization, and plugin runtime management.
• Adds document-suite and Marp seed skills plus team workspace planning artifacts.

Security

• Hardens license JWT validation for issuer, audience, active status, expiration, issue time, and trusted public-key fingerprints.
• Adds license entitlement helpers for feature, plan, and quota checks.
• Blocks private, localhost, and unresolved hosts for server-side remote image imports, including redirect targets.

Verification

• npm run build
• npm run test:email:attachments
• npm run test:email:html-content
• npm run test:license
• GitHub Actions Build and Push on main: 27694619880, 27696295464
• GitHub Actions Build and Push on tag v2026.6.17.1: 27697440803