HyperFrames v0.9.35

Released on 2026-11-11.

Private files like .env and git data stay out of preview bundles, and local sharing only answers your own machine. Sharing also keeps tracking changes when .hyperframesignore uses gitignore patterns.

Fixes

• Security: Preview bundles never include .env files or git data, even through a link. A render that names one of these files now stops with an error. Local sharing only answers this machine, so sharing from Studio in a container now gets a 403 (a243169f8, #7563).
• Security: Helper programs are found by walking your trusted PATH folders directly. On Windows, the working folder is never searched (9a048ac01, #7562).
• Share: Change detection keeps working when .hyperframesignore uses gitignore patterns such as /exports/ or **/*.mov. Before, those patterns stopped it with an error (c07468d6a, #7568).
• CLI: Durations and sizes roll over to the next unit when rounded, so you see 1m 0.0s and 1.0 MB, not 60.0s and 1024.0 KB (182608311, #7565).

Docs & Examples

• Studio App: The brand kits page says kits are shared with your workspace only (c218b37a3, #7570).

Internal

• Core: The preview runtime offers its parent a typed message port. This prepares Studio for a sealed preview frame and changes nothing yet (ef5cdeb0a, #7556).
• CLI: Local Studio's share window counts button clicks and choices. Only fixed categories are recorded, never links, paths or email addresses (2a70733c1, #7566).

Full changelog

v0.9.34...v0.9.35