HyperFrames v0.9.53
Released on 2026-11-15.
Pages with many Chinese, Japanese or Korean characters now load their fonts in a few small requests, so they render instead of timing out. Cloud render no longer refuses a file that only an unused page names, and uploads now list every file they carry from outside the project.
Features
Fixes
- Producer: Shader transitions blend in Node when the page cannot composite them (fb1a383bd, #7840).
- CLI: The upload cut test stops failing on busy Windows runners (2ea78c0ab, #7843).
- Engine: Restricted downloads apply the capture proxy's address rule (125a9446b, #7839).
- LAN-host previews and play pages refuse other sites without fetch metadata (2ceb682f9, #7836).
- CLI: Benchmark keeps received files' rule; a received .env key never replaces a login (a7266e4c8, #7837).
- CLI: Cloud render no longer refuses a file only an unused page names (45cc331e5, #7812).
- Core: Pages with many CJK characters fetch fonts in several requests (6a8f4b5b4, #7823).
- CLI: Hyperframes audio never looks up media on another computer's share (eaf33bc65, #7826).
- CLI: Uploads leave out outside scripts; .ts counts as video only when it is one (04202e8a4, #7818).
- CLI: Play and present check the Host like preview; local render leaves out outside files for a received composition (ac0247410, #7792).
- Studio media routes refuse cross-site load, CLI escapes terminal text, batch outputs stay in their folder (c4d60c347, #7779).
- CLI: Discover mounted scenes inside templates (a75e61f31, #7822).
- Studio Server: History lock records are replaced, never written through links (0248ea033, #7821).
- Producer: Keep the render server local unless a token guards it (f667111d1, #7814).
- Engine,cli: The playlist folder check reads HLS as ffmpeg does; snapshot runs it too (797a622be, #7810).
- Engine,producer: Render-network setting reads like a switch; render-service probes stay on checked inputs (be740d021, #7807).
- CLI: Printed Windows commands read folder names literally in every shell (a07d4cf73, #7769).
- CLI: Nested received records only add; a received .env never picks the account; font names stay out of agent files (80b09cc94, #7808).
- Cloud Run renders reach only public addresses; frame cache folder is private to its user (55b514709, #7777).
- Deps: Refresh zod, smol-toml, aws-cdk-lib and related resolutions in bun.lock (28d4ba50f, #7741).
- Deps: Bump @mcp-b/global to 6.1.0 to clear @modelcontextprotocol/server advisories (beeb17e85, #7742).
- Engine: A failed parallel capture names the worker that failed, not the peers it stopped (db6b7478a, #7803).
- Engine: Render refusals name the address an IPv6-mapped or NAT64 host carries (04ee926d9, #7802).
- Producer: Accept browser requests only under loopback, IP or listed host names (03e6a1a18, #7798).
- Parsers: Never look up media on another computer's share (2de5c027f, #7797).
- CLI: Upload archives always leave out env files and private records (477a3aea1, #7796).
- Engine: Bound remote media downloads by size, encoding and throughput (5111cf384, #7786).
- CLI: Start helper programs only from trusted PATH folders on every platform (83eae240f, #7787).
Performance
- Lint: Scan CSS url references in linear time (bcf3d177d, #7829).
- CSS url, @import, @font-face, style and comment scans run in linear time (ded5e3eec, #7809).
Catalog
- CLI: Add lists files from a received config's registry as received (6a7b4df7c, #7820).
- Catalog: Payload check treats the optional caption-overrides.json as absent, not failed (b7c26ff84, #7813).
- Registry: Caption keywords, emoji and aftershock work for words outside a-z (8dbbc1d37, #7804).
- Docs: Check catalog link values and keep them out of copied commands (7c7ff6d89, #7783).