Instatic 0.0.19

What's Changed

• fix(security): land the 0.0.18 coordinated security release by @DavidBabinec in #478
• feat(release): runnable server artifacts and a batch of shared fixes by @DavidBabinec in #479
• fix(plugin-sdk): carry contentAccess from definePlugin config into the manifest by @mostafasadeghidev in #333
• feat(plugins): give the sandbox a CSPRNG by @lovepixel-git in #390
• fix(site-import): honour alt text, script order, folders, and re-imports by @DavidBabinec in #480
• fix(import): keep the content a compound button wraps by @m-altaifi in #476
• chore(dev): install dependencies before the dev servers start by @DavidBabinec in #481
• feat(plugin-sdk): ingest managed media from plugins by @DavidBabinec in #487
• test(e2e): repair two specs left behind by security fixes by @DavidBabinec in #492
• fix(media): route storage upload plans through the SSRF-safe fetch guard by @DavidBabinec in #517
• fix(runtime): decide path containment with relative(), not a string prefix by @DavidBabinec in #518
• chore(release): prepare 0.0.19 by @DavidBabinec in #519

New Contributors

• @m-altaifi made their first contribution in #476

Full Changelog: v0.0.18...v0.0.19