Instatic 0.0.3

What's Changed

• [codex] Update toolbar site branding by @DavidBabinec in #8
• Harden plugin sandbox against hangs and preserve VM stack traces by @DavidBabinec in #4
• Make plugin fetch and HTTP routes binary-safe by @DavidBabinec in #5
• Push admin settings changes to running plugin VMs by @DavidBabinec in #2
• Namespace plugin-emitted hook events to plugin..* by @DavidBabinec in #6
• Fix plugin scheduler: cancel namespacing, pause persistence, disabled-plugin fires, ghost sweep by @DavidBabinec in #3
• Mask secret plugin settings on every client-facing payload by @DavidBabinec in #7
• Encrypt plugin secret settings at rest in a dedicated plugin_secrets table by @DavidBabinec in #12
• Add force-uninstall escape hatch and run deactivate before uninstall by @DavidBabinec in #9
• Require editor.code permission for unsandboxed admin-window plugin code by @DavidBabinec in #10
• [codex] Fix data table step-up flow by @DavidBabinec in #11
• docs(deployment): TRUSTED_PROXY_CIDRS and Railway/Render template hardening by @DavidBabinec in #13
• Decouple CSRF origin from proxy trust via PUBLIC_ORIGIN; drop 0.0.0.0/0 from templates by @DavidBabinec in #14
• Revamp README: screenshots, one-click Railway deploy, real voice by @DavidBabinec in #16
• Prepare v0.0.3 release by @DavidBabinec in #17
• Stabilize flaky plugin sandbox infinite-loop abort test by @DavidBabinec in #18

New Contributors

• @DavidBabinec made their first contribution in #8

Full Changelog: v0.0.2...v0.0.3

Instatic 0.0.2

Full Changelog: v0.0.1...v0.0.2

Instatic 0.0.1

Full Changelog: https://github.com/CoreBunch/Instatic/commits/v0.0.1