v0.50.1

0.50.1 (2026-10-31)

Bug Fixes

• cms: answer asset ranges and conditionals as RFC 9110 describes (8fee789)
• cms: answer every unrecorded avatar key with the placeholder (3aa98c3)
• cms: cap avatar fetches and skip sweep ticks while one runs (0cddde0)
• cms: cap the pixels a derived image is decoded from (63aff93)
• cms: clamp variant widths to the encoder and remember sources that cannot be derived (4bc53b5)
• cms: compress no body over 2 MiB and none for a HEAD request (0696bd3)
• cms: connect public fetches to the address the check resolved (19f2737)
• cms: derive icons only from the site icon, as one shared set (13f7109)
• cms: hold the widest jpeg variant to the encoder's 65500 pixels (468c294)
• cms: keep avatars written while the sweep runs (bff7ba4)
• cms: link site icons only once they have been drawn (c77a3c7)
• cms: mark a derived file immutable only for the bytes it came from (d86ef43)
• cms: notice a deleted font file behind a memoised stylesheet (60fe3ad)
• cms: open asset files when the response body is first read (4b7876a)
• cms: percent-encode each segment of a variant url (fd8dd16)
• cms: plan the variant set before deriving for an unknown name (4cf2956)
• cms: queue a font fetch again after a failed job (c2866a9)
• cms: read a quoted > inside an img tag as part of the attribute (ce9ccaa)
• cms: read asset request paths once and refuse dot and empty segments (0fa2ad6)
• cms: serve a static file only when its real path is inside its root (bf4949b)
• cms: serve only recorded variant and icon names from the derived route (7f88eb8)
• cms: serve uploads outside the upload media types as inert files (33853aa)
• cms: stop serving derived files once their upload is gone (2dacbae)
• cms: treat ipv6 prefixes that embed an ipv4 address as private (1d9d792)