Skip to content

Inkforge v0.1.5

Choose a tag to compare

@sairam0424 sairam0424 released this 11 Oct 13:54
· 8 commits to develop since this release
e2a4a40

What is new in v0.1.5

A fix and security release.

Fixed

  • emit no longer overwrites the generated article with the raw input when INKFORGE_CONTENT_DIR does not end in articles. The inputs directory is derived from the last path segment (sibling inputs/ for a directory named articles, <dir>/inputs/ otherwise) and a guard refuses to ever write the raw input to the article's own path. Five regression tests cover both layouts, a name that merely ends in articles, and the guard (#63, #68)
  • inkforge generate exits after a successful run in interactive terminals. The stage spinner is recoloured at the emit stage instead of being replaced by a second spinner whose timer kept the process alive (#68)

Security

  • Dependency advisories patched so pnpm audit is clean at every severity and the CI Security Audit job is green again (#67): next 16.3.3 → 16.3.8 (critical RCE in next/og, high SSRF in Image Optimization, four moderate cache and leak advisories, one low), sharp 0.35.4 → 0.35.5 (librsvg CVE-2026-96889), source-map-js 1.2.1 → 1.2.2 (event-loop DoS), vitest / @vitest/mocker 4.1.9 → 4.1.11 (path traversal). Supersedes Dependabot #59 and #60.

Full changelog: https://github.com/sairam0424/Inkforge/blob/main/CHANGELOG.md
Compare: v0.1.4...v0.1.5