Release v0.9.3 - #2220

Merged

unclecode merged 59 commits into

mainfrom

Aug 31, 2026

Commits on Jul 15, 2026

fix(docker): tolerate unavailable IPv6 loopback
nightcityblade
committed
fadc53f

Commits on Jul 20, 2026

Merge pull request #2081 from nightcityblade/fix/issue-2078
ntohidi
authored
2d8f673

Commits on Jul 22, 2026

docs(docker): update self-hosting & migration guides for 0.9.x
SohamKukreti
committed
a659914

Commits on Aug 1, 2026

fix(docker): preserve single-url crawl failure details
nightcityblade
committed
588de04

Commits on Aug 7, 2026

fix(docker): support PDF scraping by default
nightcityblade
committed
05de127

Commits on Aug 8, 2026

fix(config): make body visibility timeout configurable
nightcityblade
committed
0a78f07

Commits on Aug 11, 2026

fix(docker): preserve failed crawl results
nightcityblade
committed
130a382
Merge pull request #2134 from nightcityblade/fix/issue-2133
ntohidi
authored
ea26abb
test(docker): exercise crawl failures through endpoints
nightcityblade
committed
4fc16ca
fix(config): validate body visibility timeout
nightcityblade
committed
64bf678

Commits on Aug 12, 2026

Merge pull request #2117 from nightcityblade/fix/issue-2116
ntohidi
authored
3cc28d8
test(docker): address PDF review feedback
nightcityblade
committed
10130de
fix: Don't veto PDFCrawlerStrategy placeholder responses (#2135)
SohamKukreti
committed
2e30e54

Commits on Aug 13, 2026

fix: remove unconditional setTimeout waits from overlay/consent removal scripts
SohamKukreti
committed
b536bf5

Commits on Aug 15, 2026

fix(docker): chain egress proxy through upstream HTTP(S)_PROXY
SohamKukreti
committed
890af3d

Commits on Aug 17, 2026

Commits on Aug 18, 2026

fix(docker): cap mcp below 2 to keep the v1 low-level API used by mcp_bridge
weike-zhang
committed
95f2952

Commits on Aug 19, 2026

Commits on Aug 20, 2026

fix(docker): forward CRAWL4AI_API_TOKEN through compose, make .llm.env optional
SohamKukreti
committed
e07ac4f
Merge pull request #2142 from unclecode/fix/egress-proxy-upstream-chaining
ntohidi
authored
59ac8f4
Merge pull request #2094 from unclecode/fix/docker-deploy-0.9-gaps
ntohidi
authored
1c4ac64
fix(docker): align commented env var lines with the environment list

ntohidi
and
claude
committed
fe4d4b4
Merge pull request #2156 from unclecode/fix/compose-comment-indent
ntohidi
authored
7941355
fix(docker): redirect /monitor to the dashboard UI (issue #2091, point 7)

ntohidi
and
claude
committed
ffd9a36
Merge pull request #2157 from unclecode/fix/monitor-dashboard-redirect
ntohidi
authored
5b2e86f
Merge pull request #2150 from unclecode/fix/docker-pdf-crawler-pairing
ntohidi
authored
37ee60a
test(docker): cover the per-URL crawler_configs PDF SSRF guard

ntohidi
and
claude
committed
d57a31c
fix(pdf): carry cookies across manual redirect hops

ntohidi
and
claude
committed
a86fe35
Merge pull request #2159 from unclecode/fix/pdf-redirect-cookie-session
ntohidi
authored
133eff7
Merge pull request #2158 from unclecode/test/per-url-pdf-ssrf-regression
ntohidi
authored
8319275
fix: remove_overlay_elements can remove body if it has a global popup class.
Nalhin
committed
a574fbc
Merge branch 'develop' into main
Nalhin
authored
b3b40d1
fix: changes.
Nalhin
authored
004bc1d

Commits on Aug 24, 2026

Merge pull request #2163 from Nalhin/main
ntohidi
authored
2ca78e3

Commits on Aug 25, 2026

Commits on Aug 31, 2026

fix(security): block PDF image-write fields from untrusted config bodies

ntohidi
and
claude
committed
3273f75
fix(pdf): validate egress destinations and bound resource use in PDF fetch
ntohidi
committed
4772236
fix(pdf): escape paragraph text in cleaned_html to prevent XSS
ntohidi
committed
ceaf6a3
fix(playground): remove innerHTML round-trip to prevent DOM-based XSS
ntohidi
committed
0213355
Merge security fixes for v0.9.3
ntohidi
committed
f3037a3
chore: bump version to 0.9.3
ntohidi
committed
8cef8bd
docs: release notes, changelog, README, and security credits for v0.9.3
ntohidi
committed
4bcd5fa
docs: add the non-security bug fixes to the v0.9.3 release notes
ntohidi
committed
7245f98