This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Light signalReleasePort v3.3.8 introduces a string safety framework and the Slang template engine with compile‑time checks, while adding vendored WebFinger and HostMeta clients.
Why it matters: Evaluate the new string safety framework and Slang template engine in development; no immediate patching required.
Summary
AI summaryAdded a string safety framework, Slang template engine with compile‑time checks, and vendored WebFinger/HostMeta clients.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds string safety framework with typed safe strings Adds string safety framework with typed safe strings Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Adds new Slang template engine with compile-time safety checks Adds new Slang template engine with compile-time safety checks Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Vendors WebFinger and HostMeta clients Vendors WebFinger and HostMeta clients Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Prevents delivery to unknown IRIs Prevents delivery to unknown IRIs Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Narrows Like/Dislike addressing to liked object author Narrows Like/Dislike addressing to liked object author Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Added
- String safety framework with typed "safe" strings.
- New Slang template engine with compile-time safety checks.
- Vendored
WebFingerandHostMetaclients.
Fixed
- Prevent delivery to unknown IRIs.
- Narrow Like/Dislike addressing to the liked object's author.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ktistec
ActivityPub (https://www.w3.org/TR/activitypub/) server for individual users and small groups.
Beta — feedback welcome: [email protected]