This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
Summary
AI summaryUpdates deps, ci, and site-rules across a mixed release.
Full changelog
What's Changed
- Harden safe fetch and HTML fallback defaults by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/63
- chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/64
- chore(deps): bump trufflesecurity/trufflehog from 4d2a8ef686341ee81a283d1d0fbcb97a5017ef35 to 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/65
- chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/66
- chore(deps): bump uuid from 1.23.0 to 1.23.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/67
- chore(deps): bump clap from 4.6.0 to 4.6.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/69
- chore(deps): bump assert_cmd from 2.2.0 to 2.2.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/70
- chore(deps): bump webbrowser from 1.2.0 to 1.2.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/71
- chore(deps): bump wasmtime from 43.0.1 to 44.0.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/68
- Fix cookie export www-domain expansion by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/72
- ci: pin rust toolchain action SHAs by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/82
- chore(deps): bump pdfium-render from 0.9.0 to 0.9.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/81
- chore(deps): bump reqwest from 0.13.2 to 0.13.3 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/80
- chore(deps): bump tokio from 1.51.1 to 1.52.2 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/79
- chore(deps): bump sherpa-onnx from 1.12.35 to 1.13.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/78
- chore(deps): bump wat from 1.246.1 to 1.248.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/77
- chore(deps): bump trufflesecurity/trufflehog from 3fc0c2aa6648d54242e4af6fbfde0701796e4fb0 to 5f47aad1c2df34f7c6230784ce9a5a659922f479 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/76
- Publish pending nab Linear work by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/89
- Fix Substack readability and budgeted fetch output by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/90
- chore(deps): bump sherpa-onnx from 1.13.0 to 1.13.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/88
- chore(deps): bump toml from 1.1.1+spec-1.1.0 to 1.1.2+spec-1.1.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/87
- chore(deps): bump tokio from 1.52.2 to 1.52.3 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/86
- chore(deps): bump zip from 8.4.0 to 8.6.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/85
- chore(deps): bump rustls from 0.23.38 to 0.23.40 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/84
- chore(deps): bump trufflesecurity/trufflehog from 5f47aad1c2df34f7c6230784ce9a5a659922f479 to ba0a524d6e51744d9d4e306bc57ac5d6ca5173ea by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/83
- feat(site-rules): add browser engine routing by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/91
- feat(security): gate WebMCP ingestion by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/92
- docs: capture Browser Run interactive mode spike by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/94
- feat(cli): add opt-in browser rendering by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/95
- chore(deps): bump assert_cmd from 2.2.1 to 2.2.2 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/102
- chore(deps): bump scraper from 0.26.0 to 0.27.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/101
- chore(deps): bump wat from 1.248.0 to 1.249.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/100
- chore(deps): bump sherpa-onnx from 1.13.1 to 1.13.2 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/99
- chore(deps): bump trufflesecurity/trufflehog from ba0a524d6e51744d9d4e306bc57ac5d6ca5173ea to 0fa069c12f0c7baf431041cd1e564a9c5058846c by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/98
- fix(ci): restore nab CI to green (fmt + test relocation) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/104
- feat: auto-merge bot (MIK-4621) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/106
- chore(deps): bump serde_json from 1.0.149 to 1.0.150 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/115
- chore(deps): bump wasmtime from 44.0.1 to 44.0.2 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/114
- chore(deps): bump bumpalo from 3.20.2 to 3.20.3 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/113
- chore(deps): bump cbc from 0.2.0 to 0.2.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/112
- chore(deps): bump wat from 1.249.0 to 1.250.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/111
- chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/110
- chore(deps): bump trufflesecurity/trufflehog from 0fa069c12f0c7baf431041cd1e564a9c5058846c to 0ec3634f6cf66a61912a923fee9d20cc45633a67 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/109
- chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/108
- chore(release): v0.11.0 by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/116
Full Changelog: https://github.com/MikkoParkkola/nab/compare/v0.10.3...v0.11.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About MikkoParkkola/nab
Ultra-fast web fetcher and MCP server with HTTP/3, JS rendering, anti-fingerprinting, browser cookie auth, and 1Password integration. Fetches any URL as clean Markdown for AI context.
Related context
Beta — feedback welcome: [email protected]