Release v0.133.1

26 February 2026

A quick bugfix release for some UI and CORS issues, and a moderate level security fix.

What’s Changed

🔒 Security 🔒

• Prevent unauthorized conversions by @Floppy in #5602

  🐛 Bug Fixes 🐛

• Delay mouse capture until renderer starts, and only grab required events by @Floppy in #5581
• Limit names to a reasonable length by @Floppy in #5582
• Widen Access-Control-Allow-Origin headers for file content by @Floppy in #5603

Full Changelog: v0.133.0…v0.133.1

See the original release on GitHub: v0.133.1