Release v0.140.0

13 May 2026

This release includes some features requested by XRForge, a system for hosting XR content which is built atop a custom Manyfold configuration. There’s also a high-priority security bugfix to prevent path traversal attacks when renaming files.

On the feature side, you can now specify the text to be used for links, rather than just showing the domain or the preset text we have for some sites. You can also now specify a main “entrypoint” file for a model (a bit like index.html for web pages) and a starting XRFragment, which is pretty handy when hosting virtual environments!

What’s Changed

✨ New Features ✨

• Add optional anchor text for links by @Floppy in #6109
• XRFragments entrypoint support by @Floppy in #6110

  🔒 Security 🔒

• Sanitize filenames to avoid path traversal and other security issues by @Floppy in #6122

  🐛 Bug Fixes 🐛

• Fix file grouping with subdirectories by @Floppy in #6121

  🌍 Internationalization 🌏

• Translations updated: de by @Floppy in #6107

  🛠️ Other Improvements 🛠️

• OpenAPI definition updated by @Floppy in #6117
• Load/save entrypoint data to/from datapackage by @Floppy in #6116

Full Changelog: v0.139.3…v0.140.0

See the original release on GitHub: v0.140.0