unstale

pypi / emails

emails

What changed in emails 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.

2 breaking3 security

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

emails 15 changes

Breaking changes 2

  • Fetching resources from loopback, private, link-local, or other non-public addresses now raises this error, including when rendering untrusted HTML.

    1.1.3release notes

  • TLS certificates are now verified when fetching remote resources; verification defaults to true.

    1.1.3release notes

Security 3

  • CSS @import rules are no longer fetched while styles are inlined.

    1.1.3release notes

  • The URL validator can be customized or disabled for trusted HTML; by default, fetching URLs that resolve to non-public addresses is rejected to mitigate SSRF.

    1.1.3release notes

  • External stylesheets are loaded via fetch_url, so they honor requests_params and the default timeout.

    1.1.3release notes