HyperFrames v0.9.50

HyperFrames v0.9.50 tightens what a render is allowed to read and reach. The release is mostly security-minded fixes for people running renders on a server or in the cloud.

Lambda renders now reach only public addresses by default, matching the other cloud render paths. If a function needs to reach private addresses, it has to opt out. Render-service media probes also stay on public HTTPS.

On the file side, media playlists are now checked through every playlist they name, and playlists that point to files outside their own folder are refused. Render file servers also refuse env and Git files, and shown-box sampling stays within the render.

The release also makes lint rules scan script, style and comment blocks in linear time, so large files check faster.