Changelog
What's new in each release.

0.2.0

23 October 2026

We built this website with vagejs and fixed everything that got in our way. Two independent reviews checked the release before it shipped.

New

• Protection against spam injection. Hackers who get into a website usually hide spam links in it. vagejs now keeps a list of the outside websites your pages may link to, in links.lock.json. A link to any other site fails vage check, and so every deploy, until you approve it with vage links approve. Inline styles are removed from page text, so links can't be hidden with CSS, and vage check flags hidden links and common spam words.
• Live-site check. vage verify compares your live website with your files and tells you about links, scripts or pages that aren't in your project. New sites include an optional daily check on GitHub.
• Lists of pages. Layouts can list other pages, such as the posts on a blog index or the latest posts on a home page, with collection(). No more lists kept by hand.
• Safer layouts. The new html helper escapes every value automatically, so a title or description can't break your page or inject code.
• Typo protection. A layout can declare the fields it accepts. A misspelled field then stops the build and names the file, instead of silently doing nothing.
• Steadier images. Images get their width and height from the file, so the page doesn't jump while they load. Images further down the page load only when needed.
• Cloudflare Workers. Cloudflare now hosts new sites as Workers, and vagejs deploys to them without taking your domain offline. It checks that the live site answers before saying the deploy worked.

Improved

• vage check reports a page that fails to build as a normal finding, with the file to fix, and keeps checking the rest of the site.
• vage check warns about frontmatter values that came out empty, and fails on redirects to pages that don't exist.
• New sites start with a blog index, a list of approved links, dependency checks in CI and automatic dependency updates.
• AI coding assistants learn all of this from AGENTS.md and vage info --json.
• The name is written vagejs everywhere.

Not yet

Resizing images and converting them to WebP or AVIF. Width and height are already filled in.

0.1.0

23 October 2026

The first release: Markdown pages, TypeScript layouts, a sitemap, robots.txt and llms.txt on every build, checks for broken links and missing page details, accessibility and size audits, and safe publishing to GitHub Pages and Cloudflare. Read the launch post.