wasmCloud
v2.0.7Orchestration & ManagementA maintenance release focused on operator reliability, security hardening, and CI improvements. Key fixes address NATS workload readiness and Kubernetes operator deployment status accuracy.
securityWasmtime bump + cargo audit added — review your own Wasm supply chain
This release bumps wasmtime and drops rustls-pemfile, while adding cargo audit to CI. If you're building custom wasmCloud components or providers in Rust, add cargo audit to your own pipelines now. The removal of rustls-pemfile suggests a dependency consolidation — check if any of your code directly imports it and update accordingly.
breakingOperator WorkloadDeployment readiness semantics changed
The Ready condition on WorkloadDeployment now reflects actual replica availability rather than just the existence of the deployment. Any automation or health checks that relied on Ready=True firing quickly after deployment creation will now correctly wait for replicas to be up. Review any CD pipelines or readiness probes that poll WorkloadDeployment status — they should now behave more accurately, but may appear 'slower' to reach Ready.
enhancementNATS subscription readiness fix reduces false-positive healthy states
Previously, hosts could report as ready before NATS subscriptions were actually established. After this fix, readiness is tied to actual subscription availability. If you're running wasmCloud in Kubernetes and using readiness gates or traffic routing based on host health, upgrade to get accurate readiness signals and avoid routing traffic to hosts that aren't yet fully connected.
Key changes (5)
- Fixed NATS subscription workload readiness checks — hosts now correctly report ready state based on actual NATS sub availability
- Kubernetes operator WorkloadDeployment Ready status now gates on actual replica availability, not just deployment creation
- Bumped wasmtime, dropped rustls-pemfile, and added cargo audit to the build pipeline for supply chain security
- HTTP router now returns typed RouteError with accurate HTTP status codes instead of generic errors
- Upgraded async-nats to 0.47 and Go to 1.26 across the codebase