RATATOSKRATATOSK
Sign in

wasmCloud

v2.11.0Orchestration & Management
Oct 21, 2026

ACTION 3CHECK 2OTHER 23

A feature and maintenance release with new runtime capabilities, stricter default enforcement, and fixes across `wash-runtime` and related components. It also updates dependencies, including security-related updates to `quinn-proto` and `wasmtime`.

Action needed (3)

  • securityThe quinn-proto update for RUSTSEC-2026-0338..0342

    The quinn-proto dependency is updated to 0.11.19 for RUSTSEC-2026-0338..0342.

    wasmCloud#5668

  • securityThe wasmtime dependency update

    The wasmtime dependency is updated to resolve security advisories.

    wasmCloud#5681

  • breakingRuntime guest memory and socket egress enforcement

    The runtime enforces guest memory and socket egress by default.

    wasmCloud#5646

Check if affected (2)

  • breakingWorkload IDs that match plugin IDs

    Applies if workload IDs match a plugin ID.

    wash-runtime refuses workload IDs that match a plugin ID.

    wasmCloud#5700

  • breakingThe cosmonic wkg namespace default

    Applies if you do not configure the cosmonic wkg namespace.

    wash now defaults the cosmonic wkg namespace to ghcr.io/cosmonic-labs.

    wasmCloud#5662

All 23 other recorded changesvalue changes 10 · fixes 8 · additions 5

value changes (10)

  • * build(deps): Bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5663
  • * build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5687
  • * build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5688
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-gateway by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5699
  • * build(deps): Bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5693
  • * build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5689
  • * perf(wash-runtime): cheaper HTTP routing, workload clones, and unbinds by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5705
  • * fix(deps): bump wasmtime to 48.0.7 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5713
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5691
  • * perf(wash-runtime): share the base WASI linker and route tree nodes by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5707

fixes (8)

  • * fix(wash-runtime): release identity-lowered borrows after a linked call by @Mees-Molenaar in https://github.com/wasmCloud/wasmCloud/pull/5638
  • * fix(wash-runtime): pass nested linked handles across by identity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5639
  • * fix(wash-runtime): lock a host's scratch before the sweep can see it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5680
  • * fix(wash): run on an 8 MiB stack on every platform by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5702
  • * fix(oci): share pull clients, coalesce pulls, and scope caches by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5704
  • * fix(wash-runtime)!: keep name grants unless given a lifetime by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5679
  • * fix: validate connection quotas against semaphore limits by @angyaljanos in https://github.com/wasmCloud/wasmCloud/pull/5661
  • * fix(wash-runtime)!: operator-owned backends and allowedHosts for multiplexed plugins by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5715

additions (5)

  • * feat(wash-runtime): attach native host control to running hosts by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5614
  • * feat(wash-runtime): log remediation for the wit-bindgen <=0.58 async cancel trap by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5671
  • * feat(runtime): support embedded commands and structured async payloads by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5675
  • * feat: allow plugins to override WASI builtin interfaces by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5683
  • * feat(wash-runtime): pool sizing and a max-process-memory limit by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5706
Add wasmCloud to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All wasmCloud releases →