RATATOSKRATATOSK
Sign in

wasmCloud

v2.12.0Orchestration & Management
Nov 4, 2026

ACTION 2CHECK 2OTHER 52

A broad release with changes across NATS, memory management, storage, and runtime behavior. It also updates dependencies and includes security fixes for NATS TLS, PostgreSQL arrays, and S3 reads.

Action needed (2)

  • securityThe zstd-sys dependency update

    The zstd-sys dependency is updated past RUSTSEC-2026-0410, and unreachable zstd advisories are ignored.

    wasmCloud#5753

  • securityDependencies with open advisories

    Dependencies with open advisories are updated in this release.

    wasmCloud#5767

Check if affected (2)

  • securityPre-release wash-runtime security fixes

    Applies if you use NATS TLS, postgres arrays, or S3 reads.

    Pre-release security fixes ship in wash-runtime for NATS TLS, PostgreSQL arrays, and S3 reads.

    wasmCloud#5871

  • breakingThe wash dev egress default

    Applies if you use dev egress.

    The wash dev egress default changes to allow all traffic.

    wasmCloud#5835

All 52 other recorded changesfixes 24 · additions 15 · value changes 12 · constraints 1

fixes (24)

  • * fix(wash-runtime): cap a cgroup memory limit at RAM plus swap by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5710
  • * fix(otel): align HTTP span names by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5579
  • * fix(runtime): reject plugin-served WASI overrides by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5721
  • * fix: reject limits above semaphore capactity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5718
  • * fix(deps): update ctutils to resolve cargo audit failure by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5736
  • * fix(wash-runtime): allow shutdown during stalled NATS secret reads by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5741
  • * fix(wash-runtime): refuse a postgres parameter whose type does not match by @cvas22 in https://github.com/wasmCloud/wasmCloud/pull/5732
  • * fix(wash-runtime): treat deleted objects as absent in the NATS blobstore by @ThomasDravigney in https://github.com/wasmCloud/wasmCloud/pull/5726
  • * fix(sockets): cover UDP contracts and correct datagram handling by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5794
  • * fix(wash-runtime): free stopped workloads with linked async exports, and surface P3 service pre-instantiation errors by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5802
  • * fix(wash-runtime): honor service failures and reclaim linked tasks by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5808
  • * fix(sockets): compile udp_disconnect on Windows by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5809
  • * fix(sockets): handle UDP reconnects and shared receive budgets by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5805
  • * fix(wash): honour WIT source overrides and the default cache by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5811
  • * fix(wasi-otel): count cumulative guest metrics once by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5810
  • * fix(deps): update pulldown-cmark to resolve cargo audit failure by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5830
  • * fix(operator): match owned objects by owner UID and tidy DaemonSet deletes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5817
  • * fix(wash-runtime): reconnect redis keyvalue backends after a server restart by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5827
  • * fix(wash-runtime): preserve KV updates across bucket recreation by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5840
  • * fix(runtime-operator): environment isolation and refused child writes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5717
  • * fix(runtime): preserve command exits during initialization by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5684
  • * fix(wash-runtime): honor blobstore TLS client identities by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5847
  • * fix(wash-runtime): export the component handler span as invoke_component_handler by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5757
  • * fix(sockets): preserve nonblocking UDP progress by @mackaby in https://github.com/wasmCloud/wasmCloud/pull/5772

additions (15)

  • * feat(wash-runtime): support NATS client authentication and connection names by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5733
  • * feat(wash-runtime): allow assigning a host ID before connecting by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5734
  • * feat(operator): configure NATS client authentication and inbox prefixes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5735
  • * feat(wash): configure host NATS authentication per connection by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5742
  • * feat(wash-runtime): expand NATS JetStream and KV APIs by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5751
  • * feat: NATS credential rotation for wasmcloud:nats, JWT-as-token, embedder API and operator liveness by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5755
  • * perf: add growth memory budget by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5799
  • * Add WorkloadDaemonset and update status subresource by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5784
  • * feat(wash-runtime): add an S3 wasi:blobstore backend on object_store by @jtakakura in https://github.com/wasmCloud/wasmCloud/pull/5643
  • * feat: expose wasmtime's hostcall_fuel by @MendyBerger in https://github.com/wasmCloud/wasmCloud/pull/5824
  • * feat(wash-runtime): guard and explain hostcall fuel by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5834
  • * feat(wash-runtime): resolve secret: config references at bind by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5716
  • * feat(wash-runtime): connect a NATS blobstore binding with its own credentials by @ThomasDravigney in https://github.com/wasmCloud/wasmCloud/pull/5828
  • * feat(wash-runtime): let hosts ignore NATS servers a cluster advertises by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5841
  • * feat(wash-runtime): keep a plugin secret typed until its plugin reads it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5833

value changes (12)

  • * build(deps): Bump the all-go group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5728
  • * build(deps): Bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5727
  • * fix(deps): take wasi-gfx 0.3.1 from crates.io, drop the git patch by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5754
  • * perf(wash-runtime): hand p3 response bodies to hyper directly by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5737
  • * perf(wash-runtime): size pool counters past the linear memories by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5745
  • * chore(deps): bump pulldown-cmark to 0.13.5 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5764
  • * chore(deps): bump opentelemetry to 0.32 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5768
  • * perf: finer grained controls for memory pools and sizing by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5763
  • * fix(deps): upgrade Wasmtime to 48.0.8 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5818
  • * perf(wash-runtime): drop component and service linkers once linked by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5800
  • * chore(deps): bump github.com/nats-io/nats.go from 1.54.0 to 1.55.0 in /runtime-operator in the all-go group across 1 directory by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5820
  • * perf: enable reducing memory reservation by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5801

constraints (1)

  • * fix(runtime-operator): make 7 host status fields optional by @steverogersX in https://github.com/wasmCloud/wasmCloud/pull/5554
Add wasmCloud to your stack

A weekly email arrives when a release needs action. Like the security patches and breaking changes in this release.

Add to stack →
Official release note ↗All wasmCloud releases →