Version v2.5.0 adds runtime and WIT/API capabilities and includes correctness and dependency updates. The release also enables wasip3 by default and includes a quinn-proto fix for RUSTSEC-2026-0185.
Action needed (1)
securityhighThe
quinn-protosecurity fixThe
quinn-protodependency fix ships in wasmCloud v2.5.0 and addresses RUSTSEC-2026-0185.
Check if affected (1)
breakingDefault
wasip3enablement withwasmtime46Applies if your workloads use
wasip3.wasmCloud v2.5.0 updates to
wasmtime46 and enableswasip3by default.