AI-analyzed release notes for CNCF graduated and incubating projects.
wasmCloud v2.7.0 adds runtime, networking, plugin, TLS, and chart capabilities while correcting runtime and Helm/chart defects. It also changes defaults and updates dependencies.
Action needed (1)
breakingDefault-enabled implements and maps
implements and maps are enabled by default in wasmCloud v2.7.0.
Release v2.6.1 renames two operator-facing identifiers. Existing references may need updating to match the new names.
Source ↗A feature and maintenance release that adds runtime, plugin, service, component, and pooling capabilities while changing the default NATS behavior. It also includes dependency updates and fixes for runtime and observability defects.
Action needed (1)
breakingThe NATS consumer-group default
NATS now uses consumer groups by default in the release.
wasmCloud v2.5.2 adds asynchronous PostgreSQL support and WIT and wkg configuration resolution. It also improves HTTP recognition and default capability backend handling, while including dependency and internal tooling updates.
Source ↗This release adds the endpointslices/restricted virtual resource to RBAC. No further operator-facing details are specified.
Version v2.5.0 adds runtime and WIT/API capabilities and includes correctness and dependency updates. The release also enables wasip3 by default and includes a quinn-proto fix for RUSTSEC-2026-0185.
Action needed (1)
securityhighThe quinn-proto security fix
The quinn-proto dependency fix ships in wasmCloud v2.5.0 and addresses RUSTSEC-2026-0185.
Check if affected (1)
breakingDefault wasip3 enablement with wasmtime 46
Applies if your workloads use wasip3.
wasmCloud v2.5.0 updates to wasmtime 46 and enables wasip3 by default.
wasmCloud v2.4.0 adds operator capabilities and configuration options while correcting runtime and tooling behavior. It also changes supported platform behavior and updates dependencies associated with Rust security advisories, so platform-specific users and deployments using the affected crates are most directly concerned.
Action needed (1)
securityThe postgres crates, updated for Rust security advisories
The postgres crates are updated for RUSTSEC-2026-0178, RUSTSEC-2026-1079, and RUSTSEC-2026-0180. This dependency update ships in wasmCloud v2.4.0.
Check if affected (1)
breakingwebgpu disabled for s390
Applicability is not stated in the release notes.
webgpu is disabled for s390 in wasmCloud v2.4.0.
Version v2.3.0 adds workload configuration and telemetry capabilities while correcting wash and runtime defects. It also changes RBAC scope support and updates dependencies, including security patches and reported advisory fixes.
Action needed (2)
securityThe wasmtime 44.0.2 security patch
The release updates wasmtime to 44.0.2 as a security patch.
securityReported dependency security advisories
The dependency set includes patches for reported security advisories.
This release corrects the runtime operator's generated and Helm RBAC permissions. The fixes cover finalizer updates needed for garbage collection and permissions for resources used by reconcilers; no security advisory or security flaw is disclosed.
Source ↗wasmCloud v2.2.0 adds runtime, CLI, routing, API, and interface-publishing capabilities and corrects handling for musl-on-glibc systems. The release notes provided here disclose no security changes or operator actions.
Source ↗A maintenance release with correctness fixes, dependency updates, and new deployment and plugin capabilities. It also removes the obsolete canary-v2 identifier.
Check if affected (1)
breakingThe canary-v2 canary identifier, removed
Applies if you configure canary-v2.
The canary-v2 canary identifier is removed now that canary exists.
A maintenance release with corrected HTTP and workload behavior, dependency updates, and toolchain maintenance. It also removes canary-v2 in favor of canary.
Check if affected (1)
breakingThe canary-v2 configuration, removed in favor of canary
Applies if you configure canary-v2.
This release removes the canary-v2 configuration now that canary exists.
A maintenance release with correctness fixes for HTTP errors, NATS subscription readiness, and WorkloadDeployment readiness, plus dependency and toolchain updates. It removes canary-v2 now that canary exists and includes dependency cleanup.
Action needed (1)
breakingThe canary-v2 option, removed
canary-v2 is removed now that canary exists. The removal ships in this release.
This release adds the Val map type, Linux glibc GPU builds, and updates to wasmtime and its rustls dependency. It also corrects pooling allocator probing and includes a security update for rustls-webpki.
Action needed (1)
securityrustls-webpki security update, RUSTSEC-2026-0049
The release includes a security update for rustls-webpki, addressing RUSTSEC-2026-0049.
wasmCloud v2.0.4 contains operator-facing changes in Helm configuration and TLS handling. The release material also covers WASI support, CLI certificate options, and updates to TLS dependencies.
Source ↗This release adds Kubernetes-native service routing and related CRD fields, changes Helm behavior, fixes a NATS subscriber initialization race, and retires the runtime-gateway path. Operators using the deprecated gateway configuration need to account for the routing change and removed chart behavior.
Action needed (1)
breakingThe default chart tag is removed
The default tag is removed, so the chart uses chart.'s appVersion.
Check if affected (1)
breakingNative Kubernetes Service routing replaces runtime-gateway
Applies if you use runtime-gateway.
This release replaces runtime-gateway with native Kubernetes Service routing for wasmCloud workloads.
Plan ahead (1)
deprecatedThe Helm gateway section is deprecated
Applies if you configure gateway.
The Helm gateway section is deprecated, and routing is now handled through EndpointSlices.
This release adds a Host pod reconciler and winget packaging, upgrades the wasmtime dependency, and changes install-script behavior. The install-script changes apply to both scripts and include fixes for the stable v2 release.
Source ↗This release contains no operator-facing changes. Its recorded scope is limited to project module maintenance and regenerated protobuf code.
Source ↗wasmCloud v2.0.0 adds operator-facing capabilities, changes CRD locations, updates dependencies, and fixes runtime and CLI behavior. The dependency update addresses the disclosed advisory RUSTSEC-2026-0007.
Action needed (2)
securitymediumLock file update for RUSTSEC-2026-0007
wasmCloud v2.0.0 updates the lock file to address RUSTSEC-2026-0007.
breakingCRD location moved from templates/crds to /crds
wasmCloud v2.0.0 moves CRDs from templates/crds to /crds.
This release contains no described operator-facing changes. The available release note content consists only of headings and a duplicated release-bot entry.
Source ↗This release changes NATS connection authentication and the component spec feature. Dependency and OCI image base updates are also included.
Action needed (1)
breakingThe component spec feature, removed
The component spec feature is removed in this release.
