RATATOSKRATATOSK
ログイン

wasmCloud

v2.11.0Orchestration & Management
2026年10月21日

ACTION 3CHECK 2OTHER 23

ランタイム機能の追加と既定の適用ルールの更新に加え、正確性や性能に関する修正が含まれます。依存関係も更新され、セキュリティアドバイザリへの対応が行われています。

要対応 (3)

  • securityquinn-proto を 0.11.19 に更新

    依存関係の quinn-proto を 0.11.19 に更新し、RUSTSEC-2026-0338..0342 に対応します。

    wasmCloud#5668

  • securitywasmtime のセキュリティアドバイザリ対応

    依存関係の wasmtime を更新し、セキュリティアドバイザリに対応します。

    wasmCloud#5681

  • breakingruntime のゲストメモリとソケット送信を既定で強制

    runtime では、ゲストメモリとソケットの外向き通信が既定で強制されます。

    wasmCloud#5646

影響確認 (2)

  • breakingworkload ID と plugin ID の重複を拒否

    workload ID が plugin ID と一致する場合に適用されます。

    wash-runtime は、workload ID が plugin ID と一致する場合、その ID を受け付けません。

    wasmCloud#5700

  • breakingcosmonic wkg 名前空間の既定値を変更

    cosmonic wkg 名前空間を設定していない場合に適用されます。

    wash は、cosmonic wkg 名前空間を設定していない場合の既定値を ghcr.io/cosmonic-labs にします。

    wasmCloud#5662

その他の記録済み変更 23 件すべてvalue changes 10 · fixes 8 · additions 5

value changes (10)

  • * build(deps): Bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5663
  • * build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5687
  • * build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5688
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-gateway by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5699
  • * build(deps): Bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5693
  • * build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5689
  • * perf(wash-runtime): cheaper HTTP routing, workload clones, and unbinds by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5705
  • * fix(deps): bump wasmtime to 48.0.7 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5713
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5691
  • * perf(wash-runtime): share the base WASI linker and route tree nodes by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5707

fixes (8)

  • * fix(wash-runtime): release identity-lowered borrows after a linked call by @Mees-Molenaar in https://github.com/wasmCloud/wasmCloud/pull/5638
  • * fix(wash-runtime): pass nested linked handles across by identity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5639
  • * fix(wash-runtime): lock a host's scratch before the sweep can see it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5680
  • * fix(wash): run on an 8 MiB stack on every platform by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5702
  • * fix(oci): share pull clients, coalesce pulls, and scope caches by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5704
  • * fix(wash-runtime)!: keep name grants unless given a lifetime by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5679
  • * fix: validate connection quotas against semaphore limits by @angyaljanos in https://github.com/wasmCloud/wasmCloud/pull/5661
  • * fix(wash-runtime)!: operator-owned backends and allowedHosts for multiplexed plugins by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5715

additions (5)

  • * feat(wash-runtime): attach native host control to running hosts by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5614
  • * feat(wash-runtime): log remediation for the wit-bindgen <=0.58 async cancel trap by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5671
  • * feat(runtime): support embedded commands and structured async payloads by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5675
  • * feat: allow plugins to override WASI builtin interfaces by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5683
  • * feat(wash-runtime): pool sizing and a max-process-memory limit by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5706
wasmCloudをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。 今回のセキュリティパッチと破壊的変更も、その一例です。

スタックに追加 →
公式リリースノート ↗wasmCloudのリリース一覧 →