RATATOSKRATATOSK
로그인

wasmCloud

v2.11.0Orchestration & Management
2026년 10월 21일

ACTION 3CHECK 2OTHER 23

런타임 기능과 기본 적용 정책이 바뀌고, 정확성과 성능을 다듬는 수정이 포함된 기능 및 유지 보수 릴리스입니다. 의존성 업데이트와 보안 권고 대응도 함께 반영됩니다.

조치 필요 (3)

  • securityquinn-proto 보안 권고 대응 업데이트

    quinn-proto가 0.11.19로 올라가며 RUSTSEC-2026-0338..0342에 대응합니다.

    wasmCloud#5668

  • securitywasmtime 보안 권고 대응

    wasmtime이 보안 권고를 해결하도록 업데이트됩니다.

    wasmCloud#5681

  • breaking게스트 메모리와 소켓 외부 통신 기본 제한

    런타임이 게스트 메모리 사용과 소켓 외부 통신을 기본적으로 제한합니다.

    wasmCloud#5646

영향 확인 (2)

  • breaking워크로드와 플러그인 ID 중복 거부

    workload ID가 plugin ID와 일치하는 경우 적용됩니다.

    wash-runtime이 workload ID와 plugin ID가 같은 경우 해당 워크로드 ID를 거부합니다.

    wasmCloud#5700

  • breakingcosmonic wkg 네임스페이스 기본값 변경

    cosmonic wkg 네임스페이스를 설정하지 않은 경우 적용됩니다.

    wash가 cosmonic wkg 네임스페이스의 기본값으로 ghcr.io/cosmonic-labs를 사용합니다.

    wasmCloud#5662

그 외 기록된 변경 23건 전체value changes 10 · fixes 8 · additions 5

value changes (10)

  • * build(deps): Bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5663
  • * build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5687
  • * build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5688
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-gateway by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5699
  • * build(deps): Bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5693
  • * build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5689
  • * perf(wash-runtime): cheaper HTTP routing, workload clones, and unbinds by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5705
  • * fix(deps): bump wasmtime to 48.0.7 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5713
  • * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5691
  • * perf(wash-runtime): share the base WASI linker and route tree nodes by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5707

fixes (8)

  • * fix(wash-runtime): release identity-lowered borrows after a linked call by @Mees-Molenaar in https://github.com/wasmCloud/wasmCloud/pull/5638
  • * fix(wash-runtime): pass nested linked handles across by identity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5639
  • * fix(wash-runtime): lock a host's scratch before the sweep can see it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5680
  • * fix(wash): run on an 8 MiB stack on every platform by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5702
  • * fix(oci): share pull clients, coalesce pulls, and scope caches by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5704
  • * fix(wash-runtime)!: keep name grants unless given a lifetime by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5679
  • * fix: validate connection quotas against semaphore limits by @angyaljanos in https://github.com/wasmCloud/wasmCloud/pull/5661
  • * fix(wash-runtime)!: operator-owned backends and allowedHosts for multiplexed plugins by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5715

additions (5)

  • * feat(wash-runtime): attach native host control to running hosts by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5614
  • * feat(wash-runtime): log remediation for the wit-bindgen <=0.58 async cancel trap by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5671
  • * feat(runtime): support embedded commands and structured async payloads by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5675
  • * feat: allow plugins to override WASI builtin interfaces by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5683
  • * feat(wash-runtime): pool sizing and a max-process-memory limit by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5706
wasmCloud 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.

스택에 추가 →