wasmCloud
v2.11.0Orchestration & Management2026년 10월 21일
런타임 기능과 기본 적용 정책이 바뀌고, 정확성과 성능을 다듬는 수정이 포함된 기능 및 유지 보수 릴리스입니다. 의존성 업데이트와 보안 권고 대응도 함께 반영됩니다.
조치 필요 (3)
security
quinn-proto보안 권고 대응 업데이트quinn-proto가0.로 올라가며11. 19 RUSTSEC-2026-0338.에 대응합니다.. 0342 security
wasmtime보안 권고 대응wasmtime이 보안 권고를 해결하도록 업데이트됩니다.breaking게스트 메모리와 소켓 외부 통신 기본 제한
런타임이 게스트 메모리 사용과 소켓 외부 통신을 기본적으로 제한합니다.
영향 확인 (2)
breaking워크로드와 플러그인 ID 중복 거부
workloadID가pluginID와 일치하는 경우 적용됩니다.wash-runtime이workloadID와pluginID가 같은 경우 해당 워크로드 ID를 거부합니다.breaking
cosmonic wkg네임스페이스 기본값 변경cosmonic wkg네임스페이스를 설정하지 않은 경우 적용됩니다.wash가cosmonic wkg네임스페이스의 기본값으로ghcr.를 사용합니다.io/cosmonic-labs
그 외 기록된 변경 23건 전체value changes 10 · fixes 8 · additions 5
value changes (10)
- * build(deps): Bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5663
- * build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5687
- * build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5688
- * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-gateway by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5699
- * build(deps): Bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5693
- * build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5689
- * perf(wash-runtime): cheaper HTTP routing, workload clones, and unbinds by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5705
- * fix(deps): bump wasmtime to 48.0.7 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5713
- * build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-operator by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5691
- * perf(wash-runtime): share the base WASI linker and route tree nodes by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5707
fixes (8)
- * fix(wash-runtime): release identity-lowered borrows after a linked call by @Mees-Molenaar in https://github.com/wasmCloud/wasmCloud/pull/5638
- * fix(wash-runtime): pass nested linked handles across by identity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5639
- * fix(wash-runtime): lock a host's scratch before the sweep can see it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5680
- * fix(wash): run on an 8 MiB stack on every platform by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5702
- * fix(oci): share pull clients, coalesce pulls, and scope caches by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5704
- * fix(wash-runtime)!: keep name grants unless given a lifetime by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5679
- * fix: validate connection quotas against semaphore limits by @angyaljanos in https://github.com/wasmCloud/wasmCloud/pull/5661
- * fix(wash-runtime)!: operator-owned backends and allowedHosts for multiplexed plugins by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5715
additions (5)
- * feat(wash-runtime): attach native host control to running hosts by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5614
- * feat(wash-runtime): log remediation for the wit-bindgen <=0.58 async cancel trap by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5671
- * feat(runtime): support embedded commands and structured async payloads by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5675
- * feat: allow plugins to override WASI builtin interfaces by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5683
- * feat(wash-runtime): pool sizing and a max-process-memory limit by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5706
wasmCloud 스택에 추가
조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.