RATATOSKRATATOSK
로그인

wasmCloud

v2.12.0Orchestration & Management
2026년 11월 4일

ACTION 2CHECK 2OTHER 52

NATS, 메모리 관리, 저장소, 런타임 기능이 크게 보강되고 의존성도 갱신된 릴리스입니다. 공개되지 않은 보안 수정 묶음도 포함되어 있습니다.

조치 필요 (2)

  • securityzstd-sys 의존성 갱신

    zstd-sys를 RUSTSEC-2026-0410 이후 버전으로 올리고, 도달할 수 없는 zstd 보안 권고는 무시합니다.

    wasmCloud#5753

  • security보안 권고 대상 의존성 갱신

    공개된 보안 권고가 있는 의존성을 갱신했습니다.

    wasmCloud#5767

영향 확인 (2)

  • securitywash-runtime 보안 수정

    NATS TLS, postgres 배열 또는 S3 읽기를 사용하는 경우에 적용됩니다.

    wash-runtime에 NATS TLS, postgres 배열, S3 읽기와 관련된 출시 전 보안 수정이 반영되었습니다.

    wasmCloud#5871

  • breakingdev egress 기본값 변경

    dev egress를 사용하는 경우에 적용됩니다.

    wash의 dev egress 기본값이 allow-all이 되었습니다.

    wasmCloud#5835

그 외 기록된 변경 52건 전체fixes 24 · additions 15 · value changes 12 · constraints 1

fixes (24)

  • * fix(wash-runtime): cap a cgroup memory limit at RAM plus swap by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5710
  • * fix(otel): align HTTP span names by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5579
  • * fix(runtime): reject plugin-served WASI overrides by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5721
  • * fix: reject limits above semaphore capactity by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5718
  • * fix(deps): update ctutils to resolve cargo audit failure by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5736
  • * fix(wash-runtime): allow shutdown during stalled NATS secret reads by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5741
  • * fix(wash-runtime): refuse a postgres parameter whose type does not match by @cvas22 in https://github.com/wasmCloud/wasmCloud/pull/5732
  • * fix(wash-runtime): treat deleted objects as absent in the NATS blobstore by @ThomasDravigney in https://github.com/wasmCloud/wasmCloud/pull/5726
  • * fix(sockets): cover UDP contracts and correct datagram handling by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5794
  • * fix(wash-runtime): free stopped workloads with linked async exports, and surface P3 service pre-instantiation errors by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5802
  • * fix(wash-runtime): honor service failures and reclaim linked tasks by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5808
  • * fix(sockets): compile udp_disconnect on Windows by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5809
  • * fix(sockets): handle UDP reconnects and shared receive budgets by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5805
  • * fix(wash): honour WIT source overrides and the default cache by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5811
  • * fix(wasi-otel): count cumulative guest metrics once by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5810
  • * fix(deps): update pulldown-cmark to resolve cargo audit failure by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5830
  • * fix(operator): match owned objects by owner UID and tidy DaemonSet deletes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5817
  • * fix(wash-runtime): reconnect redis keyvalue backends after a server restart by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5827
  • * fix(wash-runtime): preserve KV updates across bucket recreation by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5840
  • * fix(runtime-operator): environment isolation and refused child writes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5717
  • * fix(runtime): preserve command exits during initialization by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5684
  • * fix(wash-runtime): honor blobstore TLS client identities by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5847
  • * fix(wash-runtime): export the component handler span as invoke_component_handler by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5757
  • * fix(sockets): preserve nonblocking UDP progress by @mackaby in https://github.com/wasmCloud/wasmCloud/pull/5772

additions (15)

  • * feat(wash-runtime): support NATS client authentication and connection names by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5733
  • * feat(wash-runtime): allow assigning a host ID before connecting by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5734
  • * feat(operator): configure NATS client authentication and inbox prefixes by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5735
  • * feat(wash): configure host NATS authentication per connection by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5742
  • * feat(wash-runtime): expand NATS JetStream and KV APIs by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5751
  • * feat: NATS credential rotation for wasmcloud:nats, JWT-as-token, embedder API and operator liveness by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5755
  • * perf: add growth memory budget by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5799
  • * Add WorkloadDaemonset and update status subresource by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5784
  • * feat(wash-runtime): add an S3 wasi:blobstore backend on object_store by @jtakakura in https://github.com/wasmCloud/wasmCloud/pull/5643
  • * feat: expose wasmtime's hostcall_fuel by @MendyBerger in https://github.com/wasmCloud/wasmCloud/pull/5824
  • * feat(wash-runtime): guard and explain hostcall fuel by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5834
  • * feat(wash-runtime): resolve secret: config references at bind by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5716
  • * feat(wash-runtime): connect a NATS blobstore binding with its own credentials by @ThomasDravigney in https://github.com/wasmCloud/wasmCloud/pull/5828
  • * feat(wash-runtime): let hosts ignore NATS servers a cluster advertises by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5841
  • * feat(wash-runtime): keep a plugin secret typed until its plugin reads it by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5833

value changes (12)

  • * build(deps): Bump the all-go group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5728
  • * build(deps): Bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5727
  • * fix(deps): take wasi-gfx 0.3.1 from crates.io, drop the git patch by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5754
  • * perf(wash-runtime): hand p3 response bodies to hyper directly by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5737
  • * perf(wash-runtime): size pool counters past the linear memories by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5745
  • * chore(deps): bump pulldown-cmark to 0.13.5 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5764
  • * chore(deps): bump opentelemetry to 0.32 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5768
  • * perf: finer grained controls for memory pools and sizing by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5763
  • * fix(deps): upgrade Wasmtime to 48.0.8 by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5818
  • * perf(wash-runtime): drop component and service linkers once linked by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5800
  • * chore(deps): bump github.com/nats-io/nats.go from 1.54.0 to 1.55.0 in /runtime-operator in the all-go group across 1 directory by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5820
  • * perf: enable reducing memory reservation by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5801

constraints (1)

  • * fix(runtime-operator): make 7 host status fields optional by @steverogersX in https://github.com/wasmCloud/wasmCloud/pull/5554
wasmCloud 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.

스택에 추가 →
공식 릴리스 노트 ↗wasmCloud 릴리스 전체 →