# wasmCloud v2.11.0

> Orchestration & Management · 2026-10-21

A feature and maintenance release with new runtime capabilities, stricter default enforcement, and fixes across `wash-runtime` and related components. It also updates dependencies, including security-related updates to `quinn-proto` and `wasmtime`.

## Action needed
- **[security]** The `quinn-proto` update for `RUSTSEC-2026-0338..0342`
  - The `quinn-proto` dependency is updated to `0.11.19` for `RUSTSEC-2026-0338..0342`.
- **[security]** The `wasmtime` dependency update
  - The `wasmtime` dependency is updated to resolve security advisories.
- **[breaking]** Runtime guest memory and socket egress enforcement
  - The runtime enforces guest memory and socket egress by default.

## Check if affected
- **[breaking]** Workload IDs that match plugin IDs
  - Applies if `workload` IDs match a `plugin` ID.
  - `wash-runtime` refuses workload IDs that match a plugin ID.
- **[breaking]** The cosmonic wkg namespace default
  - Applies if you do not configure the cosmonic wkg namespace.
  - `wash` now defaults the cosmonic wkg namespace to `ghcr.io/cosmonic-labs`.

## Other recorded changes
- 23 (value_changed 10, defect_corrected 8, added 5)

[Full analysis](https://ratatosk.io/en/releases/wasmcloud/v2.11.0)

[Original release notes](https://github.com/wasmCloud/wasmCloud/releases/tag/v2.11.0)