v0.0.36

What's Changed

• Gate guest/boot SSH bring-up behind a nosshd build tag (opt-out) by @JAORMX in #86

Full Changelog: v0.0.35...v0.0.36

v0.0.35

What's Changed

• Add vsock port wiring + WithoutSSH option by @JAORMX in #85
• Update module golang.org/x/crypto to v0.52.0 by @renovate[bot] in #84
• Update module golang.org/x/sys to v0.45.0 - autoclosed by @renovate[bot] in #83

Full Changelog: v0.0.34...v0.0.35

v0.0.34

What's Changed

• Update module github.com/containers/gvisor-tap-vsock to v0.8.9 by @renovate[bot] in #79
• Update module golang.org/x/sys to v0.44.0 by @renovate[bot] in #77
• Update module golang.org/x/crypto to v0.51.0 by @renovate[bot] in #78
• Bump libkrun to v1.18.0 and libkrunfw to v5.4.0 by @JAORMX in #82
• Update dependency macos to v26 by @renovate[bot] in #80
• Update module github.com/google/go-containerregistry to v0.21.6 by @renovate[bot] in #81

Full Changelog: v0.0.33...v0.0.34

v0.0.33

What's Changed

• Update module github.com/google/go-containerregistry to v0.21.5 by @renovate[bot] in #68
• Soften io_uring seccomp action from KillProcess to Errno by @JAORMX in #76
• Update module github.com/klauspost/compress to v1.18.6 by @renovate[bot] in #75

Full Changelog: v0.0.32...v0.0.33

v0.0.32

What's Changed

• Allow empty AllowedHosts in EgressPolicy for deny-all by @JAORMX in #66
• Update module golang.org/x/crypto to v0.50.0 by @renovate[bot] in #67
• hooks: harden path resolution against symlink components by @JAORMX in #69
• image: harden host-side walks against symlink components by @JAORMX in #70
• egress: tighten DNS answer filtering and TTL clamping by @JAORMX in #71
• net: relay/firewall robustness and hosted service timeouts by @JAORMX in #72
• stale-runner: identity guard; options: symmetric provider wiring by @JAORMX in #73
• extract: private cache dir and per-file integrity manifest by @JAORMX in #74

Full Changelog: v0.0.31...v0.0.32

v0.0.31

What's Changed

• Add override_stat xattr support for virtiofs mounts by @jhrozek in #64
• Update module golang.org/x/sys to v0.43.0 by @renovate[bot] in #65

Full Changelog: v0.0.30...v0.0.31

v0.0.30

What's Changed

• Reduce SSH poll interval to 500ms with immediate probe by @JAORMX in #63

Full Changelog: v0.0.29...v0.0.30

v0.0.29

What's Changed

• Update opentelemetry-go monorepo to v1.43.0 by @renovate[bot] in #61
• Skip recursive home chown when ownership is correct by @JAORMX in #62

Full Changelog: v0.0.28...v0.0.29

v0.0.28

What's Changed

• Add OpenTelemetry tracing spans to VM startup pipeline by @JAORMX in #60

Full Changelog: v0.0.27...v0.0.28

v0.0.27

What's Changed

• Fix empty OCI layer extraction and add context cancellation by @JAORMX in #57
• Add ReadOnly support for VirtioFS mounts by @JAORMX in #55
• Update oras-project/setup-oras action to v2 by @renovate[bot] in #58
• Update module github.com/google/go-containerregistry to v0.21.4 by @renovate[bot] in #59

Full Changelog: v0.0.26...v0.0.27