v0.0.32

What's Changed

• Allow empty AllowedHosts in EgressPolicy for deny-all by @JAORMX in #66
• Update module golang.org/x/crypto to v0.50.0 by @renovate[bot] in #67
• hooks: harden path resolution against symlink components by @JAORMX in #69
• image: harden host-side walks against symlink components by @JAORMX in #70
• egress: tighten DNS answer filtering and TTL clamping by @JAORMX in #71
• net: relay/firewall robustness and hosted service timeouts by @JAORMX in #72
• stale-runner: identity guard; options: symmetric provider wiring by @JAORMX in #73
• extract: private cache dir and per-file integrity manifest by @JAORMX in #74

Full Changelog: v0.0.31...v0.0.32

v0.0.31

What's Changed

• Add override_stat xattr support for virtiofs mounts by @jhrozek in #64
• Update module golang.org/x/sys to v0.43.0 by @renovate[bot] in #65

Full Changelog: v0.0.30...v0.0.31

v0.0.30

What's Changed

• Reduce SSH poll interval to 500ms with immediate probe by @JAORMX in #63

Full Changelog: v0.0.29...v0.0.30

v0.0.29

What's Changed

• Update opentelemetry-go monorepo to v1.43.0 by @renovate[bot] in #61
• Skip recursive home chown when ownership is correct by @JAORMX in #62

Full Changelog: v0.0.28...v0.0.29

v0.0.28

What's Changed

• Add OpenTelemetry tracing spans to VM startup pipeline by @JAORMX in #60

Full Changelog: v0.0.27...v0.0.28

v0.0.27

What's Changed

• Fix empty OCI layer extraction and add context cancellation by @JAORMX in #57
• Add ReadOnly support for VirtioFS mounts by @JAORMX in #55
• Update oras-project/setup-oras action to v2 by @renovate[bot] in #58
• Update module github.com/google/go-containerregistry to v0.21.4 by @renovate[bot] in #59

Full Changelog: v0.0.26...v0.0.27

v0.0.26

What's Changed

• Fix legacy ref files showing as orphans in cache list by @JAORMX in #52

Full Changelog: v0.0.25...v0.0.26

v0.0.25

What's Changed

• Update module github.com/klauspost/compress to v1.18.5 by @renovate[bot] in #50
• Add cache management API: List, GC, Purge by @JAORMX in #51

Full Changelog: v0.0.24...v0.0.25

v0.0.24

What's Changed

• Update module github.com/google/go-containerregistry to v0.21.3 by @renovate[bot] in #48
• Fix SSH agent forwarding goroutine leak via missing half-close by @JAORMX in #49

Full Changelog: v0.0.23...v0.0.24

v0.0.23

What's Changed

• Fix SSH agent forwarding handled in wrong request handler by @JAORMX in #46

Full Changelog: v0.0.22...v0.0.23