wash: vanhemmat versiot ja versiohistoria

What's Changed
- fix(wash-runtime): release per-workload state that outlived unbind by @ricochet in #5634
- build(deps): Bump the all-go group across 2 directories with 10 updates by @dependabot[bot] in #5635
- fix(runtime-operator): stop orphaning workloads around failed stops and departing hosts by @ricochet in #5632
- fix(runtime-operator): wait for the error in TestServerErrorStream by @ricochet in #5636
- ci: bump pinned CI tool versions by @github-actions[bot] in #5570
- release: v2.10.3 by @automation-wasmcloud in #5637
Full Changelog: v2.10.2...v2.10.3

What's Changed
- fix: trust native roots for OCI registries by @Aseel012 in #5609
- build(deps): Bump the all-github-actions group across 2 directories with 10 updates by @dependabot[bot] in #5616
- fix(bench): bump runner and gungraun, auto-install matching gungraun-runner by @jfleitz in #5620
- fix(deps): update Wasmtime, Hyper, and wasm-tools crates by @ricochet in #5627
- fix(gateway): stop trusting client X-Forwarded-For for X-Real-IP by @immanuwell in #5557
- fix(wash-runtime): log replayed workload starts below WARN by @vados-cosmonic in #5628
- Added URL secrets redaction fix #5470 by @ndaprela in #5471
- fix(bench): bound HTTP invocation requests by @ricochet in #5629
- fix(wash-runtime): forget a workload's multiplexed default backend at unbind by @Yash121l in #5617
- fix(wash-runtime): keep a locally routed request body open until drained by @jfleitz in #5622
- fix(runtime-operator): stop a workload deleted while its start is in flight by @ricochet in #5631
- release: v2.10.2 by @automation-wasmcloud in #5633
New Contributors
- @Aseel012 made their first contribution in #5609
- @ndaprela made their first contribution in #5471
Full Changelog: v2.10.1...v2.10.2

What's Changed
- fix: honor canonical versions for hostInterfaces by @ricochet in #5610
- release: v2.10.1 by @automation-wasmcloud in #5613
Full Changelog: v2.10.0...v2.10.1

What's Changed
- fix(wash-runtime): Add validation and activation for OTEL_ prefixed v… by @nitame in #5520
- fix(wash): correct --max-concurrent-starts help on parallel compilation by @immanuwell in #5553
- test(runtime-operator): canary e2e flags by @ricochet in #5547
- fix(wash-runtime): release a host's ingress when the host is dropped by @ricochet in #5548
- fix(runtime): let a host turn off native unwind info by @ricochet in #5555
- feat(wash-runtime): conform OTel init to env spec by @ricochet in #5556
- fix(wash-runtime): build a store without a live HTTP handler by @ricochet in #5558
- fix(wash-runtime): stop the host when a command task panics by @ricochet in #5559
- feat(wash-runtime): add cancellable dispatch handles by @ricochet in #5565
- [feat] expand plugin BindingSchema by @ricochet in #5561
- docs(wit): distinguish wire ops from local accessors in nats header by @Yash121l in #5574
- Component local routing / same-host support by @jfleitz in #5399
- fix(wash-runtime): use uuidv7 instead of uuidv4 by @shreya-d2604 in #5576
- test(runtime-operator): add autoscaling e2e test by @vados-cosmonic in #5575
- build(deps): Bump the all-github-actions group across 2 directories with 7 updates by @dependabot[bot] in #5563
- fix(wash): wash runtime nats wit version by @vados-cosmonic in #5581
- ci: validate wash in the merge queue by @vados-cosmonic in #5578
- ci: harden flaky main checks by @vados-cosmonic in #5583
- feat(wash): enforce host plugin egress policy by @ricochet in #5577
- Fix/messaging admission group by @steverogersX in #5584
- feat(wash-runtime): upgrade to Wasmtime 48 by @ricochet in #5585
- (feat): stream KV entries with values via bucket.select by @jfleitz in #5572
- chore : Remove stale Helm plugin declaration by @rabelmervin in #5587
- build(deps): Bump the all-github-actions group across 2 directories with 7 updates by @dependabot[bot] in #5590
- build(deps): Bump the all-go group across 2 directories with 6 updates by @dependabot[bot] in #5589
- feat(wash-runtime): client identity for outbound HTTPS, per host or per workload by @ricochet in #5588
- fix(wash): retry transient WIT registry fetches by @addu2612 in #5568
- chore: upgrade Go to 1.27.1 by @ricochet in #5598
- Publish all-features wash image on release by @jfleitz in #5599
- fix(runtime-operator): resolve golangci-lint v2.13 findings by @ricochet in #5600
- feat(wash-runtime): rotate the outbound client identity without a restart by @ricochet in #5595
- fix(wash): clean WIT cache streams on Windows by @ricochet in #5602
- fix(wash-runtime): route (implements ..) named imports between guest components by @ericgregory in #5593
- release: v2.10.0 by @automation-wasmcloud in #5603
New Contributors
- @Yash121l made their first contribution in #5574
- @steverogersX made their first contribution in #5584
- @addu2612 made their first contribution in #5568
Full Changelog: v2.9.0...v2.10.0

What's Changed
- speed up CI by @ricochet in #5499
- fix(runtime-operator): stop deleting hosts on bus loss by @ricochet in #5502
- fix(wash-runtime): compile workloads off the async runtime by @ricochet in #5503
- fix(test): postgres test flake by @ricochet in #5505
- feat/host memory embedder api by @ricochet in #5506
- chore(deps): bump the all-github-actions group across 2 directories with 7 updates by @dependabot[bot] in #5510
- chore(deps): bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in #5509
- Native NATS Host Plugin by @jfleitz in #5494
- Enforce max-guest-memory by @ricochet in #5511
- feat(wash-runtime): reclaim warm instances when a component goes idle by @ricochet in #5507
- Run NATS core and KV NATS deliveries on the instance pool by @ricochet in #5513
- fix(wash-runtime): repair the build on main by @ricochet in #5514
- [FEAT] support concurrency for async wasmcloud:messaging by @ricochet in #5515
- fix(test): guard the wit tests' cwd with an async mutex by @ricochet in #5516
- Fix guest-execution metering by @ricochet in #5518
- (FEAT) Generic host plugin bindings by @jfleitz in #5517
- fix(wash): alias deprecated --enable-meters by @ricochet in #5519
- feat: maxConcurrentStarts config by @ricochet in #5522
- fix(chart,runtime): shutdown draining by @ricochet in #5524
- One attribute scheme for guest metrics by @ricochet in #5525
- fix(wash-runtime): deliver wasi:config to every component of a workload by @ricochet in #5526
- fix(wash-runtime): wasmtime feature declaration by @ricochet in #5527
- fix ingress descriptor exhaustion by @ricochet in #5529
- feat(wash-runtime): liveness and readiness on own probes port by @ricochet in #5530
- instance pool refactor by @ricochet in #5532
- fix(wash-runtime): cache components by digest by @ricochet in #5533
- fix: give an embedded host the meters its type promises by @ricochet in #5534
- Add bindings support for host component plugins by @jfleitz in #5535
- fix(wash-runtime): build and test with --no-default-features by @ricochet in #5537
- fix(wash-dev): enable host loopback so allowedHostLoopbackPorts works by @shreya-d2604 in #5541
- Thundering herd test suite by @ricochet in #5536
- ci: bump pinned CI tool versions by @github-actions[bot] in #5543
- build(deps): Bump the all-github-actions group across 2 directories with 6 updates by @dependabot[bot] in #5540
- build(deps): Bump the all-go group across 2 directories with 5 updates by @dependabot[bot] in #5539
- fix(wash-runtime): act on a stopped ingress and a lost control plane by @ricochet in #5542
- feat: plugin dispatch target by @ricochet in #5545
- release: v2.9.0 by @automation-wasmcloud in #5546
Full Changelog: v2.8.0...v2.9.0

What's Changed
- feat(messaging): async wasmcloud:messaging@0.3.0 by @Aditya1404Sal in #5413
- docs(examples): update oci-registry prerequisites for wasmCloud 2.7.0 by @ericgregory in #5457
- wasmCloud:messaging inflight limit by @jfleitz in #5458
- Fix/async messaging follow-ups by @ricochet in #5460
- chore(deps): bump the all-github-actions group across 2 directories with 12 updates by @dependabot[bot] in #5465
- chore(deps): bump the all-go group across 1 directory with 2 updates by @dependabot[bot] in #5464
- fix(test): bump stream test to 6MB by @ricochet in #5472
- ci(examples): publish http-hello-world-persistent-storage by @ricochet in #5476
- fix/embedder oci and socket defaults by @ricochet in #5478
- fix(runtime): stop warning on anonymous pulls without a docker config by @ricochet in #5479
- ci: setup-rust with nightly component fallback by @ricochet in #5473
- fix(wash-runtime): move proto codegen to xtask so cargo package passes by @jtakakura in #5446
- fix(deps): bump h2 to 0.4.17 for RUSTSEC-2026-0258 by @ricochet in #5481
- chore: drop what build.rs left behind by @jtakakura in #5489
- chore(deps): bump the all-github-actions group across 2 directories with 6 updates by @dependabot[bot] in #5486
- fix(wash-runtime): don't panic or poison the instance pool under concurrent load by @LiamRandall in #5488
- feat(wash-runtime): timeout hardening for guest code that spins CPU forever by @Aditya1404Sal in #5451
- (bugfix) rollback partially-bound plugins by @jfleitz in #5492
- chore(deps): bump the all-go group across 2 directories with 4 updates by @dependabot[bot] in #5485
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5484
- Add Host core and memory knobs by @jfleitz in #5483
- Fix/abandoned call deregistration by @ricochet in #5495
- style: fix two lints on main by @ricochet in #5497
- fix(wash-runtime): make filesystem keyvalue writes atomic and serialize counter updates by @LiamRandall in #5447
- fix(wash): wash wit ergonomics and error handling by @ricochet in #5496
- release: v2.8.0 by @automation-wasmcloud in #5500
Full Changelog: v2.7.0...v2.8.0

## What's Changed
• chore(deps)：bump wkg, wasmtime, wasm-tools, and wit-bindgen by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5412
• chore：rustsec bumps for wasmtime, event-listener by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5415
• host component plugins with native bindings by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5411
• fix(chart)：add Reloader annotations, fix hashing by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5418
• fix(helm)：update workload crds, add check by @vados-cosmonic in https://github.com/wasmCloud/wasmCloud/pull/5423
• docs(examples)：update oci-registry README for required Basic auth by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5426
• fix(runtime-operator)：describe CRD kinds accurately by @ericgregory in https://github.com/wasmCloud/wasmCloud/pull/5427
• feat(wash-runtime)：configurable CA trust roots for outbound HTTPS by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5422
• chore(deps)：bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5416
• chore(deps)：bump the all-github-actions group across 4 directories with 10 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5417
• ci：bump pinned CI tool versions by @github-actions[bot] in https://github.com/wasmCloud/wasmCloud/pull/5425
• fix(ci)：add checkout step by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5428
• fix(runtime-gateway)：key routes by object key by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5429
• feat：concurrent pooled instances by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5398
• fix(bench)：harden compare-bench checkouts, accept #PR as a bench ref by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5431
• Outbound connection pooling for http requests by @jfleitz in https://github.com/wasmCloud/wasmCloud/pull/5424
• fix(wash-runtime)：size the egress idle cap from declared concurrency by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5432
• chore(examples)：release oci-registry 0.2.0 for the Basic auth change by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5434
• test(runtime-operator)：cover a component's instance limits end to end by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5433
• feat：enable implements and maps by default by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5435
• fix(wash-runtime)：bind guest UDP sockets on loopback only by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5438
• chore(deps)：bump the all-github-actions group across 4 directories with 6 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5444
• chore(deps)：bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/wasmCloud/wasmCloud/pull/5443
• feat(wash)：trust private OCI CA roots, and put the e2e registry behind TLS by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5437
• docs：document the wasm-component-ld prerequisite for building fixtures by @jtakakura in https://github.com/wasmCloud/wasmCloud/pull/5445
• feat(runtime)：host component call a workload's exports by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5442
• feat(wash-runtime)：one connection quota and one socket policy per guest by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5439
• feat(wash-runtime)：avoid trapping the plugin by @ricochet in https://github.com/wasmCloud/wasmCloud/pull/5452
• release：v2.7.0 by @automation-wasmcloud in https://github.com/wasmCloud/wasmCloud/pull/5454

## New Contributors
• @jtakakura made their first contribution in https://github.com/wasmCloud/wasmCloud/pull/5445

**Full Changelog**：https://github.com/wasmCloud/wasmCloud/compare/v2.6.1...v2.7.0

What's Changed
- refactor(wash-runtime): rename HttpServer to Ingress by @ricochet in #5407
- fix(operator): rename AllowIPNameLookup to AllowedIPNameLookups by @ricochet in #5408
- release: v2.6.1 by @automation-wasmcloud in #5409
Full Changelog: v2.6.0...v2.6.1

What's Changed
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.4.0 to 2.5.1 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5327
- chore(deps): bump the all-github-actions group across 5 directories with 13 updates by @dependabot[bot] in #5328
- fix(wash-runtime): version-tolerant matching for messaging by @ricochet in #5330
- chore: wasm-tools 0.253.0 by @ricochet in #5331
- fix(runtime): add missing wasi:http/types,handler@0.3.0 to fn wit_world by @bharattech in #5337
- release: v2.5.3 by @automation-wasmcloud in #5340
- ci(wash): ship default features; run operator-e2e against default and all-features by @ricochet in #5339
- feat(wash-runtime): trigger service by @ricochet in #5332
- fix(templates,examples): declare allowedHosts for outbound HTTP demos by @ericgregory in #5342
- feat(wash-runtime): messaging ingress for trigger services by @ricochet in #5333
- feat(wash-runtime): cross-store streams and futures by @ricochet in #5334
- feat(wash): build P3 components with wash build by @ricochet in #5349
- Update to wasi:webgpu 0.3.0-rc.2 by @MendyBerger in #5316
- test(fixtures): resolve WIT via local wkg.toml refs, build via wash build by @ricochet in #5350
- benches ci fixes by @ricochet in #5355
- ci(codeowners): own /xtask/ by ci&wash maintainers by @ricochet in #5356
- feat(wash-runtime): route inbound messages to long-lived trigger services by @ricochet in #5336
- Fix/bench host drift and ref labeling by @ricochet in #5359
- fix(wash-runtime): create span from components parent_span_id in on_end by @jamesstocktonj1 in #5354
- chore(deps): bump the all-github-actions group across 2 directories with 7 updates by @dependabot[bot] in #5361
- fix(wash-runtime): disable Nagle on accepted HTTP connections by @ricochet in #5363
- Expose interfaces to service in dev by @george-lim in #5358
- test(runtime-operator): serve e2e fixtures component oci-registry by @ricochet in #5357
- ci(wit): move pinned tool versions out of wit.yml by @ricochet in #5364
- fix(bench): compare-bench refs against origin and support PR refs by @ricochet in #5366
- feat(wash-runtime): host component plugins by @ricochet in #5335
- fix(ci): update protoc setup by @ricochet in #5370
- fix(wash-runtime): build stores under a read lock without cloning the linker by @ricochet in #5372
- ci(wash): run e2e on arm64 by @ricochet in #5375
- fix(bench-tools): match gungraun's per-thread callgrind filenames by @ricochet in #5376
- chore(wash-runtime): upgrade to wasmtime 47 by @ricochet in #5373
- Bump protoc and wasm-tools by @ricochet in #5371
- fix(wash): skip unused service file by @ricochet in #5368
- fix(blobstore): report created-at for fs blobstore by @ricochet in #5367
- Fix dropping span links and trace state in wasi-otel by @ricochet in #5365
- fix(wash-runtime): honor WASH_PLUGIN_STOP_TIMEOUT_SECS in Host::stop by @ericgregory in #5377
- chore(deps): update async-nats to v0.49.1 by @vados-cosmonic in #5378
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.5.1 to 2.5.2 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5360
- fix(wash-runtime): reject duplicate workload IDs by @vados-cosmonic in #5379
- test(washlet): add test for washlet API by @ricochet in #5380
- fix(wash-runtime): round-robin across service replicas per host by @ricochet in #5374
- P3 host plugin loader by @ricochet in #5348
- fix: use consumer groups by default for NATS by @vados-cosmonic in #5382
- feat(wash-runtime): add service HTTP benchmarks by @ricochet in #5383
- Use first export wasi:http component in manifest by @jfleitz in #5387
- chore(deps): bump the all-github-actions group across 4 directories with 10 updates by @dependabot[bot] in #5390
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5388
- chore(deps): bump the all-go group across 1 directory with 2 updates by @dependabot[bot] in #5389
- feat(runtime): warm-instance p

What's Changed
- Add implements to canary builds. by @jfleitz in #5305
- chore: move back to wash from wkg by @ricochet in #5310
- fix: default backends for wasmcloud:{keyvalue,blobstore} by @ricochet in #5309
- ci(release): chart and app in lockstep by @ricochet in #5307
- chore(codeowners): only req example maintainers for new example by @ricochet in #5313
- chore(deps): bump the all-github-actions group across 4 directories with 8 updates by @dependabot[bot] in #5319
- chore(deps): bump the all-go group across 1 directory with 4 updates by @dependabot[bot] in #5318
- chore: bump for cargo-audit by @ricochet in #5321
- feat: wasmcloud:postgres async by @ricochet in #5315
- oci reg example by @ricochet in #5311
- feat(washlet): add ClusterHost::start that passes back API control by @vados-cosmonic in #5323
- feat(wash): resolve WIT and wkg config by @ricochet in #5324
- fix(wash-runtime): recognize P3 wasi:http/handler as host-served HTTP by @ricochet in #5325
- release: v2.5.2 by @automation-wasmcloud in #5326
Full Changelog: v2.5.1...v2.5.2

What's Changed
- test(runtime-operator): cover host controller reconcile paths by @ricochet in #5300
- Add endpointslices/restricted virtual resource to RBAC by @jfleitz in #5302
- async backends by @ricochet in #5297
- chore: wasm-pkg-client by @ricochet in #5304
- release: v2.5.1 by @automation-wasmcloud in #5306
- release: v2.5.1 by @automation-wasmcloud in #5308
Full Changelog: v2.5.0...v2.5.1

What's Changed
- ci: set CARGO_NET_RETRY by @ricochet in #5265
- fix(wit): accept package-level refs in validate_interface_ref, fix remove with version by @immanuwell in #5247
- fix(wash-runtime): stream P3 HTTP responses and release timed-out gRPC bodies by @ricochet in #5264
- chore(deps): bump the all-github-actions group across 3 directories with 2 updates by @dependabot[bot] in #5274
- feat(wash-runtime): make engine config composable via WasmProposal by @Aditya1404Sal in #5254
- chore(deps): bump the all-go group across 2 directories with 4 updates by @dependabot[bot] in #5273
- feat(examples): add http-hello-world-persistent-storage by @ericgregory in #5272
- fix: rust-sec-2026-0185 quinn-proto by @ricochet in #5277
- chore(templates): drop redundant wasi:http export from http-hello-world world.wit by @ericgregory in #5278
- feat: update to wasmtime 46 and enable wasip3 by default by @ricochet in #5258
- fix: ignore trailing slashes when deriving wash new project names by @immanuwell in #5269
- ci: run jobs when their workflow file is modified by @ricochet in #5281
- surface wasm proposals to cli and chart by @ricochet in #5276
- Operator caching->server side apply fix by @jfleitz in #5282
- ci: add s390x binary by @ricochet in #5283
- fix(docs): update readme for wasmCloud v2 by @ericgregory in #5288
- feat(wit): add async wasmcloud:keyvalue and wasmcloud:blobstore by @ricochet in #5286
- feat(wash-runtime): multiplex wasi:keyvalue via (implements ..) imports by @ricochet in #5279
- implements e2e operator by @ricochet in #5285
- feat(charts): lint and harden the runtime-operator chart by @ricochet in #5287
- fix(wash): support Windows-style paths in wash new names by @immanuwell in #5290
- ci(wit): publish to namespaced OCI path so packages resolve by @ricochet in #5292
- feat(wash-runtime): multiplex wasmcloud:postgres via (implements ..) imports by @ricochet in #5291
- feat(wash-runtime): multiplex wasmcloud:messaging/consumer by @ricochet in #5289
- chore(deps): bump the all-go group across 2 directories with 5 updates by @dependabot[bot] in #5293
- chore(deps): bump the all-github-actions group across 2 directories with 3 updates by @dependabot[bot] in #5294
- feat(wit)!: share keyvalue bucket via a types interface by @ricochet in #5296
- fix: support multiline world declarations in wash wit add by @immanuwell in #5295
- feat(runtime): support wasip3 cross-component streams via dynamic linker by @Aditya1404Sal in #5171
- Only update LastSeen if no change to metadata by @jfleitz in #5298
- fix(runtime): wrap ephemeral tasks to AbortOnDrop by @ricochet in #5299
- release: v2.5.0 by @automation-wasmcloud in #5301
Full Changelog: v2.4.0...v2.5.0

What's Changed
- ci(bench): wait for host load to settle by @ricochet in #5234
- Have container health use NATs connectivity status by @jfleitz in #5235
- runtime-operator chart: optional hostGroups passthrough fields by @CharlesV1234 in #5219
- docs: fix stale wash project structure in contributing guide by @immanuwell in #5218
- chore(deps): bump the all-github-actions group across 2 directories with 3 updates by @dependabot[bot] in #5240
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5238
- fix(wash): scope new.command to template config by @immanuwell in #5241
- feat: build wash for s390x-unknown-linux-gnu by @LiamRandall in #5236
- fix(dev): deliver workload values to every dev component by @ricochet in #5242
- multiple subscription workloads by @ricochet in #5243
- Add Autoscaling support for WorkloadDeployments by @jfleitz in #5244
- chore(deps): update postgres crates for RUSTSEC-2026-0178/1079/0180 by @jfleitz in #5250
- Allow for extra args and nats url to be set by @jfleitz in #5246
- chore(deps): bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in #5251
- chore(deps): bump the all-github-actions group across 2 directories with 4 updates by @dependabot[bot] in #5253
- fix: create bucket on open by @Mees-Molenaar in #5229
- refactor(wash-runtime): improve host plugin API ergonomics by @if0ne in #5237
- chore: bump wasmtime to 45.0.2 by @Aditya1404Sal in #5256
- release: v2.4.0 by @automation-wasmcloud in #5255
- disable webgpu for s390 by @jfleitz in #5260
- Add s390 check in all webgpu locations by @jfleitz in #5262
- release main by @ricochet in #5261
- ci: remove s390 by @ricochet in #5263
New Contributors
- @Mees-Molenaar made their first contribution in #5229
Full Changelog: v2.3.0...v2.4.0

What's Changed
- feat(wash): workload env/config/secrets by @ricochet in #5117
- bench infra by @ricochet in #5153
- feat(wash-runtime): namespace host plugin spans by WIT package by @ricochet in #5188
- ci: unblock off-cycle dispatch and de-flake gates by @ricochet in #5192
- ci(release-tag): pin previous_tag_name when generating release notes by @ricochet in #5191
- ci(runtime-operator): guard RBAC drift by @ricochet in #5187
- chore: wasmtime 44.0.2 security patch by @ricochet in #5195
- ci: reclaim space by @ricochet in #5196
- fix(wash): git detect_source_type by @ricochet in #5197
- chore(deps): bump zizmorcore/zizmor-action from 0.5.4 to 0.5.5 in the all-github-actions group across 1 directory by @dependabot[bot] in #5199
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5198
- feat(examples/otel-config): demo workload env/config/secrets by @ricochet in #5127
- chore(deps): bump the all-go group across 1 directory with 4 updates by @dependabot[bot] in #5202
- chore(deps): bump the all-github-actions group across 2 directories with 2 updates by @dependabot[bot] in #5203
- fix: support commit SHAs in wash new --git-ref by @immanuwell in #5201
- test(wash-runtime): stub egress in allowed_hosts integration by @ricochet in #5204
- chore: upgrade wasmtime to 45 by @ricochet in #5206
- wasi-otel rc2 by @ricochet in #5205
- Support runtime.wasmcloud.dev apiGroup RBAC to be namespaced vs Cluster by @jfleitz in #5208
- chore(wash-runtime): use format string interpolation and fix eprintln in error handlers by @immanuwell in #5207
- feat(wash-runtime): record HTTP response status on request spans by @ricochet in #5210
- test(runtime-operator): cover watchNamespaces RBAC scoping by @ricochet in #5209
- refactor(bench): rename iai-callgrind → gungraun and bump to 0.19.1 by @ricochet in #5211
- chore: lowercase error context messages to match conventions by @immanuwell in #5212
- fix(bench): mark shell scripts executable by @ricochet in #5213
- chore(deps): bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in #5216
- chore(deps): bump the all-github-actions group across 5 directories with 7 updates by @dependabot[bot] in #5217
- test(runtime-operator): add fuzz tests by @ricochet in #5172
- chore(lint): inline format args and enforce lowercase context casing by @ricochet in #5215
- ci: CodeQL free-disk-space by @ricochet in #5221
- chore(lint): pin Rust to 1.96.0 and make clippy --all-targets clean by @ricochet in #5225
- ci(wash): build and publish a wasip3 canary image by @ricochet in #5227
- refactor(wash-runtime): harden p3 sockets by @ricochet in #5222
- refactor(wash-runtime): build wasm test fixtures via xtask by @ricochet in #5220
- Fix In-memory blobstore default by @ricochet in #5223
- chore: test dynamic router removes aliases by @ricochet in #5224
- feat(examples): demonstrate cross-workload OTel trace roll-up by @ricochet in #5226
- fix(deps): patch reported security advisories by @ricochet in #5230
- fix(release-train): derive Cargo.lock guard allowlist by @ricochet in #5231
- release: v2.3.0 by @automation-wasmcloud in #5232
- ci: install rust targets by @ricochet in #5233
New Contributors
- @immanuwell made their first contribution in #5201
Full Changelog: v2.2.1...v2.3.0

What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
- harden release train CI by @ricochet in #5108
- pass sha input for release-tag by @ricochet in #5109
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5112
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.0.5 to 2.0.6 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5111
- ci: make package-manager publishing best-effort by @ricochet in #5110
- fix(dev): friendly url by @ricochet in #5114
- ci: OpenSSF Scorecard workflow by @ricochet in #5115
- ci: fix scorecard publish and harden workflows by @ricochet in #5118
- Revert "ci: fix scorecard publish and harden workflows" by @ricochet in #5119
- ci: lint workflows and actions by @ricochet in #5120
- ci(zizmor): grant write for security upload by @ricochet in #5123
- release: v2.0.7 by @automation-wasmcloud in #5124
- feat: support plugins in services by @MendyBerger in #5122
- Add micro benchmarks for http invocation by @ricochet in #5063
- docs(governance): MAINTAINERS.md with ci-maintainers by @ricochet in #5130
- ci: hardening with zizmor by @ricochet in #5129
- ci: docker images without the v by @ricochet in #5131
- Add Host location and namespace deployment support by @jfleitz in #5128
- ci: add codeql workflow by @ricochet in #5133
- release: v2.1.0 by @automation-wasmcloud in #5134
- ci: reuse wash runtime image build by @dutchaiagency in #5121
- fix: musl might exist even on glibc systems by @MendyBerger in #5135
- chore(deps): bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in #5136
- chore(deps): bump the all-github-actions group across 3 directories with 3 updates by @dependabot[bot] in #5137
- Use namespace role when watchNamespaces set by @jfleitz in #5138
- ci: add status gate pattern to all path-filtered workflows by @ricochet in #5139
- docs: delete CHANGELOG.md by @ricochet in #5142
- ci(examples): lint, build, and publish Rust examples by @ricochet in #5143
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5145
- chore: CODEOWNERS to include files at root by @ricochet in #5147
- ci(examples): consolidate setup-rust-example into setup-rust by @ricochet in #5146
- feat(wash): extend config command with init formats, cleanup, and validation by @if0ne 

What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
- harden release train CI by @ricochet in #5108
- pass sha input for release-tag by @ricochet in #5109
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5112
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.0.5 to 2.0.6 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5111
- ci: make package-manager publishing best-effort by @ricochet in #5110
- fix(dev): friendly url by @ricochet in #5114
- ci: OpenSSF Scorecard workflow by @ricochet in #5115
- ci: fix scorecard publish and harden workflows by @ricochet in #5118
- Revert "ci: fix scorecard publish and harden workflows" by @ricochet in #5119
- ci: lint workflows and actions by @ricochet in #5120
- ci(zizmor): grant write for security upload by @ricochet in #5123
- release: v2.0.7 by @automation-wasmcloud in #5124
- feat: support plugins in services by @MendyBerger in #5122
- Add micro benchmarks for http invocation by @ricochet in #5063
- docs(governance): MAINTAINERS.md with ci-maintainers by @ricochet in #5130
- ci: hardening with zizmor by @ricochet in #5129
- ci: docker images without the v by @ricochet in #5131
- Add Host location and namespace deployment support by @jfleitz in #5128
- ci: add codeql workflow by @ricochet in #5133
- release: v2.1.0 by @automation-wasmcloud in #5134
- ci: reuse wash runtime image build by @dutchaiagency in #5121
- fix: musl might exist even on glibc systems by @MendyBerger in #5135
- chore(deps): bump the all-go group across 2 directories with 3 updates by @dependabot[bot] in #5136
- chore(deps): bump the all-github-actions group across 3 directories with 3 updates by @dependabot[bot] in #5137
- Use namespace role when watchNamespaces set by @jfleitz in #5138
- ci: add status gate pattern to all path-filtered workflows by @ricochet in #5139
- docs: delete CHANGELOG.md by @ricochet in #5142
- ci(examples): lint, build, and publish Rust examples by @ricochet in #5143
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5145
- chore: CODEOWNERS to include files at root by @ricochet in #5147
- ci(examples): consolidate setup-rust-example into setup-rust by @ricochet in #5146
- feat(wash): extend config command with init formats, cleanup, and validation by @if0ne 

What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
- harden release train CI by @ricochet in #5108
- pass sha input for release-tag by @ricochet in #5109
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5112
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.0.5 to 2.0.6 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5111
- ci: make package-manager publishing best-effort by @ricochet in #5110
- fix(dev): friendly url by @ricochet in #5114
- ci: OpenSSF Scorecard workflow by @ricochet in #5115
- ci: fix scorecard publish and harden workflows by @ricochet in #5118
- Revert "ci: fix scorecard publish and harden workflows" by @ricochet in #5119
- ci: lint workflows and actions by @ricochet in #5120
- ci(zizmor): grant write for security upload by @ricochet in #5123
- release: v2.0.7 by @automation-wasmcloud in #5124
- feat: support plugins in services by @MendyBerger in #5122
- Add micro benchmarks for http invocation by @ricochet in #5063
- docs(governance): MAINTAINERS.md with ci-maintainers by @ricochet in #5130
- ci: hardening with zizmor by @ricochet in #5129
- ci: docker images without the v by @ricochet in #5131
- Add Host location and namespace deployment support by @jfleitz in #5128
- ci: add codeql workflow by @ricochet in #5133
- release: v2.1.0 by @automation-wasmcloud in #5134
New Contributors
- @officialasishkumar made their first contribution in #5035
- @MendyBerger made their first contribution in #5122
Full Changelog: v2.0.5...v2.1.0

What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
- harden release train CI by @ricochet in #5108
- pass sha input for release-tag by @ricochet in #5109
- chore(deps): bump the all-github-actions group across 2 directories with 1 update by @dependabot[bot] in #5112
- chore(deps): bump go.wasmcloud.dev/runtime-operator/v2 from 2.0.5 to 2.0.6 in /runtime-gateway in the all-go group across 1 directory by @dependabot[bot] in #5111
- ci: make package-manager publishing best-effort by @ricochet in #5110
- fix(dev): friendly url by @ricochet in #5114
- ci: OpenSSF Scorecard workflow by @ricochet in #5115
- ci: fix scorecard publish and harden workflows by @ricochet in #5118
- Revert "ci: fix scorecard publish and harden workflows" by @ricochet in #5119
- ci: lint workflows and actions by @ricochet in #5120
- ci(zizmor): grant write for security upload by @ricochet in #5123
- release: v2.0.7 by @automation-wasmcloud in #5124
New Contributors
- @officialasishkumar made their first contribution in #5035
Full Changelog: v2.0.5...v2.0.7

What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
New Contributors
- @officialasishkumar made their first contribution in #5035
Full Changelog: v2.0.5...v2.0.6
What's Changed
- fix(http): return typed RouteError with accurate HTTP status codes by @Aditya1404Sal in #5082
- chore: rm passing wash prefix to brew by @dphilla in #5083
- feat: Expand DevRouter and DynamicRouter Tests by @Aditya1404Sal in #5064
- chore: upgrade async-nats to 0.47 by @ricochet in #5087
- [bugfix] Add port name to hello-world by @jfleitz in #5090
- Fix workload readiness for NATS subs by @ricochet in #5086
- docs(templates): reorganize Rust templates and add HTTP handler set by @ericgregory in #5084
- ci: re-enable dependabot for main and release-1.9.x by @officialasishkumar in #5035
- chore(deps): bump the all-docker group across 2 directories with 1 update by @dependabot[bot] in #5091
- chore: upgrade to go 1.26 by @ricochet in #5095
- chore(deps): bump the all-github-actions group across 6 directories with 24 updates by @dependabot[bot] in #5093
- chore(deps): bump the all-go group across 2 directories with 12 updates by @dependabot[bot] in #5092
- fix(test): wait on the host by @ricochet in #5100
- fix(operator): gate WorkloadDeployment Ready on replica availability by @ricochet in #5101
- chore(security): bump wasmtime, drop rustls-pemfile, add cargo audit by @ricochet in #5102
- ci: automated release train by @ricochet in #5098
- ci: disable 1.9 dependabot by @ricochet in #5097
- fix: remove canary-v2 now that canary exists by @ricochet in #5104
- chore(deps): bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5103
- ci: fix sed for release-train by @ricochet in #5105
- backout publishing wash-runtime by @ricochet in #5106
- release: v2.0.6 by @automation-wasmcloud in #5107
New Contributors
- @officialasishkumar made their first contribution in #5035
Full Changelog: v2.0.5...v2.0.6

https://github.com/wasmCloud/wasmCloud/releases/tag/v2.0.4