WasmEdge: vanhemmat versiot ja versiohistoria

### 0.18.1 (2026-10-23)

Fixed issues:

• [Validator]
• Bounded the `array.new_fixed` operand check by the value stack height instead of the count immediate, so a huge count fails the validation without allocating gigabytes. (#5472)
• [CAPI]
• Restored the backward-compatible `WasmEdge_ModuleInstanceAdd*` symbols for the applications linked against 0.17.x, by binding the shims to the `WASMEDGE_0.16` version node and building them without LTO. (#5443)
• [AOT]
• Supported building and running the LLVM backend with LLVM 9 to 23, and corrected the alias value types, the null reference defaults, and the `i8x16.shuffle` mask on all LLVM versions. (#5426)
• [Tools]
• Fixed the `uint32_t` overflow in the name section bounds checks, which hung `wasmedge parse` on the malformed name sections. (#5446)
• [WASI-NN]
• Hardened the Piper backend：validated the JSON input, the synthesis option ranges, and the model paths, caught the `libpiper` exceptions and the streaming errors, bounded the audio size, and kept the last audio chunk. (#4903)

Misc:

• [Documentation]
• Updated the roadmap for Q4/2026 (#5401), and nominated Wang-Yang Li as a WasmEdge maintainer (#5388).

CI:

• [Runner]
• Checked that the changed C API symbols keep their compat aliases, and ran the symbol check on the manylinux builds. (#5443)
• [dependabot]
• ci(dependabot)：bump github/codeql-action from 4.38.2 to 4.39.0 (#5433, #5434, #5457, #5458)
• ci(dependabot)：bump step-security/harden-runner from 2.21.1 to 2.22.1 (#5432)
• ci(dependabot)：bump cachix/install-nix-action from 31.11.1 to 31.11.2 (#5456)
• ci(dependabot)：bump vedantmgoyal9/winget-releaser from a8fff44 to b7370d4 (#5435)
• ci(dependabot)：bump the upload-and-download-artifact group with 2 updates (#5431)
• ci(dependabot)：bump docker/bake-action from 7.4.0 to 7.5.0 in the docker group (#5455)

Thank all the contributors who made this release possible!

Anshika Jain, hydai, Shen-Ta Hsieh(BestSteve), Yi-Ying He

If you want to build from source, please use WasmEdge-0.18.1-src.tar.gz instead of the zip or tarball provided by GitHub directly.

### 0.18.0 (2026-10-05)

Breaking changes:

• [CAPI]
• The `WasmEdge_ModuleInstanceAddFunction()`, `WasmEdge_ModuleInstanceAddTable()`, `WasmEdge_ModuleInstanceAddMemory()`, and `WasmEdge_ModuleInstanceAddGlobal()` APIs return `WasmEdge_Result` instead of `void`.
• They fail with the `WrongVMWorkflow` error after the module instance is first used in execution, and do __NOT__ take the ownership of the added instance on failure.
• The `libwasmedge` shared library exports the versioned symbols with the backward-compatible shims, so that the applications linked against the previous versions keep working. (#4951)
• Deprecated the `WasmEdge_VMForceDeleteRegisteredModule()` API in favor of `WasmEdge_VMDeleteRegisteredModule()`, and moved `WasmEdge_ModuleInstanceInitWasmEdgeProcess()` into `wasmedge_deprecated.h`.
• [AOT]
• Bumped the AOT binary version from `2` to `3`. The artifacts compiled by the older versions should be recompiled.
• [Runtime]
• The execution traps with the new `CallStackExhausted` error when the call stack exceeds the limit, which defaults to 8 MiB in the interpreter and 512 KiB in the AOT and JIT modes. (#5040)
• [Plugin]
• Removed the `wasmedge_process` plug-in (#5295), deprecated the `wasmedge-llmc` plug-in (#4964), and disabled `gzdopen` in the `wasmedge_zlib` plug-in.
• The `wasmedge_opencvmini` plug-in requires OpenCV 5, and drops the `imshow` and `waitkey` exports. (#5280)
• [Tools]
• Removed the `--enable-tail-call`, `--enable-extended-const`, `--enable-function-reference`, `--enable-gc`, `--enable-multi-memory`, `--enable-relaxed-simd`, and `--enable-exception-handling` options, since the WASM 3.0 standard includes these proposals.
• [Installer]
• Dropped the support of installing WasmEdge `0.12.x` and the older versions. (#5165)
• [Build]
• Deprecated the `WASMEDGE_USE_CXX11_ABI` CMake option, since WasmEdge is always built with the cxx11 ABI now.

Features:

• [WASM C API]
• Implemented the WebAssembly C API proposal (`wasm.h`) in `libwasmedge`, providing the C (`wasm_*`) and the C++ (`wasm::`) APIs in parallel with the existing `WasmEdge_*` C API.
• [Exception Handling]
• Supported the exception-handling proposal in the AOT, JIT, and lazy JIT modes. (#5168)
• [Lazy JIT]
• Added the lazy JIT mode, which compiles each function on its first call, selected by the `--run-mode lazyjit` CLI option.
• [Stack Size Limit]
• Limited the call stack size to trap the deep recursion instead of crashing, configured by the `WasmEdge_ConfigureSetMaxStackSize()` API or the `--stack-size-limit` CLI option. (#5040)
• [Component Model]
• Completed the loading and the validation of the component model MVP and the async features, following the latest specification. (#4863, #4878, #4915, #4967, #4987, #4990, #5014, #5068, #5132, #5276, #5376)
• Implemented the synchronous canonical ABI of `canon lift` and `canon lower`. (#4893)
• Supported exporting and aliasing the core tags and the components on instantiation. (#5122, #5137)
• [Runtime]
• Finalized the module instances after their first use in execution, which removes the getter locks from the hot path. (#5052)
• Added the module dependency tree, so that unregistering a module destroys it only when no other module depends on it.
• [Tools]
• Added the `parse`, `validate`, and `instantiate` subcommands into the `wasmedge` CLI. (#4957)
• [Installer]
• Added the `--no-modify-shell-profile` flag to skip modifying the shell login profiles. (#4956)
• [Build]
• Used the system blake3 library when it is available. (#5339)
• [WASI-NN]
• Upgraded the GGML backend to llama.cpp v0.5.0, and added the `load-mode` metadata. (#5188, #5356, #5395)
• [Plugin]
• The `wasi_crypto` plug-in supports the managed EdDSA keypair generation (#4776), the EdDSA and ECDSA public key verification (#4927, #4932), and the ML-KEM key encapsulation with OpenSSL 3.5 or later (#5167).
• The `wasmedge_zlib` plug-in resolves the `gzopen` paths through the WASI preopens.
• [Misc]
• Enabled the `-Wshadow` and `-Wsh

### 0.17.2 (2026-10-02)

Features:

• [CMake]
• Used the system blake3 library when it is available, and fell back to the vendored copy otherwise. (#5339)
• Set `-DCMAKE_DISABLE_FIND_PACKAGE_blake3=ON` to force the vendored copy.
• [WASI-NN]
• Upgraded the llama.cpp dependency of the GGML backend to v0.4.1. (#5188, #5356)
• Added the `load-mode` metadata (`auto`, `none`, `mmap`, `mlock`, `mmap+mlock`, or `dio`), and mapped the legacy `use-mmap` and `use-mlock` metadata onto it.

Fixed issues:

• [Loader]
• Loaded the native shared-library WASM only in the AOT run mode. (#5292)
• Bound-checked the symbol offsets of the AOT custom sections. (#5255)
• Checked the size bound before allocating the read buffer, so that a crafted length no longer allocates gigabytes before the loading fails. (#5325)
• [Validator]
• Checked the declarations of every member of a recursive type before matching the sub types against their super types, which overflowed the stack on the cyclic super types. (#5389)
• [Executor]
• Erased the exception payload on `catch_all` and `catch_all_ref` in the interpreter. (#5202)
• Dropped the stale `try_table` handlers at branch time, which caused an out-of-bounds write. (#5252)
• Corrected the `return_call` continuation of the tail calls into the host functions. (#5286)
• Typed the null values of the abstract reference type locals with the bottom type, which corrected `ref.test` and `ref.cast` on them against the nullable concrete types. (#5347)
• Trapped with the new `CallStackExhausted` error (`0x041B`) when the interpreter stack exceeds 8 MiB, instead of growing until the process runs out of memory. (#5377)
• [AOT]
• Bound-checked the memory64 loads and stores. (#5282)
• [LLVM]
• Mapped the `Os` and `Oz` optimization levels to `O2` with the size attributes on LLVM 23, whose default pass pipeline no longer supports them. (#5328)
• Kept the temporary values of the runtime calls in the entry block, so that the GC instructions, the `call_indirect` and `call_ref` fallbacks, and the `i8x16.swizzle` fallback in a loop no longer exhaust the native stack in the AOT and JIT modes. (#5379)
• [Component Model]
• Grew the component index space on the exports to match the validator. (#5256)
• [WASI]
• Copied the whole IPv6 address in `sock_connect` on Windows, which copied only the first 4 bytes. (#4860)
• Enforced the read-only preopen rights, and attenuated the rights of the child descriptors to the ones that their parent can pass on. (#5340)
• Validated the guest output buffer bounds of `sock_getaddrinfo` before writing the resolver results. (#5344)
• Skipped `epoll_wait` in `poll_oneoff` on Linux when no event is subscribed. (#5364)
• Corrected the `poll_oneoff` timeouts and the `select` error handling on Windows. (#5365)
• Mapped the Windows socket and `getaddrinfo` errors to the matching WASI error codes, so that the refused, reset, and timed-out connections are no longer reported as `ENOSYS`, and read a zero `SO_ERROR` as success. (#5373, #5392)
• [WASI-NN]
• Validated the metadata of the GGML and BitNet backends, and rejected the values which overflow the fixed-size buffers or make llama.cpp throw or abort, such as `tensor-split`, `batch-size`, `ubatch-size`, `n-cpu-moe`, `cache-type-k`, `cache-type-v`, `pooling-type`, `mirostat`, `threads`, and `threads-batch`. (#4916, #5356)
• Applied the metadata atomically in the GGML and BitNet backends, so that a rejected option rolls back the whole metadata object. (#4916, #5356)
• Applied the `embd-normalize` metadata in the GGML and BitNet backends, and the load-time `threads-batch` metadata in the GGML backend, which had no effect before. (#4916, #5356)
• Rebuilt the MoE tensor overrides of the GGML backend on every metadata pass, so that the later `cpu-moe` and `n-cpu-moe` changes take effect. (#5356)
• Preserved the other load-mode flag when only one of the legacy `use-mmap` and `use-mlock` metadata is updated in the GGML backend. (#5188)
• Rejected the prompts which the t

### 0.17.1 (2026-07-03)

Features:

* [CAPI]
* feat(api): version C ABI symbols for the 0.16 -> 0.17 limit change (#4951)

Fixed issues:

* [Validator]
* fix: reject non-funcref tables/refs in call_indirect and call_ref (#4920)
* [WASI]
* fix(wasi): reject symlink targets that resolve outside the preopen root (#4938)
* [WASI-Logging]
* fix(plugin/wasi-logging): keep the default logger alive across instances
* [Common]
* fix(common): build against fmt 8 and spdlog without callback_sink
* fix(common): extend formatter compat to fmt 6 and spdlog 1.5
* fix(common): build against fmt 12.2 where uint128_fallback was renamed
* fix(common): honor format specs and preserve Char fill width in fmt<8 uint128 formatter fallback
* fix(common): guard __has_include probes and include <utility> for std::move

Refactored:

* [Common]
* refactor(common): move WASMEDGE_FMT_CONST to a dedicated fmt compat header
* refactor(common): unify ErrInfo fmt formatters on the FmtCtx template pattern

CI:

* feat(ci): add static-lib build workflow for macOS arm64 (#4948)
* fix(ci): brew trust for wasmedge/llvm (#5079)
* ci: ignore gcov negative-hit parse errors in coverage build (#5062)
* ci: add fuzzer build to Ubuntu CI matrix (#5036)
* ci: remove unused packages in fedora rawhide (#5069)
* [dependabot]
* ci(dependabot): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#4943)
* ci(dependabot): bump github/codeql-action from 4.36.1 to 4.36.2 (#4944)
* ci(dependabot): bump step-security/harden-runner from 2.19.1 to 2.19.4 (#4890, #4899)
* ci(dependabot): bump actions/checkout from 6.0.2 to 7.0.0 (#4925, #5042)
* ci(dependabot): bump the docker group with 3 updates (#4898)
* ci(dependabot): bump actions/cache from 5.0.5 to 6.1.0 (#5083, #5084, #5085)
* ci(dependabot): bump actions/setup-python from 6.2.0 to 6.3.0 (#5082)
* ci(dependabot): bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0 (#5081)

Thank all the contributors who made this release possible!

Shen-Ta Hsieh(BestSteve), Yi-Ying He, dm4, hydai

If you want to build from source, please use WasmEdge-0.17.1-src.tar.gz instead of the zip or tarball provided by GitHub directly.

0.16.1 (2026-01-06)
This is the hot fix for 0.16.x versions.
- fix(tools): revert the proposal disable options
- fix(tools): wrong option name for threads proposal
- test(example): update mandelbrot-set-in-threads example
- ci: use macos-15-intel as the ci runner, instead of macos-14-large (#4476)
Thank all the contributors who made this release possible!
Yi-Ying He, hydai
If you want to build from source, please use WasmEdge-0.16.1-src.tar.gz instead of the zip or tarball provided by GitHub directly.

0.14.1 (2024-09-16)
Features:
- Supported LLVM 17.0.6.
- Bumpped spdlog to v1.13.0.
- Bumpped fmt to 11.0.2.
- Bumpped simdjson to v3.10.0.
- Bumpped googletest to 1.15.2.
- [WASI-NN] ggml backend:
- Bump llama.cpp to b3651.
- Static link libggml and libllama.
- Refined the CMake to support multiple backends of WASI-NN with ggml backend.
- Supported compute single in RPC mode.
- [WASI-NN] Added support for whisper.cpp backend.
- [WASI-NN] Added support for piper backend.
- [WASI-NN] Added support for ChatTTS backend.
- [WASI-NN] Added support for Burn.rs backend.
- Supported squeezenet and whisper models.
- [Plugin] Supported wasmedge_stablediffusion plug-in.
- Enabled CUBLAS.
- Enabled metal support on MacOS.
- [Plugin] Moved wasi_logging into built-in plug-in.
- Instead of installing wasi_logging plug-in shared library, developers can find and get this plug-in after calling WasmEdge_PluginLoadWithDefaultPaths() API.
- In the WasmEdge CLI tools, the built-in plug-ins will automatically be loaded.
- [Proposal] Initial support for instantiation phase of component model.
- Due to the breaking change of API, bump the plug-in API_VERSION to 3.
- [Proposal] Supported WASM Relaxed-SIMD proposal.
- Added the WasmEdge_Proposal_RelaxSIMD for the configuration in WasmEdge C API.
- Users can use the --enable-relaxed-simd to enable the proposal in wasmedge and wasmedgec tools.
Fixed issues:
- Fixed warnings on GCC-14.
- Fixed the fmt related header inclusion for error logging.
- Fixed WASI test error in Windows.
- Fixed version checking in source tarball.
- Fixed version detection issue when building from source.
- Fixed the visibility of internal symbols.
- [Loader] Fixed alignment checking in loading immediates for memory instructions.
- [Runtime] Fixed allocation issue when configured the limited memory page size.
- Used fmt::format instead of string stream in error logging.
Tests:
- Added WASI test suites on Windows.
Known issues:
- Universal WASM format failed on macOS platforms.
- In the current status, the universal WASM format output of the AOT compiler with the O1 or upper optimizations on MacOS platforms will cause a bus error during execution.
- We are trying to fix this issue. For a working around, please use the --optimize=0 to set the compiler optimization level to O0 in wasmedgec CLI.
Thank all the contributors who made this release possible!Biswapriyo Nath, Elmira, Faidon Liambotis, Fusaaaann, Han-Wen Tsao, Jun Zhang, Kefu Chai, Lîm Tsú-thuàn, Michael Morris, PeterD1524, Shen-Ta Hsieh, Shreyas Atre, Sylveon, Yi Huang, Yi-Ying He, alabulei1, dm4, grorge, hydai, junxiangMu, vincentIf you want to build from source, please use WasmEdge-0.14.1-src.tar.gz instead of the zip or tarball provided by GitHub directly.

0.14.0 (2024-05-22)
Breaking changes:- [Version]: Bump the version of the WasmEdge shared library.
- Due to the breaking change of API, bump the SOVERSION to 0.1.0.
- Due to the breaking change of API, bump the plug-in API_VERSION to 3.
- [C API]: Changes for applying Typed Function References Proposal.
- New WasmEdge_ValType structure for replacing enum WasmEdge_ValType.
- Merge the enum WasmEdge_ValType and enum WasmEdge_RefType into the enum WasmEdge_TypeCode.
- Refactored the error code. The error code number may different from previous versions.
- Extend the error code to 2 bytes.
- Updated the related APIs for using enum WasmEdge_ValType as parameters.
- WasmEdge_FunctionTypeCreate()
- WasmEdge_FunctionTypeGetParameters()
- WasmEdge_FunctionTypeGetReturns()
- WasmEdge_TableTypeCreate()
- WasmEdge_TableTypeGetRefType()
- WasmEdge_GlobalTypeCreate()
- WasmEdge_GlobalTypeGetValType()
- Removed WasmEdge_ValueGenNullRef() API.
- Due to non-defaultable values after this proposal, the following APIs return the result instead of void.
- WasmEdge_GlobalInstanceSetValue()
- Introduced the WasmEdge_Bytes structure.
- This structure is for packaging the uint8_t buffers. The old FromBuffer related APIs will be replaced by the corresponding APIs in the future versions.
- WasmEdge_CompilerCompileFromBytes() API has the same function as WasmEdge_CompilerCompileFromBuffer() and will replace it in the future.
- WasmEdge_LoaderParseFromBytes() API has the same function as WasmEdge_LoaderParseFromBuffer() and will replace it in the future.
- WasmEdge_VMRegisterModuleFromBytes() API has the same function as WasmEdge_VMRegisterModuleFromBuffer() and will replace it in the future.
- WasmEdge_VMRunWasmFromBytes() API has the same function as WasmEdge_VMRunWasmFromBuffer() and will replace it in the future.
- WasmEdge_VMAsyncRunWasmFromBytes() API has the same function as WasmEdge_VMAsyncRunWasmFromBuffer() and will replace it in the future.
- WasmEdge_VMLoadWasmFromBytes() API has the same function as WasmEdge_VMLoadWasmFromBuffer() and will replace it in the future.
- New APIs for WASM Exception-Handling proposal.
- Added the WasmEdge_TagTypeContext struct.
- Added the WasmEdge_TagInstanceContext struct.
- Added the WasmEdge_TagTypeGetFunctionType() API for retrieving the function type from a tag type.
- Added the WasmEdge_ImportTypeGetTagType() API for retrieving the tag type from an import type.
- Added the WasmEdge_ExportTypeGetTagType() API for retrieving the tag type from an export type.
- Added the WasmEdge_ModuleInstanceFindTag() API for finding an exported tag instance from a module instance.
- Added the WasmEdge_ModuleInstanceListTagLength() and WasmEdge_ModuleInstanceListTag() APIs for listing the exported tag instances of a module instance.
- Refactored the OpCode mechanism for speeding up and supporting WASM multi-bytes instruction OpCodes.
Features:- Bumpped spdlog to v1.13.0.
- Bumpped simdjson to v3.9.1.
- [Proposal]: Apply new propoals.
- Supported WASM Typed Function References proposal.
- Added the WasmEdge_Proposal_FunctionReferences for the configuration in WasmEdge C API.
- Users can use the --enable-function-reference to enable the proposal in wasmedge and wasmedgec tools.
- Supported WASM GC proposal (interpreter only).
- Added the WasmEdge_Proposal_GC for the configuration in WasmEdge C API.
- Users can use the --enable-gc to enable the proposal in wasmedge and wasmedgec tools.
- Supported WASM Exception-Handling proposal (interpreter only).
- Added the WasmEdge_Proposal_ExceptionHandling for the configuration in WasmEdge C API.
- Users can use the --enable-exception-handling to enable the proposal in wasmedge and wasmedgec tools.
- This proposal supports old deprecated try, catch, and catch_all instructions, and will remove them in the future version.
- Component Model proposal (experimental, loader phase only).
- Added the WasmEdge_Proposal_Component for the configuration in WasmEdge C API.
- Users can use the --enabl