Skip to content

v2026.10.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Oct 11:01
Immutable release. Only release title and notes can be modified.
v2026.10.1
This tag was signed with the committer’s verified signature.
joshuajbouw Joshua J. Bouw
GPG key ID: FA53358CB4127512
Verified
Learn about vigilant mode.
db41939
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixed

  • Allow separate Unix OS users to start their own runtimes when sharing a temporary directory, while retaining the existing startup lock for its owner and all private-file checks. Closes #2132.

  • Allow metadata traversal to authorized macOS process sandbox paths so Node can resolve and execute workspace script files, while preserving directory-content and hidden-path isolation.

  • Fix file and directory renames in populated workspaces by resolving pending catalog nodes throughout the atomic rename transaction. Closes #2137.

  • Fail Linux host setup with package and device instructions when ordinary-user FUSE mounts are unavailable, before approved native tools encounter an opaque capability error. Closes #2144.

Security

  • Update Rustls to 0.23.46 to include the upstream fixes for RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348 and RUSTSEC-2026-0349. Closes #1516.

  • Update Wasmtime and wasmtime-wasi to 48.0.6 for the upstream component-runtime and WASI security fixes published October 14, 2026. Closes #2141.

  • Mask canonical and retired runtime backing volumes from native sandboxed commands and reject grants that would reopen protected media. On Linux, diagnose sandbox readiness in both executable contexts and use a protected Bubblewrap profile instead of an Astrid-wide user-namespace grant. Closes #2146.

Install

From source (requires Rust 1.95+):

cargo install astrid

Linux pre-built archive:

tar xzf astrid-*-$(uname -m)-unknown-linux-*.tar.gz
sudo install -m 0755 astrid-*/astrid astrid-*/astrid-daemon \
  astrid-*/astrid-build astrid-*/astrid-emit \
  astrid-*/astrid-storage-provider-fuse /usr/local/bin/

macOS pre-built archive and signed AstridFS app:

ARCH=$(uname -m); [[ "$ARCH" == arm64 ]] && ARCH=aarch64
tar xzf astrid-*-${ARCH}-apple-darwin.tar.gz
sudo install -m 0755 astrid-*/astrid astrid-*/astrid-daemon \
  astrid-*/astrid-build astrid-*/astrid-emit /usr/local/bin/
astrid-*/macos/manage-macos-fskit.sh install
astrid-*/macos/manage-macos-fskit.sh enable

Astrid Runtime does not bundle a product distro. To compose it with a
distro you trust, run:

astrid init --distro <name, @org/repo, path, or .shuttle>

With many thanks from the following Astrinauts 🚀

  • Joshua J. Bouw
Assets 23
Loading