This release significantly broadens runtime support and hardens scheduler reliability.
Highlights
- New runtimes: containerd (native gRPC, CNI, multi-arch), Podman, and Firecracker microVM (experimental — boot, networking/NAT, virtio-block volumes, jobs, metrics and console logs).
- Private registries: pull private images via
image_pull_secretor the host's Docker credentials (use_host_auth), and scoped API tokens (PAT) with per-scope/per-namespace enforcement. - Outbound webhooks with HMAC-signed delivery and a durable event queue.
- Observability: Prometheus
/metricsendpoint (inventory, queues, per-deployment usage). - First-class volumes (
/volumesCRUD +ring volumeCLI).
Reliability
- No more infinite recreation loops: a worker that exits 0 is marked
Completed,MAX_RESTART_COUNTis honoured,restart_countis reset for a worker stuck inCreating, and astart_periodgrace window applies before the readiness deadline.
Full changelog: see CHANGELOG.md.