v0.2.5

📖 Documentation for this release: https://kvcache-ai.github.io/AgentENV/v0.2.5/

---

Features

• gateway: Support HTTPS with manual and ACME certificates (#408) — @zlzGithub-0801
• Attach image drives to warm starts (#398) — @Primary33
• compose: Add the Compose planner (#415) — @Primary33
• Add scheduler throughput benchmarks (#421) — @GxmzG
• Benchmark fresh sandbox startup throughput (#422) — @GxmzG
• Integrate nested KVM runtime and end-to-end tests — @Hygge-Gezelligheid
• kernel: Default KVM to prebuilt Linux 6.18 (#358) — @Hygge-Gezelligheid
• scheduler: Add HA via Kubernetes Lease leader election (#341) — @NickNYU
• compose: Add the guest Compose runtime image (#416) — @Primary33
• ublk: Add user recovery primitives — @yingdi-shan
• ublk-daemon: Recover devices across daemon restarts — @yingdi-shan
• ublk: Respawn and recover the ublk daemon from the client — @yingdi-shan
• compose: Run Compose projects in sandboxes from the CLI (#349) — @Primary33
• compose: Build service images with aenv compose build (#348) — @Primary33

Bug Fixes

• make: Keep command-line overrides out of inherited MAKEFLAGS (#429) — @yingdi-shan
• network: Drop guest packets with a spoofed source address — @yingdi-shan
• overlaybd: Bound layer index ranges by file size (#430) — @yingdi-shan
• snapshot: Stop interrupted deletes from shadowing aliases (#433) — @yingdi-shan
• ublk-daemon: Roll back device handoffs the client never receives (#431) — @Alex-Wengg
• Avoid nested image state read locks during writes (#438) — @huang-jl
• Enable legacy v9 snapshot recovery with the v1000 runtime — @Hygge-Gezelligheid
• deps: Upgrade zip, hickory-resolver, aws-sdk and testcontainers — @yingdi-shan
• ublk: Survive daemon crashes on Linux 6.8 (#446) — @yingdi-shan
• runtime: Report cgroup working set instead of memory.current (#458) — @glen-tl
• gateway: Close slow and idle HTTP client connections (#455) — @arun-elr
• compose: Stop deleting the fork source in the lifecycle test (#469) — @Primary33
• ublk: Log failed queue workers and slots when they fail — @yingdi-shan
• ublk: Retry transient io buffer registration failures — @yingdi-shan
• ublk-daemon: Wait for ublk block nodes off the runtime workers — @yingdi-shan
• envd: Bound the HTTP/2 probe so a lost probe cannot hang a call (#470) — @yingdi-shan
• Mask nested APF VM-exit delivery on cold boot (#474) — @Hygge-Gezelligheid

Improvements

• test-support: Trim the AWS SDK used by the MinIO fixture (#454) — @yingdi-shan

Documentation

• Expand deployment configuration reference and examples (#442) — @zlzGithub-0801