smolvm v1.0.4

What's Changed

• feat(network): general UDP relay for virtio-net by @BinSquare in #382
• fix(api): echo networkBackend and allowedCidrs in machine info by @BinSquare in #383
• fix(net): published ports auto-select virtio-net (TSI is outbound-only) by @BinSquare in #385
• fix(api): start launches image workload + ports default to virtio-net by @BinSquare in #386
• feat: relay guest ICMP echo (ping) on virtio-net by @BinSquare in #384
• fix(seccomp): complete the VMM allowlist so enforce mode is safe by @BinSquare in #387
• test(fuzz): cargo-fuzz the guest-frame classifier by @BinSquare in #388
• fix(net): egress hard-floor — deny metadata/internal for all guests by @BinSquare in #389
• feat(serve): mTLS for fleet serve API (client-cert verify, fail-closed) by @BinSquare in #391
• feat(serve): dual listener — loopback plain-HTTP door for local node-agent under mTLS by @BinSquare in #392
• fix(embedded): carry gpu resources through MachineSpec::to_record by @BinSquare in #393
• Fix init readiness race for machine run by @Adityakk9031 in #371
• feat(serve): lossless restart — per-VM systemd scopes + detach + explicit drain by @BinSquare in #394
• bump: v1.0.4 by @BinSquare in #396

New Contributors

• @Adityakk9031 made their first contribution in #371

Full Changelog: v1.0.3...v1.0.4