smolvm v1.3.8
What's Changed
- fix(exec): bound streaming exec output to prevent host OOM; reach aarch64 seccomp call site by @BinSquare in #529
- fix(pack): block symlink-parent host-escape in sparse tar extraction by @BinSquare in #530
- Kill a wedged VM identified by its unique boot-config argv so teardown never leaks an untracked live orphan by @BinSquare in #532
- Bump the workspace to 1.3.8 by @BinSquare in #533
Full Changelog: v1.3.7...v1.3.8