v2.11.0

What's Changed

• fix(wash-runtime): release identity-lowered borrows after a linked call by @Mees-Molenaar in #5638
• fix(wash-runtime): pass nested linked handles across by identity by @ricochet in #5639
• test(wash-runtime): drive the drain test's connection by hand by @ricochet in #5640
• feat(wash-runtime): attach native host control to running hosts by @vados-cosmonic in #5614
• Add k6 benchmarking by @jfleitz in #5630
• ci: bump pinned CI tool versions by @github-actions[bot] in #5644
• build(deps): Bump the all-github-actions group across 3 directories with 7 updates by @dependabot[bot] in #5641
• Isolate benchmark publishing from self-hosted runners by @ricochet in #5648
• feat(runtime)!: enforce guest memory and socket egress by default by @ricochet in #5646
• fix(wash-runtime): gate hostPath volumes by @ricochet in #5623
• build(deps): Bump the all-go group across 2 directories with 2 updates by @dependabot[bot] in #5663
• feat(wash): default the cosmonic wkg namespace to ghcr.io/cosmonic-labs by @ricochet in #5662
• ci(wash): dockerhub login for rate limit by @ricochet in #5665
• fix(deps): bump quinn-proto to 0.11.19 for RUSTSEC-2026-0338..0342 by @jtakakura in #5668
• fix(examples): pin local-ingress to oci-registry 0.1.1 by @ericgregory in #5672
• feat(wash-runtime): log remediation for the wit-bindgen <=0.58 async cancel trap by @ericgregory in #5671
• build(deps): Bump the all-github-actions group across 2 directories with 4 updates by @dependabot[bot] in #5670
• feat(runtime): support embedded commands and structured async payloads by @vados-cosmonic in #5675
• fix(deps): update wasmtime to resolve security advisories by @ricochet in #5681
• fix(wash-runtime): lock a host's scratch before the sweep can see it by @ricochet in #5680
• ci(k6bench): run the smoke only for harness changes, offline by @ricochet in #5682
• build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /runtime-operator by @dependabot[bot] in #5687
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in #5688
• build(deps): Bump the all-github-actions group across 3 directories with 9 updates by @dependabot[bot] in #5694
• build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-gateway by @dependabot[bot] in #5699
• build(deps): Bump the all-go group across 1 directory with 3 updates by @dependabot[bot] in #5693
• fix(wash-runtime): refuse workload ids that match a plugin id by @ericgregory in #5700
• fix(build): configure fixture linkers and expand CI coverage by @vados-cosmonic in #5698
• test(wash-runtime): cover that on-workload-bind delivers only the plugin's own entries by @ericgregory in #5697
• feat: allow plugins to override WASI builtin interfaces by @vados-cosmonic in #5683
• fix(wash): run on an 8 MiB stack on every platform by @vados-cosmonic in #5702
• test(wash-runtime): deflake the local-routing quota test by @vados-cosmonic in #5703
• fix(oci): share pull clients, coalesce pulls, and scope caches by @vados-cosmonic in #5704
• docs(security): name repos with GH security reporting by @ricochet in #5686
• build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 in /runtime-operator by @dependabot[bot] in #5689
• perf(wash-runtime): cheaper HTTP routing, workload clones, and unbinds by @vados-cosmonic in #5705
• fix(deps): bump wasmtime to 48.0.7 by @ricochet in #5713
• fix(wash-runtime)!: keep name grants unless given a lifetime by @ricochet in #5679
• build(deps): Bump github.com/gohugoio/hugo from 0.161.1 to 0.163.3 in /runtime-operator by @dependabot[bot] in #5691
• feat(wash-runtime): pool sizing and a max-process-memory limit by @vados-cosmonic in #5706
• perf(wash-runtime): share the base WASI linker and route tree nodes by @vados-cosmonic in #5707
• fix: validate connection quotas against semaphore limits by @angyaljanos in #5661
• fix(wash-runtime)!: operator-owned backends and allowedHosts for multiplexed plugins by @ricochet in #5715
• release: v2.11.0 by @automation-wasmcloud in #5719

New Contributors

• @angyaljanos made their first contribution in #5661

Full Changelog: v2.10.3...v2.11.0