Weblab v0.11.1

Weblab v0.11.1

Patch release for Internet gateway error handling and publication reliability.

Fixes

• Internet port forwards now return related ICMP destination-unreachable,
  fragmentation-needed, time-exceeded and parameter-problem errors when outbound
  policy is Deny. Rules match the admitted connection; unrelated ICMP remains
  subject to outbound policy.
• Local gateway-build instructions explain selecting weblab-internet:dev
  explicitly in prebuilt deployments, including when core recreation is required.
• The mobile network-cloud browser test waits for compact layout before opening
  the inspector, removing a viewport-transition timing race.

Release verification

• Release jobs stage images and promote the tested digests only after all editions
  pass. Existing version tags cannot be replaced with different images, and an
  older release cannot replace a newer latest. The v0.11.0 recovery input is retired.
• The helper verifier checks actual image layers, executable build inputs and
  retained source files against runtime inventories. Archive compression timestamps
  are normalized; different rebuilds still require their own version and source pair.
• Retry failed jobs to reuse original tested artifacts. Source downloads appear
  as a prerelease before helper publication; stable/latest is set after verification.

Upgrade

Use matching 0.11.1 core, Agent, EXOS and optional Internet helper tags. Save
and stop the lab before recreating core. Pull the new helper and select it with
WL_INTERNET_IMAGE=ghcr.io/weblab-network/weblab-internet:0.11.1; an already running
helper keeps its old rules until that Internet node is stopped and started.

FRR remains 10.7.1-wl1; LL2S remains 0.2.0-ovs-rstp1. No saved-topology format
change is required. See installation and Internet setup.