v6.3.0

6.3.0 (2026-10-30)

Features

• cli: add impz bench to time creates, wakes and restores (#793) (870d42d)

v6.2.1

6.2.1 (2026-10-30)

Bug Fixes

• daemon: favour foreground admissions and cap concurrent restores (#794) (79a03cf)

v6.2.0

6.2.0 (2026-10-30)

Features

• images: add a coder example image (#788) (fe573c4)

v6.1.1

6.1.1 (2026-10-29)

Bug Fixes

• daemon: close five gaps in admission, locks, state, restore and lineage (#787) (2c5aad3)
• daemon: keep ordinary-page guests in the memory outside the pool (#789) (8559750)
• daemon: run the identity reset on every fork (#784) (5ae76d1)

v6.1.0

6.1.0 (2026-10-29)

Features

• daemon: relay a websocket to a granted host through the broker (#781) (c9d42ac)
• daemon: restore and wake imps on huge pages through a page handler (#779) (5438f6e)

v6.0.2

6.0.2 (2026-10-28)

Bug Fixes

• deploy: let impd bind its tailnet ports under Podman (#773) (69ecc04)

v6.0.1

6.0.1 (2026-10-28)

Bug Fixes

• run the skill-gate hook with bun --no-install (#769) (8648c6e)

Performance Improvements

• daemon: lock boot template memory in the host page cache (#766) (4e5d6b4)

v6.0.0

6.0.0 (2026-10-26)

⚠ BREAKING CHANGES

• nixos: services.imp no longer enables virtualisation.docker; a host that needs Docker for something else enables it itself.
• deploy: imp-host runs under podman, not Docker, and deploy/compose.yaml is gone; run this release's upgrade.sh to move a Docker host.
• imp-host gets no Docker socket and runs no imp-docker-proxy; a compose file that still runs the proxy needs this release's imp-host service.

Features

• daemon: fetch the builder image with oci-fetch, not host docker (#721) (7022828)
• deploy: run imp-host under rootful podman (#725) (fdfe9b9)
• mcp: describe only the tools the caller's scope exposes (#749) (383021b)
• nixos: run imp-host under podman, with docker off (#727) (e9f3925)

Bug Fixes

• deps: update patch updates (#744) (66e5c76)
• testing: keep acme-client out of @impz/testing's dependencies (#758) (94b069f)

Code Refactoring

• remove the docker socket proxy (#722) (af39c43)

v5.0.0

5.0.0 (2026-10-26)

⚠ BREAKING CHANGES

• api: secrets.add refuses in its schema a field the kind does not take, such as rules on a preset, and secrets.list shows each stored secret as kind static or oauth. The older kind names github, anthropic, npm and custom still work in this release and go in the next major release: use the preset of that name, or kind static.

Features

• api: take static and oauth secrets, with presets as data (#718) (9696e0a)
• daemon: store an env list on each secret, with the presets as data (#717) (5c4f4e8)

v4.2.5

4.2.5 (2026-10-26)

Bug Fixes

• spike: wake a uffd fault on a removed range, and skip it in fills (#739) (a8db735)