v0.4.8

Changelog

• f1378e7 feat(vm): atomic hibernate; restore accepts stopped VMs
• 05dbae9 fix(cmd): vm exec attaches stdin only with -i
• 89544ee fix(fc): re-anchor clone drives at their own paths after snapshot load
• bbeeb61 fix(vm): hibernate persists before killing the VMM
• 1252646 fix(vm): keep a stopped VM restorable after a transient restore failure
• cf4b47b fix(vm): roll back the recorded snapshot id when hibernate persist fails
• 2c4b063 refactor(fc): derive redirect and re-anchor sets from one function
• 9bb2e18 refactor(vm): fold hibernate review findings
• 845640f test(vm): fix stub-VMM exec race; cover terminate failure; fold persist tail

v0.4.7

Changelog

• 574b5b8 refactor(cmd): rename core/helpers.go to utils.go per file-naming standard
• 9e29e80 refactor(hypervisor): consolidate helper files into utils; dedup reserve skeleton

v0.4.6

Changelog

• b504dba chore(os-image): bump cocoon-agent to v0.1.6
• d57cead chore(os-image): re-pin cocoon-agent v0.1.6 SHA after tag re-cut
• 80ad17e chore: bump Firecracker baseline to v1.16.0
• 78c1e7b chore: bump cocoon-agent to v0.1.8 (warn on dbus machine-id drop failure)
• bfe361e chore: move cocoon-agent pin to v0.1.7 (re-cut v0.1.6 poisoned go.sum)
• fb005bc feat(cloudimg): parallel Range download for image pull
• ed2a18d feat(vm): signal guest CRNG reseed after clone/restore
• 257529a fix(hypervisor): don't log a killed-orphan warning for a just-stopped VM
• a20b4ab fix(vm): populate vsock socket before signaling reseed
• 2010949 fix(vm): retry reseed only on dial failure, not a live agent's rejection
• 8288ce5 fix: clamp pull_conns; surface silent reseed skips; test the retry rule
• 7e4406f refactor(utils): export SplitRanges and CopyRangeBody range helpers
• bceb09d refactor(vm): extract resolveRunningVM shared by exec and reseed
• 21d31e9 style(vm): group Handler methods above standalone reseed helpers
• d9fa4df test(utils): stop bash tail-exec flaking the SIGTERM-ignored terminate test

v0.4.5

Changelog

• 5ec2de7 bump v0.4.5
• 92458b5 chore(os-image): bump cocoon-agent to v0.1.5
• 8972c77 chore(os-image): re-pin cocoon-agent v0.1.5 SHA after tag re-cut
• a6fd977 chore: normalize LICENSE copyright line
• de96e00 refactor(cmd): extract dependency-free CLI helpers into cmd/cliutil
• 4d1e7cd refactor(images): narrow store constructors to rootDir, drop *config.Config
• feccac1 refactor: repo-level audit follow-ups (test ordering, comments, shim)
• 42cae70 refactor: whole-project /code audit round 2 (fixes + comment tightening)

v0.4.4

Changelog

• a17c7d0 chore(deps): bump go directive 1.25.6 → 1.26.4 (clears 2 stdlib vulns)
• 8fdd360 chore(deps): bump google.golang.org/grpc 1.69.0 → 1.79.3 (GHSA-p77j-4mvh-x3m3)
• 093174c refactor: clean MED+LOW findings from whole-project /code audit (zero-regression verified) (#67)
• 8518acf refactor: close file-org + simplify gaps left by #67
• 094076b refactor: strict exported-above-unexported ordering (fat12, images handler)

v0.4.3

Changelog

• e56fa36 fix(oci): guard scanBootFiles short namePrefix slice (#63) (#64)
• 35c304b fix(types): allow ':' and '/' in snapshot names for OCI tag-aware refs (#65)
• 2f3589d update bump ver of readme

v0.4.2

Changelog

• 7d9b3dc feat(types): validate snapshot name length and shape (#61)
• 49818f8 refactor(metering): split into subpackages + pluggable backend (#62)

v0.4.1

Changelog

• 0324e80 chore: aggressive comment trim across the codebase
• 65ec0e6 chore: branch-wide audit sweep (style + dedup + cmdline test) (#55)
• 3fe0fd0 chore: ship-ready cleanup from final audit (#58)
• ce238b5 feat(gc): add --snapshot LRU eviction flag (#53)
• dd7a3b9 feat(gc): per-id INFO logs + orchestrator summary (#54)
• 65a9e8e feat(metering): VM/snapshot lifecycle event recorder (#56)
• a42ab77 fix(hypervisor): reconcile Error→Running when VMM process is alive (#57)
• c86938c fix: kill orphan VMM via /proc cmdline fallback when pidfile pre-removed (#51)
• 5b6964e fix: make CH pause/resume idempotent on cocoon side (#52)
• a8e79cb fix: prevent orphan VMM via socket tiebreaker + status one-shot default (#50)
• c43a6ed os-image: bump cocoon-agent to v0.1.3
• 58741ad perf: List off-lock IO + DeleteAll shared /proc scan (#60)
• ff79936 refactor(hypervisor): tighten 3 senior-review nits
• 01bc7e7 refactor: dedup helpers across cmd/hypervisor/snapshot (#59)

v0.4.0

Changelog

• e835a0c chore(clone): compress Windows post-clone PnP-rebind hint
• 128b771 chore: bump cocoon-agent to v0.1.2 + audit cleanups
• 0fb3fa2 chore: code review cleanup (security regex, log levels, casing, blob IDs, tests) (#45)
• a4eeb0d feat(clone): print self-contained PnP-rebind hint after Windows clone
• 5fdd77e feat(exec): allow cocoon vm exec on Windows guests
• 92329f9 feat(image): validate ref shape against ImageType before auto-pull (#40)
• d03dec4 feat(network): always provision per-VM netns under CNI, even with 0 NICs (#44)
• 39f52a2 feat(vm): cocoon vm clone --nics N to override snapshot NIC count (#43)
• 8bbb518 feat(vm): cocoon vm net --nics N — runtime NIC resize (#42)
• 38539a8 feat: cocoon vm logs to print per-VM hypervisor log (#29)
• 4630688 feat: vm logs --tail N
• 380050b fix(clone): gate --nics on FC + doc cleanup
• f1f641a fix(exec): make vsock CONNECT handshake honor ctx so Ctrl+C unblocks
• 6fff2c5 fix(image): force-pull when digest pinned but missing locally (#39)
• be35341 fix(metadata): netplan name-based fallback for cloudimg clone DHCP recovery (#34)
• 6e3e318 refactor: SKILL audit + os-image cocoon-agent/sshd unification (#32)
• 50df13c refactor: clone/restore inherit all resources from snapshot (#27)
• 6ea4953 refactor: codebase cleanup batch — F1/F13 + Q F6/F7/F15 (#31)
• 34ee0f1 refactor: full-codebase simplify pass — reuse + quality (#30)
• d32a2d0 style(utils): trim RunQemuImg godoc + move subprocess marker inline (#41)

v0.3.9

Changelog

• 099cf9f disable cmd output non-zero return code
• 7609f43 docs(known-issues): clarify clone/restore --cpu/--memory cannot grow (#26)
• 7174e76 feat: cocoon vm exec via vsock + cocoon-agent (#25)
• 3b9cff7 feat: vhost-user-fs and VFIO PCI device hot-plug
• 7980be5 fix(snapshot): fall back to non-sparse tar when segment map exceeds PAX cap (#23)
• 73e832f refactor: hot-plug review polish + APIOnce routing
• c5956db refactor: shared CH/FC backend templates and helper consolidation
• fedfade style: codebase-wide SKILL.md cleanup pass
• 1360aa9 style: full-repo SKILL.md audit closed-loop
• ac727a5 support clone and restore from specific dir (#22)