v4.0.0

First stable release of the v4.x line.

Highlights since v4.0.0-rc5

New features

• image-azure and image-gcp commands bring image-build parity with image-aws. Each wraps Packer, handles cloud credentials, and bakes the same Isaac Sim / Isaac Lab stack into a managed image / custom image. The --from-image flag in deploy-azure and deploy-gcp picks up the resulting image automatically.
• deploy-gcp --from-image is now wired all the way through Terraform via a google_compute_image data source keyed on the image family isaac-automator-isaacworkstation.
• AWS credentials honor AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY env vars on the host. ./run forwards them into the container and the SSO flow is skipped when they are present. AWS_SESSION_TOKEN and AWS_DEFAULT_REGION are forwarded too.

Bug fixes

• GCP: workstations no longer lose their public IP across stop/start. A google_compute_address is reserved and attached as nat_ip on the network interface.
• ./start --quick: now waits for sshd before running the autorun task. The wait_for_connection task in the playbook was previously skipped under -t __autorun, producing unreachable=1 on the first attempt after stop.
• --from-image deploys on a stale base image: the NVIDIA driver/library version mismatch (loaded kmod older than the package after Container Toolkit install) is detected and a reboot is triggered before the ECC step.
• Packer commands in image-azure and image-gcp shell-quote user-controlled values (passwords, git refs, image names) to avoid breakage on metacharacters.

Tests and tooling

• New unit tests for utils.py, DeployCommand callbacks, Deployer._write_tfvars_file, recreate_command_line, in_china conversion, and AWS env-var credential detection. Test runner at src/tests/run_all.sh.
• Deployer tests run in isolated temp dirs so the __del__ save_meta hook no longer mutates the checked-in test-1 fixture.

Documentation

• README updated for image-azure / image-gcp and the AWS env-var credential precedence.