What's Changed

💪 Improvements

• Add net device feature by @nayuta723 in #3163
• feat(info): add rustc, spec, and libseccomp version by @nayuta723 in #3318
• Implement Linux memory policy by @n4mlz in #3230
• feat: add io limits controller for systemd by @gokulmaxi in #3235
• Added SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV by @viboognesh in #3404

💥 Breaking Changes

• fix hooks order by @saku3 in #3256
• mount info provider by @CheatCodeSam in #3280
• Use oci spec container process state for seccomp by @nayuta723 in #3330
• refactor(hooks): pass OCI-compliant state to lifecycle hooks by @nayuta723 in #3346

🐛 Bug Fixes

• Implement mount destination validation to ensure absolute paths in OCI Runtime Spec by @nayuta723 in #3315
• Fix default filemode for device creation by @you-matsuura in #3276
• fix(3293) Ambient capabilities are not applied as expected by @tommady in #3294
• fix(libcgroups): set sz field in bpf_prog_load_opts by @sou1118 in #3340
• Fix recursive mount_setattr handling for rec_attr and improve mounts_recursive tests by @saku3 in #3345
• fix(libcgroups): pass full_path to Devices controller instead of cgroup_path by @sou1118 in #3355
• refactor(tty): call setup_console after pivot_root, use syscall for mount_console by @nayuta723 in #3333
• Align with runc: use user's HOME when HOME is empty string by @bells17 in #3269
• Refactor checkpoint by @nayuta723 in #3365

📖 Documentation improvements

• chore: fix docs mdbook toml by @YJDoc2 in #3307
• Doc: delete redundant statement on youki.md in dev doc by @logica0419 in #3310
• Fix typos in documentation by @oglok in #3343
• (chore) Fix broken links in user document by @donkomura in #3361
• add tommady as reviewers into doc by @tommady in #3369
• added saku3 as committer into doc by @saku3 in #3370
• add nayuta723 as reviewer into doc by @nayuta723 in #3373

🧪 Test improvements and Misc Fixes

• Update netlink-packet dependencies to versions 0.8.1 and 0.25.1 in Cargo.toml and Cargo.lock by @nayuta723 in #3297
• Fixed minor spelling errors in libcontainer documentation. by @CheatCodeSam in #3305
• Add poststart hook test by @fspv in #3292
• Update/runc 1.4.0 by @nayuta723 in #3304
• chore: runc compatibility test improvements by @saku3 in #3319
• Replace once_cell with stdlib OnceLock/LazyLock by @yan-ace62 in #3323
• Update Kind and Kubernetes versions for k8s e2e tests by @IrvingMg in #3328
• ci(basic): pin Rust toolchain to 1.92.0 for cross-rs compatibility by @nayuta723 in #3348
• test: output contest logs to stdout by @saku3 in #3349
• Add poststart_fail hook test by @fspv in #3313
• Added new test "kill no effect" by @oneplus1000 in #3332
• Pass State directly to run_hooks instead of Container reference by @IrvingMg in #3360
• Batch running the test groups in test_framework by @donkomura in #3372
• refact mount_recursive test by @saku3 in #3383
• Add test poststop hook by @donkomura in #3395
• Add prestart hook test by @fspv in #3382
• Add create_runtime hook test by @fspv in #3396
• Sync the state to confirm hooks execution by @donkomura in #3385
• Include container status to IncorrectStatus error messaging by @CarloQuick in #3411
• Add prestart_fail hook test by @fspv in #3406
• chore(deps): bump wasmer, wasmtime by @YJDoc2 in #3423
• prepare v0.6.0 by @saku3 in #3424

Other Changes

• chore(deps): bump which from 7.0.2 to 8.0.0 by @dependabot[bot] in #3287
• (auto merged) chore(deps): bump the patch group across 1 directory with 2 updates by @dependabot[bot] in #3302
• (auto merged) chore(deps): bump tracing-journald from 0.3.1 to 0.3.2 in the patch group by @dependabot[bot] in #3303
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3306
• chore(deps): bump mockall from 0.13.1 to 0.14.0 by @dependabot[bot] in #3301
• chore(deps): bump wasmtime from 31.0.0 to 35.0.0 by @dependabot[bot] in #3288
• (auto merged) chore(deps): bump libc from 0.2.177 to 0.2.178 in the patch group by @dependabot[bot] in #3308
• chore(deps): bump netlink-packet-route from 0.25.1 to 0.26.0 by @dependabot[bot] in #3316
• (auto merged) chore(deps): bump oci-spec from 0.8.3 to 0.8.4 in the patch group by @dependabot[bot] in #3329
• (auto merged) chore(deps): bump tracing from 0.1.43 to 0.1.44 in the patch group by @dependabot[bot] in #3331
• (auto merged) chore(deps): bump serde_json from 1.0.145 to 1.0.146 in the patch group by @dependabot[bot] in #3334
• (auto merged) chore(deps): bump serde_json from 1.0.146 to 1.0.147 in the patch group by @dependabot[bot] in #3337
• (auto merged) chore(deps): bump serde_json from 1.0.147 to 1.0.148 in the patch group by @dependabot[bot] in #3341
• (auto merged) chore(deps): bump libc from 0.2.178 to 0.2.179 in the patch group by @dependabot[bot] in #3352
• (auto merged) chore(deps): bump serde_json from 1.0.148 to 1.0.149 in the patch group by @dependabot[bot] in #3354
• chore(deps): bump serial_test from 3.2.0 to 3.3.1 by @dependabot[bot] in #3353
• chore(deps): bump wasmtime from 35.0.0 to 40.0.0 by @dependabot[bot] in #3335
• chore(deps): bump tempfile from 3.23.0 to 3.24.0 by @dependabot[bot] in #3338
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3356
• (auto merged) chore(deps): bump libc from 0.2.179 to 0.2.180 in the patch group by @dependabot[bot] in #3357
• (auto merged) chore(deps): bump flate2 from 1.1.5 to 1.1.8 in the patch group by @dependabot[bot] in #3359
• (auto merged) chore(deps): bump the patch group with 3 updates by @dependabot[bot] in #3363
• (auto merged) chore(deps): bump the patch group across 1 directory with 2 updates by @dependabot[bot] in #3371
• chore(deps): bump vergen-gitcl from 1.0.8 to 9.1.0 by @dependabot[bot] in #3368
• (auto merged) chore(deps): bump wasmtime from 40.0.2 to 40.0.3 by @dependabot[bot] in #3376
• (auto merged) chore(deps): bump pathrs from 0.2.2 to 0.2.3 in the patch group by @dependabot[bot] in #3379
• (auto merged) chore(deps): bump bytes from 1.11.0 to 1.11.1 by @dependabot[bot] in #3388
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3389
• (auto merged) chore(deps): bump libbpf-sys from 1.6.2+v1.6.2 to 1.6.3+v1.6.3 in the patch group by @dependabot[bot] in #3390
• (auto merged) chore(deps): bump anyhow from 1.0.100 to 1.0.101 in the patch group by @dependabot[bot] in #3393
• chore(deps): bump quickcheck from 1.0.3 to 1.1.0 by @dependabot[bot] in #3401
• chore(deps): bump rand from 0.9.2 to 0.10.0 by @dependabot[bot] in #3397
• chore(deps): bump tempfile from 3.24.0 to 3.25.0 by @dependabot[bot] in #3400
• (auto merged) chore(deps): bump the patch group across 1 directory with 2 updates by @dep...

Security Notice

This release addresses two CVEs. An update is recommended.

• CVE-2025-62161
  container escape via "masked path" abuse due to mount race conditions
• CVE-2025-62596
  The write-target validation for /proc AppArmor label writes (e.g., /proc/self/attr/apparmor/exec) was insufficient, and combined with path substitution during pathname resolution (via shared-mount races) could allow writes to unintended /proc files.

What's Changed

💪 Improvements

• Drop cgroup v1 in github workflows by @utam0k in #3284

🐛 Bug Fixes

• Waiting on systemd to add intermediate process to cgroup. by @CheatCodeSam in #3262

🧪 Test improvements and Misc Fixes

• Update/runc 1.3.2 by @n4mlz in #3274

Other Changes

• (auto merged) chore(deps): bump flate2 from 1.1.4 to 1.1.5 in the patch group by @dependabot[bot] in #3281
• Release for v0.5.7 by @github-actions[bot] in #3282

New Contributors

• @n4mlz made their first contribution in #3274

Full Changelog: v0.5.6...v0.5.7

What's Changed

💪 Improvements

• fix(3197): fix youki version command Part of Enhancing Compatibility with runc by @tommady in #3200
• feat(3199): Add Linux personality support by @tommady in #3202

💥 Breaking Changes

• Upgrade to Rust 1.89 and Edition 2024 by @utam0k in #3244

📖 Documentation improvements

• added saku3 as reviewers by @saku3 in #3228
• Changed the events_logger in the Dev Container to file by @bells17 in #3221
• Update Rust edition requirement in docs to 2024 by @FalkWoldmann in #3246
• Update basic_setup.md by @bells17 in #3253

🧪 Test improvements and Misc Fixes

• Update Vagrantfile to support the ARM architecture by @bells17 in #3222
• setup runc integration test by @saku3 in #3182
• update runc ci to 1.3.1 by @saku3 in #3237
• Add mdbook binary to devcontainer by @bells17 in #3240
• Unskip runc tests after CI runc update 1.3.1 by @saku3 in #3249
• Fix podman ci by @saku3 in #3260
• add misc_props test by @YamasouA in #3250
• chore(deps): bump libseccomp from 0.3.0 to 0.4.0 by @MattPatchava in #3275

Other Changes

• (auto merged) chore(deps): bump thiserror from 2.0.14 to 2.0.15 in the patch group by @dependabot[bot] in #3223
• (auto merged) chore(deps): bump serde_json from 1.0.142 to 1.0.143 in the patch group by @dependabot[bot] in #3225
• (auto merged) chore(deps): bump thiserror from 2.0.15 to 2.0.16 in the patch group by @dependabot[bot] in #3226
• chore(deps): bump tempfile from 3.20.0 to 3.21.0 by @dependabot[bot] in #3224
• (auto merged) chore(deps): bump regex from 1.11.1 to 1.11.2 in the patch group by @dependabot[bot] in #3229
• (auto merged) chore(deps): bump tracing-subscriber from 0.3.19 to 0.3.20 by @dependabot[bot] in #3231
• (auto merged) chore(deps): bump chrono from 0.4.41 to 0.4.42 in the patch group by @dependabot[bot] in #3239
• (auto merged) chore(deps): bump errno from 0.3.13 to 0.3.14 in the patch group by @dependabot[bot] in #3241
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3245
• chore(deps): bump tempfile from 3.21.0 to 3.22.0 by @dependabot[bot] in #3242
• (auto merged) chore(deps): bump serde from 1.0.223 to 1.0.224 in the patch group by @dependabot[bot] in #3247
• (auto merged) chore(deps): bump serde from 1.0.224 to 1.0.225 in the patch group by @dependabot[bot] in #3248
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3251
• (auto merged) chore(deps): bump libc from 0.2.175 to 0.2.176 in the patch group by @dependabot[bot] in #3254
• chore(deps): bump tempfile from 3.22.0 to 3.23.0 by @dependabot[bot] in #3255
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3257
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3261
• (auto merged) chore(deps): bump flate2 from 1.1.2 to 1.1.4 in the patch group by @dependabot[bot] in #3268
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3270
• (auto merged) chore(deps): bump libc from 0.2.176 to 0.2.177 in the patch group by @dependabot[bot] in #3271
• chore(deps): bump regex from 1.11.3 to 1.12.1 by @dependabot[bot] in #3272
• (auto merged) chore(deps): bump regex from 1.12.1 to 1.12.2 in the patch group by @dependabot[bot] in #3273
• (auto merged) chore(deps): bump caps from 0.5.5 to 0.5.6 in the patch group by @dependabot[bot] in #3277
• Release for v0.5.6 by @github-actions[bot] in #3227

New Contributors

• @bells17 made their first contribution in #3222
• @FalkWoldmann made their first contribution in #3246
• @MattPatchava made their first contribution in #3275

Full Changelog: v0.5.5...v0.5.6

What's Changed

💀 Security Announce

If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.
GHSA-j26p-6wx7-f3pw

💪 Improvements

• fix(3198): fix difference in how commands are passed after exec and ps by @tommady in #3201

📖 Documentation improvements

• Add license scan report and status by @fossabot in #3204

🧪 Test improvements and Misc Fixes

• Revert "[DNM] ci: temp disable workflows" by @YJDoc2 in #3194
• Fixed Minor Spelling Errors by @CheatCodeSam in #3205
• chore(justfile):add install recipe by @saku3 in #3213

Other Changes

• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3203
• (auto merged) chore(deps): bump serde_json from 1.0.141 to 1.0.142 in the patch group by @dependabot[bot] in #3212
• (auto merged) chore(deps): bump the patch group with 3 updates by @dependabot[bot] in #3217
• (auto merged) chore(deps): bump oci-spec from 0.8.1 to 0.8.2 in the patch group by @dependabot[bot] in #3219
• chore(deps): bump libbpf-sys from 1.5.2+v1.5.1 to 1.6.1+v1.6.1 by @dependabot[bot] in #3218
• Release for v0.5.5 by @github-actions[bot] in #3195

New Contributors

• @fossabot made their first contribution in #3204

Full Changelog: v0.5.4...v0.5.5

What's Changed

💪 Improvements

• add support exec-cpu-affinity by @saku3 in #3164
• fix: allow duplicate additionalGids by @saku3 in #3189

🐛 Bug Fixes

• use additional gids,user,group in exec, inject path iif not given by @YJDoc2 in #3131
• fix: mount retry and logging by @z63d in #3157
• fix: Gracefully terminate processes after successful execution of Wasm executors by @z63d in #3099
• fix: Running create_runtime hook after container is set to created. by @CheatCodeSam in #3181
• fix: Ignoring CPU realtime on cgroupsv2 if set to zero by @CheatCodeSam in #3180

📖 Documentation improvements

• Add the CNCF footer in README.md by @utam0k in #3140
• chore(docs): Fix codecov link in README by @khanhtc1202 in #3129
• Fixed grammatical error in README by @CheatCodeSam in #3160
• fix: protobuf bug on docs rs by @mdaffad in #3159
• docs: clarify reviewer qualification and self-nomination process by @utam0k in #3175

🧪 Test improvements and Misc Fixes

• bump nix to 0.29.0 by @kemingy in #3123
• update rust version to 1.85.0 by @YJDoc2 in #3085
• add-test-linux_rootfs_propagation by @saku3 in #3024
• Add a relative_network_cgroups test as one of the integration tests by @moz-sec in #2986
• Refactor init process by @utam0k in #3158
• add kill test by @YamasouA in #2996
• allow running selected tests in contest.sh and justfile by @saku3 in #3165
• fix: capet Ambient log level by @z63d in #3150
• add test process_capabilities_fail by @kazmsk in #3010
• fix typos and outdated typos ci action by @howjmay in #3168
• add a system call mock for uid/gid. by @nayuta-ai in #3173
• fix: remove println statements from contest tests by @YJDoc2 in #3167
• Installing kubectl in dev container. by @CheatCodeSam in #3177
• Add uid_mappings test by @moz-sec in #3161
• fix: update devcontainer.json by @AobaIwaki123 in #3172
• Remove oci tests that are duplicates of contest by @utam0k in #3042
• Remove oci tests that are duplicates of contest by @saku3 in #3184
• Fix debug logging for CPU affinity bitmask by @saku3 in #3191
• [DNM] ci: temp disable workflows by @YJDoc2 in #3192

Other Changes

• chore(deps): bump uuid from 1.15.1 to 1.16.0 by @dependabot[bot] in #3113
• (auto merged) chore(deps): bump once_cell from 1.21.1 to 1.21.2 in the patch group by @dependabot[bot] in #3126
• (auto merged) chore(deps): bump once_cell from 1.21.2 to 1.21.3 in the patch group by @dependabot[bot] in #3128
• (auto merged) chore(deps): bump the patch group with 2 updates by @dependabot[bot] in #3133
• (auto merged) chore(deps): bump errno from 0.3.10 to 0.3.11 in the patch group by @dependabot[bot] in #3135
• (auto merged) chore(deps): bump openssl from 0.10.70 to 0.10.72 by @dependabot[bot] in #3134
• chore(deps): bump wasmtime from 29.0.1 to 31.0.0 by @dependabot[bot] in #3121
• (auto merged) chore(deps): bump vergen-gitcl from 1.0.5 to 1.0.7 in the patch group by @dependabot[bot] in #3142
• (auto merged) chore(deps): bump crossbeam-channel from 0.5.12 to 0.5.15 by @dependabot[bot] in #3143
• (auto merged) chore(deps): bump vergen-gitcl from 1.0.7 to 1.0.8 in the patch group by @dependabot[bot] in #3145
• (auto merged) chore(deps): bump anyhow from 1.0.97 to 1.0.98 in the patch group by @dependabot[bot] in #3147
• (auto merged) chore(deps): bump libc from 0.2.171 to 0.2.172 in the patch group by @dependabot[bot] in #3148
• (auto merged) chore(deps): bump rand from 0.9.0 to 0.9.1 in the patch group by @dependabot[bot] in #3149
• chore(deps): bump tokio from 1.37.0 to 1.44.2 by @dependabot[bot] in #3137
• Bump oci-spec.rs to v0.8.1 by @saku3 in #3154
• (auto merged) chore(deps): bump chrono from 0.4.40 to 0.4.41 in the patch group by @dependabot[bot] in #3156
• (auto merged) chore(deps): bump errno from 0.3.11 to 0.3.12 in the patch group by @dependabot[bot] in #3169
• selinux: lima vm by @utam0k in #3162
• chore(deps): bump tokio from 1.37.0 to 1.38.2 in /experiment/seccomp by @dependabot[bot] in #3138
• (auto merged) chore(deps): bump libbpf-sys from 1.5.0+v1.5.0 to 1.5.1+v1.5.1 in the patch group by @dependabot[bot] in #3171
• chore(deps): bump num_cpus from 1.16.0 to 1.17.0 by @dependabot[bot] in #3176
• chore(deps): bump tempfile from 3.19.1 to 3.20.0 by @dependabot[bot] in #3166
• (auto merged) chore(deps): bump flate2 from 1.1.1 to 1.1.2 in the patch group by @dependabot[bot] in #3183
• chore(deps): bump libc from 0.2.172 to 0.2.173 in the patch group by @dependabot[bot] in #3185
• (auto merged) chore(deps): bump libc from 0.2.173 to 0.2.174 in the patch group by @dependabot[bot] in #3187
• (auto merged) chore(deps): bump errno from 0.3.12 to 0.3.13 in the patch group by @dependabot[bot] in #3188
• (auto merged) chore(deps): bump libbpf-sys from 1.5.1+v1.5.1 to 1.5.2+v1.5.1 in the patch group by @dependabot[bot] in #3190
• Release for v0.5.4 by @github-actions[bot] in #3124

New Contributors

• @kemingy made their first contribution in #3123
• @khanhtc1202 made their first contribution in #3129
• @moz-sec made their first contribution in #2986
• @CheatCodeSam made their first contribution in #3160
• @YamasouA made their first contribution in #2996
• @z63d made their first contribution in #3150
• @kazmsk made their first contribution in #3010
• @howjmay made their first contribution in #3168
• @AobaIwaki123 made their first contribution in #3172
• @mdaffad made their first contribution in #3159

Full Changelog: v0.5.3...v0.5.4

💀 Security Announce

A security issue related to the Capability of TenantBuilder has been discovered.
This issue mainly affects those who execute the exec command. Although the risk of attack from outside is limited, we recommend that you update.
GHSA-5w4j-f78p-4wh9

What's Changed

🐛 Bug Fixes

• Security: Fix compromised tj-actions/changed-files action by @sou1118 in #3112

🧪 Test improvements and Misc Fixes

• Fix the release flow by @utam0k in #3098
• chore(ci): add cgroup v1 compatibility for tests on ubuntu-24.04 by @sou1118 in #3102
• fix: CPU controller tests for Kernel 6.10 cgroup v2 changes by @sou1118 in #3106
• chore(ci): Upgrade GitHub Actions workflows for ubuntu-24.04 by @sou1118 in #3097
• fix: release ci tests also need apparmor disable by @YJDoc2 in #3118
• chore(ci): add criu ppa for podman-tests ci by @sou1118 in #3120

Other Changes

• Release for v0.5.3 by @github-actions in #3119

Full Changelog: v0.5.2...v0.5.3

What's Changed

💪 Improvements

• Support feature subcommand by @musaprg in #2837

🐛 Bug Fixes

• fix(libcgroup): fix disable_oom_killer in cgroup v1 by @xujihui1985 in #3090

🧪 Test improvements and Misc Fixes

• Add a PR template file by @Gekko0114 in #3049
• add process rlimits fail test by @ntkm61027 in #3051
• Use MountOption enum to parse mount options defined in the spec by @musaprg in #2937
• ci: Publish packages after the release flow by @utam0k in #3064
• Make sepc into &spec in test_{outside,inside}_containe by @utam0k in #3068
• linux_masked_paths integration test by @nayuta-ai in #2950
• fix: compilation errors in contest by @YJDoc2 in #3086
• Remove problematic comments between package name in apt install by @musaprg in #3060
• Add delete test by @sou1118 in #3082

Other Changes

• Upgrade direct dep rand to 0.9.0 by @YJDoc2 in #3083
• rollup multiple dep updates by @YJDoc2 in #3084
• lset_file_label should check for symlink instead of raw file by @foreverddong in #3073
• Release for v0.5.2 by @github-actions in #3050

New Contributors

• @ntkm61027 made their first contribution in #3051
• @nayuta-ai made their first contribution in #2950
• @foreverddong made their first contribution in #3073
• @sou1118 made their first contribution in #3082

Full Changelog: v0.5.1...v0.5.2

What's Changed

🐛 Bug Fixes

• Fix building the wasmedge feature by @utam0k in #3041

🧪 Test improvements and Misc Fixes

• Do cargo check before releasing a new version by @utam0k in #3039

Other Changes

• Release for v0.5.1 by @github-actions in #3044

Full Changelog: v0.5.0...v0.5.1

What's Changed

💪 Improvements

• libcontainer: support set stdios for container by @abel-von in #2961
• Add option to spawn processes as siblings by @jprendes in #3012

💥 Breaking Changes

• libcontainer: use OwnedFd as console_socket in ContainerBuilder by @abel-von in #2966

🐛 Bug Fixes

• Fixed ENAMETOOLONG error in setup_console_socket by @morganllewellynjones in #2915
• fix(libcontainer) no_pivot args is not used by @xujihui1985 in #2923
• Fix/return multi errors on create failed by @xujihui1985 in #2998
• fix duplicate gids in container creation by @YJDoc2 in #3019
• Fix --preserve-fds, eliminate stray FD being passed into container by @aidanhs in #2893

📖 Documentation improvements

• Add the affiliations of youki maintainers by @utam0k in #2947
• docs: update github pages links by @tskxz in #2969
• switch from license-file to license by @jprendes in #3023

🧪 Test improvements and Misc Fixes

• ci: update action versions to fix deprecation warnings by @YJDoc2 in #2918
• deps: update wasmedge to 0.14.0 by @YJDoc2 in #2928
• Bump oci-spec to 0.7.0 by @kiokuless in #2934
• remove incorrect dependency in readme by @YJDoc2 in #2940
• Add seccomp into feature flags of youki to be compiled in by @musaprg in #2924
• Add unittest to expertiment seccomp programs by @sat0ken in #2956
• print "unknown" instead of defaults if we cannot get kernel config by @YJDoc2 in #2964
• Add test process rlimits by @sat0ken in #2977
• Add test process user by @sat0ken in #2978
• add test process_oom_score_adj by @saku3 in #2987
• Add process test by @sat0ken in #2968
• refactor(test): refine function create_container by @xujihui1985 in #2973
• Add test root readonly by @sat0ken in #2976
• Adding Discord link to docs by @crmejia in #3005
• Prepare for v0.5.0 by @utam0k in #3016
• Use later stable rust version 1.81.0 to fix the CI by @musaprg in #3033
• Don't specify the versionFile for tagpr by @utam0k in #3036

Other Changes

• selinux: create Vagrantfile for SELinux by @Gekko0114 in #2900
• Cargo.toml: remove unused dependnecies by @Mossaka in #2921
• deps: update wasmtime by @YJDoc2 in #2929
• selinux: fix xattr and remove anyhow by @Gekko0114 in #2936
• .github/workflows/basic: check unused deps on 'check' job by @Mossaka in #2941
• seccomp: Update experiment seccomp program by @sat0ken in #2946
• create mount_rootfs method by @Gekko0114 in #2953
• Update deps: roll multiple dependabot PRs into one by @YJDoc2 in #2993
• Release for v0.5.0 by @github-actions in #2906

New Contributors

• @kiokuless made their first contribution in #2934
• @morganllewellynjones made their first contribution in #2915
• @sat0ken made their first contribution in #2946
• @xujihui1985 made their first contribution in #2923
• @tskxz made their first contribution in #2969
• @saku3 made their first contribution in #2987
• @abel-von made their first contribution in #2961
• @crmejia made their first contribution in #3005
• @aidanhs made their first contribution in #2893

Full Changelog: v0.4.1...v0.5.0

This point release is primarily for updating our nc dependency version , as the last update was breaking musl static builds, see #2894 . Apart from that there are not changes in this point release. You can skip updating if you do not use musl/ not experienced any breakage related to to builds.

What's Changed

🧪 Test improvements and Misc Fixes

• update nc version to 0.9.3 by dependabot in #2895
• prepare for version 0.4.1 by @YJDoc2 in #2897
• Update Cargo.toml for v0.4.1 by @utam0k in #2904

Other Changes

• Release for v0.4.1 by @github-actions in #2896

Full Changelog: v0.4.0...v0.4.1