Florent BENOIT c5a8c4d220 chore(vm): bump libkrun to v1.19.4 and libkrunfw to v5.6.1 (#3451) ...

The libkrun and libkrunfw projects moved from the containers/ GitHub
org to libkrun/. Update all clone URLs and version pins accordingly.

libkrun v1.19.4 introduces krun_add_virtiofs4 with a permissions
semantics parameter, enabling correct file ownership mapping on
host-to-guest bind mounts — required for issue #2585.

- libkrun: v1.17.4 → v1.19.4 (libkrun/libkrun)
- libkrunfw: 463f717b → v5.6.1 (libkrun/libkrunfw)
- Centralise LIBKRUN_REF in pins.env instead of hardcoding in each
  build script
- Source pins.env in the macOS build script for consistency with the
  Linux build script
- Remove the init/init make target step — since libkrun/libkrun@05c4eb7
  the init blob moved into the init_blob crate and is built by cargo

Ref: https://github.com/NVIDIA/OpenShell/issues/2585

Signed-off-by: Florent Benoit <fbenoit@redhat.com>

2026-09-18 13:32:04 +00:00

..

vm

chore(vm): bump libkrun to v1.19.4 and libkrunfw to v5.6.1 (#3451)

2026-09-18 13:32:04 +00:00

build-env.sh

fix(build): raise open-file limit for host musl cross-compile on macOS (#2307)

2026-07-20 21:11:20 +00:00

check-cargo-lockfiles.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

check-cargo-lockfiles.sh

ci(rust): reject stale Cargo lockfiles (#3227)

2026-09-11 08:52:41 +00:00

codex_security_range_test.py

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

codex_security_range.py

fix(ci): restore Codex Security scan execution (#3124)

2026-09-03 07:38:51 +00:00

container-engine.sh

fix(build): align container engine selection (#1944)

2026-06-22 10:50:16 -05:00

docker-build-ci.sh

fix(ci): patch CI container vulnerability toolchain (#959)

2026-04-27 07:56:53 -07:00

docker-build-image.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

docker-publish-multiarch.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

e2e-gpu-build-images.sh

test(e2e): run gpu workloads from manifest (#1709)

2026-06-30 09:54:12 +02:00

gateway-docker.sh

fix(dev): extract Docker sandbox runtime from sandbox image (#3422)

2026-09-17 18:21:11 +00:00

gateway-podman.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

gateway-pull-policy.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

gateway-toml.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

gateway-vm.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

gateway.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

generate_python_proto.py

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

helm-k3s-local.sh

fix(dev): harden local cluster and gateway startup (#2993)

2026-08-27 17:55:01 +00:00

keycloak-k8s-setup.sh

fix(auth): harden OIDC trust root retrieval (#3332)

2026-09-15 17:00:45 +00:00

package-deb-install.sh

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

package-deb.sh

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

release.py

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

run-git-bash.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

sandbox.sh

refactor(providers)!: make provider profiles import-only (#3383)

2026-09-17 22:59:27 +00:00

setup-zig-cc-wrapper.sh

fix(build): use zig archive tools for cross builds (#2014)

2026-06-26 15:35:54 -05:00

snap-gateway-wrapper.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

stage-prebuilt-binaries.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

sync_docs_website_test.py

docs(fern): sync announcement configuration (#3436)

2026-09-18 03:43:01 +00:00

sync_docs_website.py

docs(fern): sync announcement configuration (#3436)

2026-09-18 03:43:01 +00:00

test-build-env.sh

fix(build): raise open-file limit for host musl cross-compile on macOS (#2307)

2026-07-20 21:11:20 +00:00

test-gateway-config.sh

fix(ci): restore mise run ci on macOS (#3294)

2026-09-12 00:17:15 +00:00

test-gateway-pull-policy.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

test-install-sh.sh

feat(installer): support prerelease installations (#3364)

2026-09-18 00:53:36 +00:00

test-packaging-assets.sh

feat(prover): add standalone policy boundary checker (#3289)

2026-09-17 17:30:03 +00:00

test-snap-gateway-wrapper.sh

refactor(config): normalize and enforce gateway schema v2 (#2814)

2026-09-11 05:00:24 +00:00

trivy-config-report.jq

ci(trivy): add artifact and PR configuration scans (#3185)

2026-09-09 13:58:06 +00:00

trivy-scan-test.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

trivy-scan.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

typescript-install.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

typescript-proto.ps1

fix(ci): upstream Windows SDK validation support (#3327)

2026-09-15 22:34:36 +00:00

verify-defaults-without-telemetry.sh

feat(isolation): implement the RFC 0012 sandbox architecture (#2942)

2026-09-16 00:49:14 +00:00

verify-glibc-symbols.sh

fix(release): build host Linux binaries with glibc floor (#1490)

2026-05-22 12:12:03 -07:00

verify-image-sbom.sh

feat(build): publish OCI SBOM and provenance attestations (#2836)

2026-08-27 14:53:33 +00:00

verify-python-wheel.py

refactor(inference): remove managed inference routes (#3195)

2026-09-09 18:47:22 +00:00

verify-static-binary.sh

feat(build): add glibc-static supervisor libc variant (#2682)

2026-08-11 17:43:09 +00:00

verify-telemetry-compiled-out.sh

feat(telemetry): add build-time option to compile out telemetry (#1845)

2026-06-09 14:19:26 -07:00

windows-msvc.ps1

fix(ci): repair RFC 0012 post-merge checks (#3360)

2026-09-16 04:08:00 +00:00