chore(deps): Bump the hyperlight group across 1 directory with 4 updates by dependabot[bot] · Pull Request #431 · hyperlight-dev/hyperagent

dependabot · 2026-10-22T03:04:48Z

Bumps the hyperlight group with 4 updates in the /src/code-validator/guest directory: hyperlight-common, hyperlight-guest-bin, hyperlight-guest and hyperlight-host.

Updates hyperlight-common from 0.17.0 to 0.18.0

Release notes

Sourced from hyperlight-common's releases.

Release v0.18.0

What's Changed

Added

Windows on ARM64 support using the WHP backend by @cshung in hyperlight-dev/hyperlight#1638

Virtqueue-based host-guest communication. Per-direction virtqueue configuration is available through SandboxConfiguration and SandboxBuilder, with allocations included in scratch sizing by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Shared virtqueue framing with a 12-byte MsgHeader and external byte values, plus ExternalValueSource implementations for RecvChain and Segments by @andreiltd in hyperlight-dev/hyperlight#1792, hyperlight-dev/hyperlight#1793, and hyperlight-dev/hyperlight#1794

Producer batch completion without notification, and segmented payload assembly and extraction without flattening by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

MailboxValue, which defines the transport mailbox's allowed wire values, and virtq::canonical::validate_canon_prefix, which validates a bounded available descriptor prefix by @andreiltd in hyperlight-dev/hyperlight#1891

Retained guest Bytes and ByteChunks preserve contents and pointers across snapshot capture, restore, and cloning by @andreiltd in hyperlight-dev/hyperlight#1891

Namespaced application metadata on immutable snapshots by @ludfjig in hyperlight-dev/hyperlight#1860

Support overriding the guest log level when building or restoring initialized snapshots by @jprendes in hyperlight-dev/hyperlight#1833

Guest paging operations and AArch64 system-register macros in hyperlight-guest by @andreiltd in hyperlight-dev/hyperlight#1889

Architecture-independent page fault and undefined instruction exception hooks in hyperlight-guest-bin by @syntactically in hyperlight-dev/hyperlight#1877

Guest virtual memory support for lazily zero-initialized regions and in-place mapping modification by @syntactically in hyperlight-dev/hyperlight#1873 and hyperlight-dev/hyperlight#1874

Changed

Breaking: All guest logs and host and guest function calls now go through virtqueues. Virtqueue rings and pools occupy host-owned scratch before page tables, and canonical virtqueue rings are stored in versioned OCI transport layers. Retained-buffer checkpoints use ABI 6 and config schema v3, which rejects snapshots without transport state. Existing snapshots must be regenerated by @andreiltd in hyperlight-dev/hyperlight#1793, hyperlight-dev/hyperlight#1794, and hyperlight-dev/hyperlight#1891

Breaking: VirtqProducer::reset and GuestContext::prepare_snapshot are unsafe. Peers must stay stopped with no live consumer-side chain handles until their consumers are reset or replaced by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Breaking: Snapshot checkpoints reject host function calls. Violations poison the sandbox by @andreiltd in hyperlight-dev/hyperlight#1896

Sandbox is the primary initialized sandbox type and is reached through hyperlight_host::Sandbox or hyperlight_host::sandbox::Sandbox. MultiUseSandbox remains as a deprecated alias, and sandbox::initialized_multi_use remains as a deprecated public path by @jprendes in hyperlight-dev/hyperlight#1866

hyperlight_guest_bin::exception::arch, previously available on amd64 only, has been deprecated in favour of the new architecture-independent exception handling hooks. The new interfaces are significantly more limited, but more portable; they will be extended in the future by @syntactically in hyperlight-dev/hyperlight#1877

ELF loading respects program header virtual addresses for non-PIE guest binaries by @cshung in hyperlight-dev/hyperlight#1530

Host virtqueue access uses checked copies and atomics across mapped scratch. Snapshot admission checks geometry, canonical rings, and distinct, aligned H2G pool slots. Consumers validate descriptors and payload accesses during use by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Virtqueue producers use concrete SlotPool allocation and BufferLease ownership. BufferMap supplies complete owners exposing initialized bytes by @andreiltd in hyperlight-dev/hyperlight#1793

ChainBuilder::build() allocates readable and writable requests. writable_avail() reserves available upper-tier slots within the descriptor budget. It may add zero slots to a nonempty chain by @andreiltd in hyperlight-dev/hyperlight#1793

Guest transport aliases follow buffer ownership. Restored buffers keep captured backing while their scratch slots become reusable by @andreiltd in hyperlight-dev/hyperlight#1891

Running snapshots checkpoint dirty virtqueues before capture. Ordinary calls keep their deferred result path by @andreiltd in hyperlight-dev/hyperlight#1794

Keep registered Rust guest return values typed until transport encoding so external byte results avoid intermediate FlatBuffer copies by @andreiltd in hyperlight-dev/hyperlight#1794

Use the reclaimed stack pages to raise the default G2H and H2G pools to 12 and 8 pages by @andreiltd in hyperlight-dev/hyperlight#1794

C guests may omit c_guest_dispatch_function when they do not need custom fallback dispatch by @ludfjig in hyperlight-dev/hyperlight#1848

Expose C guest ByteChunks values as pointer and length arrays, and return typed hl_ReturnValue objects from C guest functions through hl_result_from_* constructors by @andreiltd in hyperlight-dev/hyperlight#1792

Guest tracing skips its per-call and per-callsite work while the guest log level is OFF. hyperlight_guest_tracing::is_trace_enabled reports whether the configured level is above OFF rather than whether the tracing state was allocated by @jprendes in hyperlight-dev/hyperlight#1840

MSHV: vCPU creation reads the partition's XSAVE format once. This removes one hypercall from every restore by @ludfjig in hyperlight-dev/hyperlight#1912

Removed

Legacy stack I/O, its GuestHandle methods, and its sandbox configuration and builder options by @andreiltd in hyperlight-dev/hyperlight#1794

Embedded byte payload tables and their value-union variants by @andreiltd in hyperlight-dev/hyperlight#1794

RunPool and the run-specific AllocError::InvalidAlign variant by @andreiltd in hyperlight-dev/hyperlight#1793

Fixed

Reserve 48 KiB for guest exception stacks and metadata to cover debug paging walks by @andreiltd in hyperlight-dev/hyperlight#1891

AMD64 exception handlers clear the direction flag before calling Rust by @andreiltd in hyperlight-dev/hyperlight#1882

Use a stronger TLB invalidation barrier when updating guest page tables by @syntactically in hyperlight-dev/hyperlight#1876

The gdb feature is now a no-op in release builds by @ludfjig in hyperlight-dev/hyperlight#1886

Use checked arithmetic and conversions in push_buffer as defense in depth by @JM00NJ in hyperlight-dev/hyperlight#1820 and hyperlight-dev/hyperlight#1825

Use a 16 KiB-aligned default scratch size for Apple Silicon compatibility by @andreiltd in hyperlight-dev/hyperlight#1793

Guest virtqueue copies reject overlapping buffers before accessing memory by @andreiltd in hyperlight-dev/hyperlight#1793

Linear-time segment consumption for fragmented virtqueue messages by @andreiltd in hyperlight-dev/hyperlight#1794

Allow reclaimed virtqueue completions to span multiple ring reuse cycles by @andreiltd in hyperlight-dev/hyperlight#1794

... (truncated)

Changelog

Sourced from hyperlight-common's changelog.

[v0.18.0] - 2026-10-13

Added

Windows on ARM64 support using the WHP backend by @cshung in hyperlight-dev/hyperlight#1638

Virtqueue-based host-guest communication. Per-direction virtqueue configuration is available through SandboxConfiguration and SandboxBuilder, with allocations included in scratch sizing by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Shared virtqueue framing with a 12-byte MsgHeader and external byte values, plus ExternalValueSource implementations for RecvChain and Segments by @andreiltd in hyperlight-dev/hyperlight#1792, hyperlight-dev/hyperlight#1793, and hyperlight-dev/hyperlight#1794

Producer batch completion without notification, and segmented payload assembly and extraction without flattening by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

MailboxValue, which defines the transport mailbox's allowed wire values, and virtq::canonical::validate_canon_prefix, which validates a bounded available descriptor prefix by @andreiltd in hyperlight-dev/hyperlight#1891

Retained guest Bytes and ByteChunks preserve contents and pointers across snapshot capture, restore, and cloning by @andreiltd in hyperlight-dev/hyperlight#1891

Namespaced application metadata on immutable snapshots by @ludfjig in hyperlight-dev/hyperlight#1860

Support overriding the guest log level when building or restoring initialized snapshots by @jprendes in hyperlight-dev/hyperlight#1833

Guest paging operations and AArch64 system-register macros in hyperlight-guest by @andreiltd in hyperlight-dev/hyperlight#1889

Architecture-independent page fault and undefined instruction exception hooks in hyperlight-guest-bin by @syntactically in hyperlight-dev/hyperlight#1877

Guest virtual memory support for lazily zero-initialized regions and in-place mapping modification by @syntactically in hyperlight-dev/hyperlight#1873 and hyperlight-dev/hyperlight#1874

Changed

Breaking: All guest logs and host and guest function calls now go through virtqueues. Virtqueue rings and pools occupy host-owned scratch before page tables, and canonical virtqueue rings are stored in versioned OCI transport layers. Retained-buffer checkpoints use ABI 6 and config schema v3, which rejects snapshots without transport state. Existing snapshots must be regenerated by @andreiltd in hyperlight-dev/hyperlight#1793, hyperlight-dev/hyperlight#1794, and hyperlight-dev/hyperlight#1891

Breaking: VirtqProducer::reset and GuestContext::prepare_snapshot are unsafe. Peers must stay stopped with no live consumer-side chain handles until their consumers are reset or replaced by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Breaking: Snapshot checkpoints reject host function calls. Violations poison the sandbox by @andreiltd in hyperlight-dev/hyperlight#1896

Sandbox is the primary initialized sandbox type and is reached through hyperlight_host::Sandbox or hyperlight_host::sandbox::Sandbox. MultiUseSandbox remains as a deprecated alias, and sandbox::initialized_multi_use remains as a deprecated public path by @jprendes in hyperlight-dev/hyperlight#1866

hyperlight_guest_bin::exception::arch, previously available on amd64 only, has been deprecated in favour of the new architecture-independent exception handling hooks. The new interfaces are significantly more limited, but more portable; they will be extended in the future by @syntactically in hyperlight-dev/hyperlight#1877

ELF loading respects program header virtual addresses for non-PIE guest binaries by @cshung in hyperlight-dev/hyperlight#1530

Host virtqueue access uses checked copies and atomics across mapped scratch. Snapshot admission checks geometry, canonical rings, and distinct, aligned H2G pool slots. Consumers validate descriptors and payload accesses during use by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Virtqueue producers use concrete SlotPool allocation and BufferLease ownership. BufferMap supplies complete owners exposing initialized bytes by @andreiltd in hyperlight-dev/hyperlight#1793

ChainBuilder::build() allocates readable and writable requests. writable_avail() reserves available upper-tier slots within the descriptor budget. It may add zero slots to a nonempty chain by @andreiltd in hyperlight-dev/hyperlight#1793

Guest transport aliases follow buffer ownership. Restored buffers keep captured backing while their scratch slots become reusable by @andreiltd in hyperlight-dev/hyperlight#1891

Running snapshots checkpoint dirty virtqueues before capture. Ordinary calls keep their deferred result path by @andreiltd in hyperlight-dev/hyperlight#1794

Keep registered Rust guest return values typed until transport encoding so external byte results avoid intermediate FlatBuffer copies by @andreiltd in hyperlight-dev/hyperlight#1794

Use the reclaimed stack pages to raise the default G2H and H2G pools to 12 and 8 pages by @andreiltd in hyperlight-dev/hyperlight#1794

C guests may omit c_guest_dispatch_function when they do not need custom fallback dispatch by @ludfjig in hyperlight-dev/hyperlight#1848

Expose C guest ByteChunks values as pointer and length arrays, and return typed hl_ReturnValue objects from C guest functions through hl_result_from_* constructors by @andreiltd in hyperlight-dev/hyperlight#1792

Guest tracing skips its per-call and per-callsite work while the guest log level is OFF. hyperlight_guest_tracing::is_trace_enabled reports whether the configured level is above OFF rather than whether the tracing state was allocated by @jprendes in hyperlight-dev/hyperlight#1840

MSHV: vCPU creation reads the partition's XSAVE format once. This removes one hypercall from every restore by @ludfjig in hyperlight-dev/hyperlight#1912

Removed

Legacy stack I/O, its GuestHandle methods, and its sandbox configuration and builder options by @andreiltd in hyperlight-dev/hyperlight#1794

Embedded byte payload tables and their value-union variants by @andreiltd in hyperlight-dev/hyperlight#1794

RunPool and the run-specific AllocError::InvalidAlign variant by @andreiltd in hyperlight-dev/hyperlight#1793

Fixed

Reserve 48 KiB for guest exception stacks and metadata to cover debug paging walks by @andreiltd in hyperlight-dev/hyperlight#1891

AMD64 exception handlers clear the direction flag before calling Rust by @andreiltd in hyperlight-dev/hyperlight#1882

Use a stronger TLB invalidation barrier when updating guest page tables by @syntactically in hyperlight-dev/hyperlight#1876

The gdb feature is now a no-op in release builds by @ludfjig in hyperlight-dev/hyperlight#1886

Use checked arithmetic and conversions in push_buffer as defense in depth by @JM00NJ in hyperlight-dev/hyperlight#1820 and hyperlight-dev/hyperlight#1825

Use a 16 KiB-aligned default scratch size for Apple Silicon compatibility by @andreiltd in hyperlight-dev/hyperlight#1793

Guest virtqueue copies reject overlapping buffers before accessing memory by @andreiltd in hyperlight-dev/hyperlight#1793

Linear-time segment consumption for fragmented virtqueue messages by @andreiltd in hyperlight-dev/hyperlight#1794

Allow reclaimed virtqueue completions to span multiple ring reuse cycles by @andreiltd in hyperlight-dev/hyperlight#1794

Virtqueue consumers return errors when payload copies or runtime bookkeeping cannot be allocated by @andreiltd in hyperlight-dev/hyperlight#1794

... (truncated)

Commits

e3fe1cc chore: prepare release v0.18.0 (#1930)
ad05110 feat: restrict guest capabilities during snapshot checkpoint (#1896)
f24ef05 feat: preserve virtual queue buffers across snapshots (#1891)
c5fff8c chore(deps): bump libc from 0.2.189 to 0.2.190 (#1919)
92d24d7 chore(deps): bump cc from 1.5.1 to 1.6.0 (#1922)
ee14bc3 chore(deps): bump wat from 1.260.0 to 1.261.0 (#1923)
dcb53c0 Save sysroot and Coverage caches only on main (#1913)
9f7cfba Hoist the XCOMP_BV read into MSHV vCPU creation (#1912)
558732b Remove cargo home chown steps (#1911)
ed9e394 chore(deps): bump lazy_static from 1.5.0 to 1.5.1 (#1915)
Additional commits viewable in compare view

Updates hyperlight-guest-bin from 0.17.0 to 0.18.0

Release notes

Sourced from hyperlight-guest-bin's releases.

Release v0.18.0

What's Changed

Added

Windows on ARM64 support using the WHP backend by @cshung in hyperlight-dev/hyperlight#1638

Virtqueue-based host-guest communication. Per-direction virtqueue configuration is available through SandboxConfiguration and SandboxBuilder, with allocations included in scratch sizing by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Shared virtqueue framing with a 12-byte MsgHeader and external byte values, plus ExternalValueSource implementations for RecvChain and Segments by @andreiltd in hyperlight-dev/hyperlight#1792, hyperlight-dev/hyperlight#1793, and hyperlight-dev/hyperlight#1794

Producer batch completion without notification, and segmented payload assembly and extraction without flattening by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

MailboxValue, which defines the transport mailbox's allowed wire values, and virtq::canonical::validate_canon_prefix, which validates a bounded available descriptor prefix by @andreiltd in hyperlight-dev/hyperlight#1891

Retained guest Bytes and ByteChunks preserve contents and pointers across snapshot capture, restore, and cloning by @andreiltd in hyperlight-dev/hyperlight#1891

Namespaced application metadata on immutable snapshots by @ludfjig in hyperlight-dev/hyperlight#1860

Support overriding the guest log level when building or restoring initialized snapshots by @jprendes in hyperlight-dev/hyperlight#1833

Guest paging operations and AArch64 system-register macros in hyperlight-guest by @andreiltd in hyperlight-dev/hyperlight#1889

Architecture-independent page fault and undefined instruction exception hooks in hyperlight-guest-bin by @syntactically in hyperlight-dev/hyperlight#1877

Guest virtual memory support for lazily zero-initialized regions and in-place mapping modification by @syntactically in hyperlight-dev/hyperlight#1873 and hyperlight-dev/hyperlight#1874

Changed

Breaking: All guest logs and host and guest function calls now go through virtqueues. Virtqueue rings and pools occupy host-owned scratch before page tables, and canonical virtqueue rings are stored in versioned OCI transport layers. Retained-buffer checkpoints use ABI 6 and config schema v3, which rejects snapshots without transport state. Existing snapshots must be regenerated by @andreiltd in hyperlight-dev/hyperlight#1793, hyperlight-dev/hyperlight#1794, and hyperlight-dev/hyperlight#1891

Breaking: VirtqProducer::reset and GuestContext::prepare_snapshot are unsafe. Peers must stay stopped with no live consumer-side chain handles until their consumers are reset or replaced by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Breaking: Snapshot checkpoints reject host function calls. Violations poison the sandbox by @andreiltd in hyperlight-dev/hyperlight#1896

Sandbox is the primary initialized sandbox type and is reached through hyperlight_host::Sandbox or hyperlight_host::sandbox::Sandbox. MultiUseSandbox remains as a deprecated alias, and sandbox::initialized_multi_use remains as a deprecated public path by @jprendes in hyperlight-dev/hyperlight#1866

hyperlight_guest_bin::exception::arch, previously available on amd64 only, has been deprecated in favour of the new architecture-independent exception handling hooks. The new interfaces are significantly more limited, but more portable; they will be extended in the future by @syntactically in hyperlight-dev/hyperlight#1877

ELF loading respects program header virtual addresses for non-PIE guest binaries by @cshung in hyperlight-dev/hyperlight#1530

Host virtqueue access uses checked copies and atomics across mapped scratch. Snapshot admission checks geometry, canonical rings, and distinct, aligned H2G pool slots. Consumers validate descriptors and payload accesses during use by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Virtqueue producers use concrete SlotPool allocation and BufferLease ownership. BufferMap supplies complete owners exposing initialized bytes by @andreiltd in hyperlight-dev/hyperlight#1793

ChainBuilder::build() allocates readable and writable requests. writable_avail() reserves available upper-tier slots within the descriptor budget. It may add zero slots to a nonempty chain by @andreiltd in hyperlight-dev/hyperlight#1793

Guest transport aliases follow buffer ownership. Restored buffers keep captured backing while their scratch slots become reusable by @andreiltd in hyperlight-dev/hyperlight#1891

Running snapshots checkpoint dirty virtqueues before capture. Ordinary calls keep their deferred result path by @andreiltd in hyperlight-dev/hyperlight#1794

Keep registered Rust guest return values typed until transport encoding so external byte results avoid intermediate FlatBuffer copies by @andreiltd in hyperlight-dev/hyperlight#1794

Use the reclaimed stack pages to raise the default G2H and H2G pools to 12 and 8 pages by @andreiltd in hyperlight-dev/hyperlight#1794

C guests may omit c_guest_dispatch_function when they do not need custom fallback dispatch by @ludfjig in hyperlight-dev/hyperlight#1848

Expose C guest ByteChunks values as pointer and length arrays, and return typed hl_ReturnValue objects from C guest functions through hl_result_from_* constructors by @andreiltd in hyperlight-dev/hyperlight#1792

Guest tracing skips its per-call and per-callsite work while the guest log level is OFF. hyperlight_guest_tracing::is_trace_enabled reports whether the configured level is above OFF rather than whether the tracing state was allocated by @jprendes in hyperlight-dev/hyperlight#1840

MSHV: vCPU creation reads the partition's XSAVE format once. This removes one hypercall from every restore by @ludfjig in hyperlight-dev/hyperlight#1912

Removed

Legacy stack I/O, its GuestHandle methods, and its sandbox configuration and builder options by @andreiltd in hyperlight-dev/hyperlight#1794

Embedded byte payload tables and their value-union variants by @andreiltd in hyperlight-dev/hyperlight#1794

RunPool and the run-specific AllocError::InvalidAlign variant by @andreiltd in hyperlight-dev/hyperlight#1793

Fixed

Reserve 48 KiB for guest exception stacks and metadata to cover debug paging walks by @andreiltd in hyperlight-dev/hyperlight#1891

AMD64 exception handlers clear the direction flag before calling Rust by @andreiltd in hyperlight-dev/hyperlight#1882

Use a stronger TLB invalidation barrier when updating guest page tables by @syntactically in hyperlight-dev/hyperlight#1876

The gdb feature is now a no-op in release builds by @ludfjig in hyperlight-dev/hyperlight#1886

Use checked arithmetic and conversions in push_buffer as defense in depth by @JM00NJ in hyperlight-dev/hyperlight#1820 and hyperlight-dev/hyperlight#1825

Use a 16 KiB-aligned default scratch size for Apple Silicon compatibility by @andreiltd in hyperlight-dev/hyperlight#1793

Guest virtqueue copies reject overlapping buffers before accessing memory by @andreiltd in hyperlight-dev/hyperlight#1793

Linear-time segment consumption for fragmented virtqueue messages by @andreiltd in hyperlight-dev/hyperlight#1794

Allow reclaimed virtqueue completions to span multiple ring reuse cycles by @andreiltd in hyperlight-dev/hyperlight#1794

... (truncated)

Changelog

Sourced from hyperlight-guest-bin's changelog.

[v0.18.0] - 2026-10-13

Added

Windows on ARM64 support using the WHP backend by @cshung in hyperlight-dev/hyperlight#1638

Virtqueue-based host-guest communication. Per-direction virtqueue configuration is available through SandboxConfiguration and SandboxBuilder, with allocations included in scratch sizing by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Shared virtqueue framing with a 12-byte MsgHeader and external byte values, plus ExternalValueSource implementations for RecvChain and Segments by @andreiltd in hyperlight-dev/hyperlight#1792, hyperlight-dev/hyperlight#1793, and hyperlight-dev/hyperlight#1794

Producer batch completion without notification, and segmented payload assembly and extraction without flattening by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

MailboxValue, which defines the transport mailbox's allowed wire values, and virtq::canonical::validate_canon_prefix, which validates a bounded available descriptor prefix by @andreiltd in hyperlight-dev/hyperlight#1891

Retained guest Bytes and ByteChunks preserve contents and pointers across snapshot capture, restore, and cloning by @andreiltd in hyperlight-dev/hyperlight#1891

Namespaced application metadata on immutable snapshots by @ludfjig in hyperlight-dev/hyperlight#1860

Support overriding the guest log level when building or restoring initialized snapshots by @jprendes in hyperlight-dev/hyperlight#1833

Guest paging operations and AArch64 system-register macros in hyperlight-guest by @andreiltd in hyperlight-dev/hyperlight#1889

Architecture-independent page fault and undefined instruction exception hooks in hyperlight-guest-bin by @syntactically in hyperlight-dev/hyperlight#1877

Guest virtual memory support for lazily zero-initialized regions and in-place mapping modification by @syntactically in hyperlight-dev/hyperlight#1873 and hyperlight-dev/hyperlight#1874

Changed

Breaking: All guest logs and host and guest function calls now go through virtqueues. Virtqueue rings and pools occupy host-owned scratch before page tables, and canonical virtqueue rings are stored in versioned OCI transport layers. Retained-buffer checkpoints use ABI 6 and config schema v3, which rejects snapshots without transport state. Existing snapshots must be regenerated by @andreiltd in hyperlight-dev/hyperlight#1793, hyperlight-dev/hyperlight#1794, and hyperlight-dev/hyperlight#1891

Breaking: VirtqProducer::reset and GuestContext::prepare_snapshot are unsafe. Peers must stay stopped with no live consumer-side chain handles until their consumers are reset or replaced by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Breaking: Snapshot checkpoints reject host function calls. Violations poison the sandbox by @andreiltd in hyperlight-dev/hyperlight#1896

Sandbox is the primary initialized sandbox type and is reached through hyperlight_host::Sandbox or hyperlight_host::sandbox::Sandbox. MultiUseSandbox remains as a deprecated alias, and sandbox::initialized_multi_use remains as a deprecated public path by @jprendes in hyperlight-dev/hyperlight#1866

hyperlight_guest_bin::exception::arch, previously available on amd64 only, has been deprecated in favour of the new architecture-independent exception handling hooks. The new interfaces are significantly more limited, but more portable; they will be extended in the future by @syntactically in hyperlight-dev/hyperlight#1877

ELF loading respects program header virtual addresses for non-PIE guest binaries by @cshung in hyperlight-dev/hyperlight#1530

Host virtqueue access uses checked copies and atomics across mapped scratch. Snapshot admission checks geometry, canonical rings, and distinct, aligned H2G pool slots. Consumers validate descriptors and payload accesses during use by @andreiltd in hyperlight-dev/hyperlight#1793 and hyperlight-dev/hyperlight#1794

Virtqueue producers use concrete SlotPool allocation and BufferLease ownership. BufferMap supplies complete owners exposing initialized bytes by @andreiltd in hyperlight-dev/hyperlight#1793

ChainBuilder::build() allocates readable and writable requests. writable_avail() reserves available upper-tier slots within the descriptor budget. It may add zero slots to a nonempty chain by @andreiltd in hyperlight-dev/hyperlight#1793

Guest transport aliases follow buffer ownership. Restored buffers keep captured backing while their scratch slots become reusable by @andreiltd in hyperlight-dev/hyperlight#1891

Running snapshots checkpoint dirty virtqueues before capture. Ordinary calls keep their deferred result path by @andreiltd in hyperlight-dev/hyperlight#1794

Keep registered Rust guest return values typed until transport encoding so external byte results avoid intermediate FlatBuffer copies by @andreiltd in hyperlight-dev/hyperlight#1794

Use the reclaimed stack pages to raise the default G2H and H2G pools to 12 and 8 pages by @andreiltd in hyperlight-dev/hyperlight#1794

C guests may omit c_guest_dispatch_function when they do not need custom fallback dispatch by @ludfjig in hyperlight-dev/hyperlight#1848

Expose C guest ByteChunks values as pointer and length arrays, and return typed hl_ReturnValue objects from C guest functions through hl_result_from_* constructors by @andreiltd in hyperlight-dev/hyperlight#1792

Guest tracing skips its per-call and per-callsite work while the guest log level is OFF. hyperlight_guest_tracing::is_trace_enabled reports whether the configured level is above OFF rather than whether the tracing state was allocated by @jprendes in hyperlight-dev/hyperlight#1840

MSHV: vCPU creation reads the partition's XSAVE format once. This removes one hypercall from every restore by @ludfjig in hyperlight-dev/hyperlight#1912

Removed

Legacy stack I/O, its GuestHandle methods, and its sandbox configuration and builder options by @andreiltd in hyperlight-dev/hyperlight#1794

Embedded byte payload tables and their value-union variants by @andreiltd in hyperlight-dev/hyperlight#1794

RunPool and the run-specific AllocError::InvalidAlign variant by @andreiltd in hyperlight-dev/hyperlight#1793

Fixed

Reserve 48 KiB for guest exception stacks and metadata to cover debug paging walks by @andreiltd in hyperlight-dev/hyperlight#1891

AMD64 exception handlers clear the direction flag before calling Rust by @andreiltd in hyperlight-dev/hyperlight#1882

Use a stronger TLB invalidation barrier when updating guest page tables by @syntactically in hyperlight-dev/hyperlight#1876

The gdb feature is now a no-op in release builds by @ludfjig in hyperlight-dev/hyperlight#1886

Use checked arithmetic and conversions in push_buffer as defense in depth by @JM00NJ in hyperlight-dev/hyperlight#1820 and hyperlight-dev/hyperlight#1825

Use a 16 KiB-aligned default scratch size for Apple Silicon compatibility by @andreiltd in hyperlight-dev/hyperlight#1793

Guest virtqueue copies reject overlapping buffers before accessing memory by @andreiltd in hyperlight-dev/hyperlight#1793

Linear-time segment consumption for fragmented virtqueue messages by @andreiltd in hyperlight-dev/hyperlight#1794

Allow reclaimed virtqueue completions to span multiple ring reuse cycles by @andreiltd in hyperlight-dev/hyperlight#1794

Virtqueue consumers return errors when payload copies or runtime bookkeeping cannot be allocated by @andreiltd in hyperlight-dev/hyperlight#1794

... (truncated)

Commits

e3fe1cc chore: prepare release v0.18.0 (#1930)
ad05110 feat: restrict guest capabilities during snapshot checkpoint (#1896)
f24ef05 feat: preserve virtual queue buffers across snapshots (#1891)
c5fff8c chore(deps): bump libc from 0.2.189 to 0.2.190 (#1919)
92d24d7 chore(deps): bump cc from 1.5.1 to 1.6.0 (#1922)
ee14bc3 chore(deps): bump wat from 1.260.0 to 1.261.0 (#1923)
dcb53c0 Save sysroot and Coverage caches only on main (#1913)
9f7cfba Hoist the XCOMP_BV read into MSHV vCPU creation (#1912)
558732b Remove cargo home chown steps (#1911)
ed9e394 chore(deps): bump lazy_static from 1.5.0 to 1.5.1 (#1915)
Additional commits viewable in Description has been truncated

Bumps the hyperlight group with 4 updates in the /src/code-validator/guest directory: [hyperlight-common](https://github.com/hyperlight-dev/hyperlight), [hyperlight-guest-bin](https://github.com/hyperlight-dev/hyperlight), [hyperlight-guest](https://github.com/hyperlight-dev/hyperlight) and [hyperlight-host](https://github.com/hyperlight-dev/hyperlight). Updates `hyperlight-common` from 0.17.0 to 0.18.0 - [Release notes](https://github.com/hyperlight-dev/hyperlight/releases) - [Changelog](https://github.com/hyperlight-dev/hyperlight/blob/main/CHANGELOG.md) - [Commits](hyperlight-dev/hyperlight@v0.17.0...v0.18.0) Updates `hyperlight-guest-bin` from 0.17.0 to 0.18.0 - [Release notes](https://github.com/hyperlight-dev/hyperlight/releases) - [Changelog](https://github.com/hyperlight-dev/hyperlight/blob/main/CHANGELOG.md) - [Commits](hyperlight-dev/hyperlight@v0.17.0...v0.18.0) Updates `hyperlight-guest` from 0.17.0 to 0.18.0 - [Release notes](https://github.com/hyperlight-dev/hyperlight/releases) - [Changelog](https://github.com/hyperlight-dev/hyperlight/blob/main/CHANGELOG.md) - [Commits](hyperlight-dev/hyperlight@v0.17.0...v0.18.0) Updates `hyperlight-host` from 0.17.0 to 0.18.0 - [Release notes](https://github.com/hyperlight-dev/hyperlight/releases) - [Changelog](https://github.com/hyperlight-dev/hyperlight/blob/main/CHANGELOG.md) - [Commits](hyperlight-dev/hyperlight@v0.17.0...v0.18.0) --- updated-dependencies: - dependency-name: hyperlight-common dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyperlight - dependency-name: hyperlight-guest dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyperlight - dependency-name: hyperlight-guest-bin dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyperlight - dependency-name: hyperlight-host dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: hyperlight ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Oct 22, 2026

dependabot Bot force-pushed the dependabot/cargo/src/code-validator/guest/hyperlight-223bdcf059 branch from cba1de3 to 8c6e541 Compare October 23, 2026 03:05

Navigation Menu

Repository navigation

chore(deps): Bump the hyperlight group across 1 directory with 4 updates - #431

chore(deps): Bump the hyperlight group across 1 directory with 4 updates#431
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/src/code-validator/guest/hyperlight-223bdcf059

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release v0.18.0

What's Changed

Added

Changed

Removed

Fixed

[v0.18.0] - 2026-10-13

Added

Changed

Removed

Fixed

Release v0.18.0

What's Changed

Added

Changed

Removed

Fixed

[v0.18.0] - 2026-10-13

Added

Changed

Removed

Fixed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 22, 2026 •

edited

Loading