This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
Affected surfaces
ReleasePort's take
Moderate signalv0.18.0 fixes three core snapshot generation bugs (all-zero block handling, kcore PT_LOAD gap traversal, v1/v2 block chunking) and upgrades to GA Azure SDK.
Why it matters: Upgrade if using kcore snapshots or Azure integration to fix stability gaps. GA Azure SDK reduces maintenance surface. Test in staging first.
Summary
AI summaryMinor fixes and improvements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Bump openssl from 0.10.75 to 0.10.78 Bump openssl from 0.10.75 to 0.10.78 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Feature | Medium |
update azure blob upload support to use azure_storage_blob update azure blob upload support to use azure_storage_blob Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
update to GA Azure SDK update to GA Azure SDK Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
Add #[from] to snapshot::Error::Elf Add #[from] to snapshot::Error::Elf Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
Return UploadPlan struct from upload_parameters Return UploadPlan struct from upload_parameters Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Feature | Medium |
Document what MAX_BLOCK_SIZE controls Document what MAX_BLOCK_SIZE controls Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Feature | Medium |
Differentiate MAX_CONCURRENCY and DEFAULT_CONCURRENCY doc comments Differentiate MAX_CONCURRENCY and DEFAULT_CONCURRENCY doc comments Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Dependency | Medium |
Bump libc from 0.2.182 to 0.2.183 Bump libc from 0.2.182 to 0.2.183 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Bump clap from 4.5.60 to 4.6.0 Bump clap from 4.5.60 to 4.6.0 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Bump insta from 1.46.3 to 1.47.2 Bump insta from 1.46.3 to 1.47.2 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Bump actions/upload-artifact from 7.0.0 to 7.0.1 Bump actions/upload-artifact from 7.0.0 to 7.0.1 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Bump tokio from 1.52.1 to 1.52.2 Bump tokio from 1.52.1 to 1.52.2 Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Dependency | Medium |
Trim and gate dependencies Trim and gate dependencies Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Performance | Medium |
Rewrite merge_ranges as a linear fold Rewrite merge_ranges as a linear fold Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Performance | Medium |
Use PT_LOAD p_paddr directly when translating /proc/kcore segments Use PT_LOAD p_paddr directly when translating /proc/kcore segments Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Performance | Medium |
Cache Cargo state in the lint job Cache Cargo state in the lint job Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Bugfix | Medium |
fix handling blocks of all zeros fix handling blocks of all zeros Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
address lints in latest rust address lints in latest rust Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Emit kcore intersections that straddle PT_LOAD gaps Emit kcore intersections that straddle PT_LOAD gaps Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Resolve iomem test fixtures via CARGO_MANIFEST_DIR Resolve iomem test fixtures via CARGO_MANIFEST_DIR Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Convert tuple error variants to named-field structs Convert tuple error variants to named-field structs Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Preserve the source error from Image::write_blocks Preserve the source error from Image::write_blocks Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Use tempfile::TempDir in test_progress_stream_reset Use tempfile::TempDir in test_progress_stream_reset Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Bugfix | Medium |
Unify block chunking across v1 and v2 in copy_block Unify block chunking across v1 and v2 in copy_block Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Refactor | Medium |
Use #[tokio::main] instead of hand-rolled Runtime::new().block_on() Use #[tokio::main] instead of hand-rolled Runtime::new().block_on() Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high |
— |
| Refactor | Medium |
Use #[expect] instead of #[allow] for clippy lint overrides Use #[expect] instead of #[allow] for clippy lint overrides Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Refactor | Medium |
Hoist clippy lint config into Cargo.toml Hoist clippy lint config into Cargo.toml Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
| Refactor | Medium |
Replace try_method! macro with an explicit predicate and inline matches Replace try_method! macro with an explicit predicate and inline matches Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low |
— |
Full changelog
What's Changed
- Bump libc from 0.2.182 to 0.2.183 by @dependabot[bot] in https://github.com/microsoft/avml/pull/758
- Bump clap from 4.5.60 to 4.6.0 by @dependabot[bot] in https://github.com/microsoft/avml/pull/759
- fix handling blocks of all zeros by @demoray in https://github.com/microsoft/avml/pull/761
- Bump insta from 1.46.3 to 1.47.2 by @dependabot[bot] in https://github.com/microsoft/avml/pull/765
- Bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/microsoft/avml/pull/770
- Bump openssl from 0.10.75 to 0.10.78 by @dependabot[bot] in https://github.com/microsoft/avml/pull/776
- address lints in latest rust by @demoray in https://github.com/microsoft/avml/pull/777
- update dependencies by @demoray in https://github.com/microsoft/avml/pull/778
- update azure blob upload support to use azure_storage_blob by @demoray in https://github.com/microsoft/avml/pull/762
- Bump tokio from 1.52.1 to 1.52.2 by @dependabot[bot] in https://github.com/microsoft/avml/pull/779
- Bump openssl from 0.10.78 to 0.10.79 by @dependabot[bot] in https://github.com/microsoft/avml/pull/780
- Bump tokio from 1.52.2 to 1.52.3 by @dependabot[bot] in https://github.com/microsoft/avml/pull/781
- update to GA Azure SDK by @demoray in https://github.com/microsoft/avml/pull/784
- Use #[expect] instead of #[allow] for clippy lint overrides by @demoray in https://github.com/microsoft/avml/pull/785
- Emit kcore intersections that straddle PT_LOAD gaps by @demoray in https://github.com/microsoft/avml/pull/789
- Resolve iomem test fixtures via CARGO_MANIFEST_DIR by @demoray in https://github.com/microsoft/avml/pull/791
- Document what MAX_BLOCK_SIZE controls by @demoray in https://github.com/microsoft/avml/pull/792
- Hoist clippy lint config into Cargo.toml by @demoray in https://github.com/microsoft/avml/pull/793
- Convert tuple error variants to named-field structs by @demoray in https://github.com/microsoft/avml/pull/786
- Rewrite merge_ranges as a linear fold by @demoray in https://github.com/microsoft/avml/pull/787
- Trim and gate dependencies by @demoray in https://github.com/microsoft/avml/pull/790
- Add #[from] to snapshot::Error::Elf by @demoray in https://github.com/microsoft/avml/pull/795
- Preserve the source error from Image::write_blocks by @demoray in https://github.com/microsoft/avml/pull/796
- Cache Cargo state in the lint job by @demoray in https://github.com/microsoft/avml/pull/797
- Use #[tokio::main] instead of hand-rolled Runtime::new().block_on() by @demoray in https://github.com/microsoft/avml/pull/788
- Differentiate MAX_CONCURRENCY and DEFAULT_CONCURRENCY doc comments by @demoray in https://github.com/microsoft/avml/pull/798
- Use tempfile::TempDir in test_progress_stream_reset by @demoray in https://github.com/microsoft/avml/pull/800
- Replace try_method! macro with an explicit predicate and inline matches by @demoray in https://github.com/microsoft/avml/pull/801
- Return UploadPlan struct from upload_parameters by @demoray in https://github.com/microsoft/avml/pull/799
- Unify block chunking across v1 and v2 in copy_block by @demoray in https://github.com/microsoft/avml/pull/803
- Use PT_LOAD p_paddr directly when translating /proc/kcore segments by @demoray in https://github.com/microsoft/avml/pull/794
- Use named fields on UnableToCreateSnapshotFromSource; escape Raw paths in Display by @demoray in https://github.com/microsoft/avml/pull/802
Full Changelog: https://github.com/microsoft/avml/compare/v0.17.0...v0.18.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]