Pullrun

v0.5.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 15d Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Adds nftables FirewallBackend trait with auto-detection and bridge NAT support.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds nftables support for bridge NAT via FirewallBackend trait Adds nftables support for bridge NAT via FirewallBackend trait Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Adds IptablesBackend porting existing iptables logic to the FirewallBackend trait Adds IptablesBackend porting existing iptables logic to the FirewallBackend trait Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Adds NftablesBackend providing equivalent rules using nft -f atomic transactions Adds NftablesBackend providing equivalent rules using nft -f atomic transactions Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Medium	Adds detect_backend() to auto‑detect nftables or iptables at daemon startup Adds detect_backend() to auto‑detect nftables or iptables at daemon startup Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes IPv6 loopback fallback for VPN in sync tests Fixes IPv6 loopback fallback for VPN in sync tests Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

nftables support for bridge NAT (FirewallBackend trait).
Auto-detects the host firewall backend at daemon startup: nftables
(preferred, modern distros) or iptables (fallback, legacy).
IptablesBackend — ports the existing iptables logic into the trait.
NftablesBackend — equivalent rules via nft -f - atomic transactions.
detect_backend() — probes nft first, then iptables.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Pullrun

Get notified when new releases ship.

About Pullrun