This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryAdded pullrun images command for listing local DAG store images.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds `pullrun images` CLI command to list pulled images. Adds `pullrun images` CLI command to list pulled images. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
Adds `pullrun compose` subcommand delegating to `pullrun-compose` binary. Adds `pullrun compose` subcommand delegating to `pullrun-compose` binary. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Bumps version to 0.6.1 for Go CLI, Rust workspace, and MCP server. Bumps version to 0.6.1 for Go CLI, Rust workspace, and MCP server. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes `pullrun exec` to return NotFound for missing workload IDs. Fixes `pullrun exec` to return NotFound for missing workload IDs. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes `pullrun login` to validate credentials before saving. Fixes `pullrun login` to validate credentials before saving. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fixes `pullrun build` to resolve paths client‑side before sending to daemon. Fixes `pullrun build` to resolve paths client‑side before sending to daemon. Source: llm_adapter@2026-07-15 Confidence: low |
— |
| Bugfix | Low |
Fixes terminal restore on macOS using direct termios ioctl. Fixes terminal restore on macOS using direct termios ioctl. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Low |
Improves `install.sh` robustness for binary lookup in flat‑root and bin/ layouts. Improves `install.sh` robustness for binary lookup in flat‑root and bin/ layouts. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Low |
Resolves Dockerfile and context paths client‑side in `pullrun build`. Resolves Dockerfile and context paths client‑side in `pullrun build`. Source: granite4.1:30b@2026-07-15-audit Confidence: low |
— |
Full changelog
Features
pullrun images— new CLI command to list pulled images in the local DAG store, with table and--jsonoutput. Reuses the existingListImagesgRPC RPC.pullrun composesubcommand — delegates to thepullrun-composebinary. Global flags (--direct,--socket,--server) are automatically stripped before delegation.
Fixes
pullrun execreturns proper NotFound for missing IDs — added workload existence pre-check inexec_in_workloadbefore dispatching to the executor.pullrun loginvalidates credentials before saving — pings the registry's/v2/endpoint and rejects 401/403 responses. Interactive prompt added when no flags supplied.pullrun buildresolves paths client-side — Dockerfile and context directory paths are now resolved to absolute paths before being sent to the daemon.- All Dockerfile and flag errors fixed in docs —
build,push,save/load,attach,compose,config create,secret create, andprunenow document the correct syntax. - Terminal restore on macOS — replaced
term.MakeRaw/Restorewith direct termios ioctl; restore order fixed so shell prompt appears without pressing Enter. install.shrobust binary lookup — handles both flat-root andbin/tarball layouts.
Housekeeping
- Bumped version to 0.6.1 (Go CLI, Rust workspace, MCP server).
- Updated CHANGELOG.md.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pullrun
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]