smolvm

What's Changed

• test: fix macOS portability + tmpfs/wrong-target test bugs; skip unimplemented TCP/53 DNS by @BinSquare in https://github.com/smol-machines/smolvm/pull/449
• feat(net): serve DNS-over-TCP at the virtio-net gateway by @BinSquare in https://github.com/smol-machines/smolvm/pull/450
• fix(api): supervisor PID start-time verification + non-blocking restart scheduling by @BinSquare in https://github.com/smol-machines/smolvm/pull/451
• fix(registry): verify digest-addressed manifest content matches its digest by @BinSquare in https://github.com/smol-machines/smolvm/pull/452
• fix(deps): patch quinn-proto DoS (RUSTSEC-2026-0185) + add cargo-audit CI gate by @BinSquare in https://github.com/smol-machines/smolvm/pull/453
• refactor(fork): carry forkable/snapshot in LaunchFeatures, drop process-global env by @BinSquare in https://github.com/smol-machines/smolvm/pull/455
• feat(serve): fork endpoint + per-VM uid isolation + seccomp/landlock hardening by @BinSquare in https://github.com/smol-machines/smolvm/pull/456
• feat(embedded): forkable start + fork in embedded runtime; watchdog opt-out by @BinSquare in https://github.com/smol-machines/smolvm/pull/458
• fix(run): local --image works with init; truthful image-ingest errors (#459) by @BinSquare in https://github.com/smol-machines/smolvm/pull/460
• feat(net): custom DNS resolver (--dns) for TSI and virtio-net backends by @BinSquare in https://github.com/smol-machines/smolvm/pull/461
• fix(registry): upload blobs in a single streamed request by @BinSquare in https://github.com/smol-machines/smolvm/pull/462
• bump: v1.2.5 by @BinSquare in https://github.com/smol-machines/smolvm/pull/463

Full Changelog: https://github.com/smol-machines/smolvm/compare/v1.2.4...v1.2.5