Dstack v0.5.4
·
195 commits
to master
since this release
dstack v0.5.4 Release Notes
Critical Security Update
- Fixed LUKS header validation vulnerability (GHSA-jxq2-hpw3-m5wf)
Major Features & Improvements
Enhanced SDK Support
- sdk/js: browser compatible - JavaScript SDK now works in web browsers without Node.js
- sdk/rust: implement borsh serialization - Added Borsh support and Debug traits for all public types
- sdk/rust: break up dstack-sdk into two crates - Separated client and types for no_std compatibility
- sdk/python - Added async/await support and improved API compatibility
Performance & Infrastructure
- cvm: Support for more than 255 CPUs - Removed hardware CPU count limitations
- vmm: Added one-shot VM mode - VMs automatically terminate after task completion
- gateway: Add gRPC support for TLS termination proxy - Enhanced protocol support
- vmm: Support for using passt as network egress - Alternative to traditional TAP networking
Developer Experience
- Comprehensive documentation updates including:
- Security audit report and documentation
- Contributing guidelines (CONTRIBUTING.md)
- Git-cliff based changelog generation
- Media kit and branding updates
- SPDX license annotations throughout codebase
- GitHub Actions for automated gateway/KMS releases
Technical Improvements
Gateway & Networking
- gateway: Fix reserved ip allocation - Resolved IP address assignment conflicts
- gateway: Add api for evidences - New endpoint for cryptographic evidence collection
- gateway: Add 0.3.x compatibility custom domain dns prefix - Backward compatibility for legacy domains
- gateway: Remove duplicate node IP address - Fixed network configuration redundancy
VM Management
- kms: ACPI Tables Dynamic Generation - Runtime ACPI table creation for better hardware compatibility
- vmm-cli: Add --stopped and --user-config - New CLI options for VM state management
- vmm: Allow updating non-kms VMs - Support for updating VMs without KMS integration
- vmm: remove max disk size limit - Removed artificial storage constraints
Build & Dependencies
- build(deps): bump tokio from 1.44.1 to 1.46.1 - Updated async runtime with performance improvements
- Add reproducible docker image builder for KMS - Deterministic builds for security verification
- build(deps): Security patches - Updated elliptic, axios, sha.js via automated dependency management
- prpc: Move generated files to OUT_DIR - Improved build artifact organization
Project Growth
- 12 new contributors joined the project
- 70+ pull requests merged
- Enhanced testing with comprehensive feature coverage
- Improved documentation and developer guides
New Contributors
Welcome to our new community members:
Resources
- Full Changelog: v0.5.3...v0.5.4
- Security Advisory: GHSA-jxq2-hpw3-m5wf
- Documentation: Dstack Docs
Contributors
pbeza, shelvenzhou, and 6 other contributors