v2.131.0

Bug Fixes

• error log typo (#8353) #8353 (Patrick Balestra)

Commits

• support git submodules (#8311) #8311 (Brandon Duffany)
• 8787add: Fall back to original registry if mirror cannot serve request (#8301) (Dan Stowell) #8301
• ab2982f: Remove unused lru.Metrics method (#8320) (Vanja Pejovic) #8320
• 1d6f4ad: Add a few more debug logs in goinit (#8324) (Vanja Pejovic) #8324
• f424b29: Update debug logging flags in firecracker/README (#8318) (Vanja Pejovic) #8318
• f9fe885: GCS filestore support (#8284) (Tyler Williams) #8284
• 5f69852: Remove unused function from filecache_test (#8322) (Vanja Pejovic) #8322
• d6ad168: Use >= when comparing filesize (#8328) (Tyler Williams) #8328
• 06fd771: New script to manually push multi-platform docker images (#6954) (Zoey Greer) #6954
• 12647a1: periodically trim already-finished tasks from front of the executor queue. (#8297) (jim hollenbach) #8297
• def6975: Fix typo in trimQueue (#8329) (Brandon Duffany) #8329
• 8cf9f14: Don't panic on nil responses (#8330) (Tyler Williams) #8330
• upgrade buildbuddy toolchain and setup bzlmod (#8325) #8325 (Son Luong Ngoc)
• 923eb4d: [RB] Handle retries in the CLI rather than server-side (#8195) (Maggie Lou) #8195
• af8cb33: Update bazel version in firecracker_performance_test (#8323) (Vanja Pejovic) #8323
• Fetch exec logs from invocations (#8251) #8251 (Fabian Meumertzheim)
• Make explain's invocation fetching usable in workflows (#8217) #8217 (Fabian Meumertzheim)
• 625bb68: oci runtime: fix directory ownership when extracting layer tarballs (#8331) (Brandon Duffany) #8331
• ff6f2e7: Add tests for layer entry path validation (#8332) (Brandon Duffany) #8332
• 35047ed: comment out some logspam in raft-dev (#8333) (jim hollenbach) #8333
• 940266d: [SS] Cleanup flags and debug data (#8327) (Maggie Lou) #8327
• a0a2530: Revert "[SS] Cleanup flags and debug data" (#8336) (Maggie Lou) #8336
• 18c879a: Lower tree cache write probability by 10x (#8337) (Tyler Williams) #8337
• e12128e: [Cache Proxy] fix dropped digest log message (#8339) (Iain Macdonald) #8339
• 6b1596b: Dedupe gcs blob writes (#8338) (Tyler Williams) #8338
• 0cb44b4: Actually set the created_from_snapsnot label in the vmexec dial metric (#8340) (Vanja Pejovic) #8340
• a933e22: Reject packets on INPUT chain too (#8346) (Brandon Duffany) #8346
• 3297657: cli/fix: Ignore hidden directories (#8344) (Fabian Meumertzheim) #8344
• 5d22d51: Fix ordering of rules (#8349) (Brandon Duffany) #8349
• 8bb802b: SS] Cleanup flags and debug data - Take 2 (#8341) (Maggie Lou) #8341
• 2e4a7f4: Add flag to allow a subset of private IPs (#8355) (Brandon Duffany) #8355
• 95356d1: Add priority field to workflow action config (#8356) (Brandon Duffany) #8356
• 88fe932: [raft] set error in Entry instead of returning it directly (#8351) (Lulu Zhang) #8351
• 4b9ac68: Add a mechanism for executors to detect registration issues. (#8334) (Vadim Berezniker) #8334
• 80408e7: Reset last ack timestamp on each registration stream. (#8358) (Vadim Berezniker) #8358
• rfpb: Copy non-raft messages to storage proto (#8360) #8360 (Tyler Williams)
• Use existing exec logs for "compare" Bazel button (#8236) #8236 (Fabian Meumertzheim)
• 820a962: Reuse buffer when generating random keys for eviction (#8361) (Tyler Williams) #8361
• bfe0358: Catch exists errors in close too (#8363) (Tyler Williams) #8363
• Distinguish transitive invalidation through tools (#8359) #8359 (Fabian Meumertzheim)
• 8843d87: Restore old behavior (#8382) (Tyler Williams)
• 5eac145: Revert "workflows: support git submodules (#8311)" (#8384) (Brandon Duffany)

v2.127.0

Chores

• Update Go SDK to 1.23.6 (#8313) #8313 (Son Luong Ngoc)

Commits

• 0ff4ad1: Fix flakiness in TestFirecrackerRun_ReapOrphanedZombieProcess (#8294) (Vanja Pejovic) #8294
• fae4e1e: Revert "Switch back to Bazel 7.4.0" (#8292) (Fabian Meumertzheim) #8292
• 3b0463a: Revert bazel 8 upgrade (#8299) (Vadim Berezniker) #8299
• 6a5cc17: sluongng/reapply bazel8 fixed rules k8s (#8300) (Son Luong Ngoc) #8300
• Extract login and flag storage into helper functions (#8249) #8249 (Fabian Meumertzheim)
• Print invocation URLs if available (#8250) #8250 (Fabian Meumertzheim)
• abfb49a: Make prober script easier to run locally (#8302) (Brandon Duffany) #8302
• 5c76716: Fix prettier.sh (#8303) (Brandon Duffany) #8303
• fc30540: Fix prettier.sh again (#8305) (Brandon Duffany) #8305
• c407fc2: [RB] Add support to start from a snapshot key (#8278) (Maggie Lou) #8278
• c1d7854: Add UI button to copy snapshot key from execution details (#8258) (Maggie Lou) #8258
• 017cfa1: Revert "ci_runner: Disable git gc auto detach (#8233)" (#8304) (Brandon Duffany) #8304
• 3ada62b: Add bytes-proxied metrics to BSProxy and CASProxy servers (#8293) (Iain Macdonald) #8293
• 1073dc6: Update Cache Proxy dashboard to include graphs for proxied byte metrics (#8307) (Iain Macdonald) #8307
• ac26e2c: Show org join requests on member page (#8306) (Siggi Simonarson) #8306
• d1b9c87: Configure grpc keepalive enforcement policy for the cli sidecar (#8310) (Siggi Simonarson) #8310
• db3eaac: Fix CAS bytes proxied graph label (#8309) (Iain Macdonald) #8309
• upgrade grpc and vtproto (#8314) #8314 (Son Luong Ngoc)
• fc4006c: Update docs for workflow images (#8312) (Brandon Duffany) #8312
• set git gc.autoDetach to false (#8315) #8315 (Son Luong Ngoc)
• 1fa425a: Remove unnecessary flags from firecracker_test.go (#8317) (Vanja Pejovic) #8317
• adf530d: Delay dialing the VM exec server (#8296) (Vanja Pejovic) #8296
• 15f3c8e: Add a "from_snapshot" dimension to the exec_dial_duration metric (#8319) (Vanja Pejovic) #8319
• a87d224: Don't panic on nil responses (#8330) (Tyler Williams)
• 4511c4c: Update release branch date (Iain Macdonald)

v2.126.0

Commits

• cc8ddaf: Adapt handling of special action IDs to Bazel changes (#8243) (Fabian Meumertzheim) #8243
• f68ffbe: kythe annotations stub (#8253) (Tyler Williams) #8253
• 3d28b70: Stop scoring after 100K docs (#8255) (Tyler Williams) #8255
• 30e4aa3: Show search errors in a better way (#8256) (Tyler Williams) #8256
• 4d454d2: Fix error message for remote bazel button (#8254) (Maggie Lou) #8254
• 8e2346a: Show some perfstats at the bottom of the search page (#8260) (Tyler Williams) #8260
• 3ee33e0: Include content in search request (if requested) (#8262) (Tyler Williams) #8262
• a1d69a1: Fix overlapping snippets (#8264) (Tyler Williams) #8264
• Update to Bazel 8.0.1 (#8076) #8076 (Fabian Meumertzheim)
• bda093b: Ensure that specified versions of core Bazel deps are picked (#8266) (Fabian Meumertzheim) #8266
• 9c6c970: redact non-allowed env vars for unstructured command lines (#8263) (Dan Stowell) #8263
• 402a0f0: OCI registry that can proxy OCI image pulls to remote registries (#8185) (Dan Stowell) #8185
• 4a5b550: Fix buildfix.sh with Bzlmod (#8269) (Fabian Meumertzheim) #8269
• 099e1af: Add gauge metric for open invocation streams (#8268) (Brandon Duffany) #8268
• a41e8d3: Add more logging around workflow artifact uploading (#8261) (Brandon Duffany) #8261
• 0cf0963: Don't panic in kythe (#8271) (Tyler Williams) #8271
• 9afd274: [FC] Add a platform property to specify a snapshot key to start from (#8257) (Maggie Lou) #8257
• badb015: Add a mechanism to disable automatic retries for workflows and remote bazel (#8172) (Maggie Lou) #8172
• 48aa737: Assume the executor is self hosted when it doesn't send aux meta (#8275) (Vanja Pejovic) #8275
• de2db96: Use finer-grained buckets for execution durations (#8276) (Brandon Duffany) #8276
• 6874578: Allow configuration of openai endpoint via flag (#8279) (Siggi Simonarson) #8279
• 2851c4e: Allow overriding of default prompt when requesting suggestions (#8280) (Siggi Simonarson) #8280
• 3215c68: Remove (unused) copy partition flag from pebble cache (#8282) (Tyler Williams) #8282
• 7369d4e: [RB] Add warning when git mirroring generates a large patchset (#8283) (Maggie Lou) #8283
• 85a7d04: Fix invalid UTF-8 when replaying invocation logs (#8287) (Brandon Duffany) #8287
• ccd9ef6: Use default keychain to resolve OCI credentials (#8274) (Brandon Duffany) #8274
• c0a8475: Reuse vmexec connections in firecracker.go (#8277) (Vanja Pejovic) #8277
• 0ebd45c: test case successful only if it has no error/failure/skipped child nodes (#8288) (Dan Stowell) #8288
• 556bdcd: Provide config options to add additional OAuth scopes for OIDC (#8285) (Samy Cherfaoui) #8285
• e586823: Switch back to Bazel 7.4.0 (#8290) (Iain Macdonald) #8290
• e6c1c33: Add stages to the firecracker_stage_duration_usec metric (#8281) (Vanja Pejovic) #8281

v2.125.0

Bump tag v2.124.0 -> v2.125.0 (release.py)

v2.123.0

Commits

• dbde6b1: Fix the time buckets for the firecracker_stage_duration_usec metric (#8203) (Vanja Pejovic) #8203
• 347a145: Clean up runfiles access in checkstyle (#8204) (Fabian Meumertzheim) #8204
• e921402: [raft] don't do extra work on removed zombies (#8214) (Lulu Zhang) #8214
• 6e0cb0b: [raft] seperate out listen addr and grpc addr passed into dragonboat (#8216) (Lulu Zhang) #8216
• d9d19f0: Revert "Clean up runfiles access in checkstyle (#8204)" (#8220) (Tyler Williams) #8220
• 0d40b31: Add us-sjc cluster to go/globalstatus (#8215) (Tyler Williams) #8215
• 9548848: [raft] add metrics to monitor lock time in raft client session (#8219) (Lulu Zhang) #8219
• 2ffa507: remove duplicate 'raft' in metric names (#8223) (Lulu Zhang) #8223
• 6a694db: [raft] update raft dashboards (#8224) (Lulu Zhang) #8224
• 2bdd7f5: Fix '0' rendered in action page (#8227) (Brandon Duffany) #8227
• ce883aa: Allow fuse implementation to download CAS artifacts directly to the filecache. (#8222) (Vadim Berezniker) #8222
• 0d6893f: Reuse common syscall error status objects instead of allocating new ones. (#8200) (Vadim Berezniker) #8200
• d67c4e4: Use authed context when calling cs server (#8225) (Tyler Williams) #8225
• adae568: fix raft zombie graph label (#8230) (Lulu Zhang) #8230

v2.122.0

Commits

• 1a6f978: Delete experimental GitHub Actions runner (#8188) (Brandon Duffany) #8188
• 7020e60: Protect against CPU leaser leaks (#8190) (Tyler Williams) #8190
• f8d6fdf: [raft] Remove data, allow remove data when only range_id is available (#8191) (Lulu Zhang) #8191
• aca8f1e: [raft] log the root dir (#8192) (Lulu Zhang) #8192
• 7374931: [raft] graph (#8193) (Lulu Zhang) #8193
• dd1ee34: Upgrade to rules_go@v0.51.0 and gazelle@v0.41.0 (#8161) (Son Luong Ngoc) #8161
• dcc0cb6: upgrade rules_proto and protobuf (#8194) (Son Luong Ngoc) #8194
• 3567984: Fix context used for accessing CAS artifacts. (#8197) (Vadim Berezniker) #8197
• 4df1ecb: bump github action cache to v4 (#8199) (Dan Stowell) #8199
• d560208: integration/remote_execution_test: increase compute unit (#8205) (Son Luong Ngoc) #8205
• bb6e28a: Redact serialized action (#8201) (Maggie Lou) #8201
• 4b73825: Add a few convenience features to get_executions (#8206) (Brandon Duffany) #8206
• 46a7811: Make TestAuthenticator behave more like OIDC authenticator. (#8196) (Iain Macdonald) #8196
• 8b79bc9: [raft] fix a bug in removeZombie (#8202) (Lulu Zhang) #8202
• 66936b3: Rough draft of a global dashboard (#8209) (Tyler Williams) #8209
• e0318af: Fix pool-name reference in rbe-pools docs (#8211) (Iain Macdonald) #8211
• 26a4fc9: [raft] fix removeDataReq in removeZombie and also add some logging (#8208) (Lulu Zhang) #8208
• 4a352ae: [raft] fix a bug when we remove replica from rd (#8212) (Lulu Zhang) #8212

v2.121.0

Commits

• 61269db: Make it impossible for disabled cpu leaser to leak memory (#8171) (Tyler Williams) #8171
• 56f862c: Use os.Getuid() instead of user.Current() if we only want the uid (#8125) (Zoey Greer) #8125
• 574026e: Remove duplicate comment in tasksize_model.go (#8164) (Vanja Pejovic) #8164
• d7f43ae: Use guest VM stats for peak memory reporting (#8175) (Brandon Duffany) #8175
• e43ea8f: Set action mnemonic for workflows and remote bazel (#8157) (Brandon Duffany) #8157
• c6f74d0: Update containerd for the executor to fix vulnerabilities (#8110) (Zoey Greer) #8110
• 2d3ef5b: Populate self-hosted and region fields in ClickHouse (#8178) (Brandon Duffany) #8178
• 1aceed4: Get last observed memory value from guest too (#8179) (Brandon Duffany) #8179
• 3001823: [raft] refactor zombie clean up code (#8169) (Lulu Zhang) #8169
• e6ca607: Fix hardcoded target in get_executions. (#8180) (Vadim Berezniker) #8180
• d91fe6c: Fix digest parsing in replay_action when specifying an invocaion ID. (#8181) (Vadim Berezniker) #8181
• 1d21d9f: when resolving oci mirror registries, pass the original host (#8177) (Dan Stowell) #8177
• b538379: [raft] forget this place when addressing feedback earlier (#8183) (Lulu Zhang) #8183
• a6ba7df: [raft] don't queue zombie tasks when they are already in queue (#8182) (Lulu Zhang) #8182
• 4987ddd: [raft] add some metrics to monitor zombies (#8184) (Lulu Zhang) #8184
• 6837414: Use flags-as-proto to determine command line schema (take two) (#8155) (Zoey Greer) #8155
• 775af4c: Protect against CPU leaser leaks (#8190) (Tyler Williams)

v2.120.0

Commits

• d25ff22: display individual test cases even if they have <system-out> or <system-err> children (#8135) (Dan Stowell) #8135
• f5cb9e3: Put JWT in SAML context (#8144) (Siggi Simonarson) #8144
• b8664e1: Remove test using unused flag (#8145) (Tyler Williams) #8145
• f458fe6: Use the CPU leaser in ociruntime (#8139) (Tyler Williams) #8139
• c573241: Fix page crash error during webdriver tests (#8150) (Brandon Duffany) #8150
• 3b2a710: Add webdriver test for viewing invocation with SAML auth (#8147) (Brandon Duffany) #8147
• 501fd80: Turn on app-controlled cgroup settings by default (#8143) (Brandon Duffany) #8143
• 78667eb: Remove nonroot-workspace property (#8142) (Brandon Duffany) #8142
• a8076a1: [raft] remove replica descriptor from removed list in RemoveData (#8137) (Lulu Zhang) #8137
• 58ce60e: [raft] do not split if there is a replica in the middle of removal (#8149) (Lulu Zhang) #8149
• 43c62e8: Add region and self-hosted columns to Executions table (#8152) (Brandon Duffany) #8152
• 5be3a38: Improve action ID rendering in Cache tab (#8141) (Fabian Meumertzheim) #8141
• 2b37c90: Make cpuleaser numa-aware (#8156) (Tyler Williams) #8156
• 32acdcd: Remove unused firecracker_enable_cpu_weight flag def (#8146) (Tyler Williams) #8146
• b41dcf2: when displaying build errors, remove ANSI escape code that clears to … (#8148) (Dan Stowell) #8148
• 29a74b3: Add symlinks to files tab (#8095) (Siggi Simonarson) #8095
• 6361f4a: [raft] in RemoveData, treat replica not marked for removal as a valid case (#8158) (Lulu Zhang) #8158
• 5998999: Fail webdriver tests if error banner is displayed (#8128) (Brandon Duffany) #8128
• a37ad6b: Return numa node in cpuset (#8159) (Tyler Williams) #8159
• d5413c1: [raft] Implement a raft command to fetch multiple range descriptors at once (#8160) (Lulu Zhang) #8160
• b1e719e: Revamp of the fuse workspace implementation: (#8153) (Vadim Berezniker) #8153
• f9cdf3b: Use CPULeaser for firecracker tasks (#8163) (Tyler Williams) #8163
• fe3da2d: Move mount_vfs tool to public repo. (#8166) (Vadim Berezniker) #8166
• 7de4f0a: Fix error banner opt-out check (#8165) (Brandon Duffany) #8165
• ad5c0f9: Fix and simplify node CPU metrics (#8162) (Brandon Duffany) #8162
• cfb487e: Correct set of lxcfs mounts (#8167) (Tyler Williams) #8167
• bc3ad57: Ignore lxcfs pressure files (#8168) (Tyler Williams) #8168
• 44315cf: bump bb repo commit sha in dev_qa.py to current head (#8170) (jim hollenbach) #8170
• 131c069: Make it impossible for disabled cpu leaser to leak memory (#8171) (Tyler Williams)
• 3172560: Use guest VM stats for peak memory reporting (#8175) (Brandon Duffany)

v2.119.0

Commits

• a67a2c5: Copy persisted artifacts when replaying an invocation (#8118) (Brandon Duffany) #8118
• 5ff7983: Add action mnemonic to clickhouse (#8092) (Vanja Pejovic) #8092
• b74f3f3: Make PQ return a bool indicating presence (#8120) (Tyler Williams) #8120
• b3a6fc8: [RB] Fix error handling (#8096) (Maggie Lou) #8096
• d1aace5: docs/rbe-platforms: indicate that oci platform is now the default. (#8113) (Son Luong Ngoc) #8113
• 9a0a81c: Add missing space in template-user.bazelrc (#8122) (Vanja Pejovic) #8122
• 0335014: New cert bundle hash (#8121) (Son Luong Ngoc) #8121
• a2ce445: Add webdriver test for action page (#8117) (Brandon Duffany) #8117
• 97546f1: Revert "Use flags-as-proto to determine command line schema" (#8123) (Zoey Greer) #8123
• 742684e: when replaying invocations, use URL path instead of full URL (#8124) (Dan Stowell) #8124
• 1a1fe7d: Fix error banner on action page (#8114) (Brandon Duffany) #8114
• cc38c13: Another hash update (#8130) (Siggi Simonarson) #8130
• 3a2bb72: Update go-git to v5.13.1 for dependabot (#8126) (Zoey Greer) #8126
• a82eec0: Add a static copy of the AWS RDS certs. (#8127) (Vadim Berezniker) #8127
• 36a2c2b: Remove duplicate definitions of API key and JWT headers (#8129) (Iain Macdonald) #8129
• 8799dc0: Rename (unused) flag executor.oci.fake_cpu_info -> executor.oci.enable_lxcfs (#8134) (Tyler Williams) #8134
• 7293d4d: Add debug logic for fault error (#8133) (Brandon Duffany) #8133
• 49ac7f9: Add GetPublicKeys RPC to AuthService for retrieving RSA public key(s) (#7982) (Iain Macdonald) #7982
• 0a407f4: Surface mmap validation errors with UnexpectedEvent (#8136) (Brandon Duffany) #8136
• d7df06e: Add a basic CPULeaser implementation (#8106) (Tyler Williams) #8106
• 21fe560: [raft] mark replicas as removed in range descriptor before we remove from raft (#8116) (Lulu Zhang) #8116
• b2d02f9: Remove now unused oci limit flags + code (#8138) (Tyler Williams) #8138
• 9776cd1: Put JWT in SAML context (#8144) (Siggi Simonarson)
• 1d1c02e: display individual test cases even if they have <system-out> or <system-err> children (#8135) (Dan Stowell)

v2.118.0

Commits

• ba423c7: Disable "allow making builds public" by default and improve explanation (#8077) (Fabian Meumertzheim) #8077
• 5d10ddb: Support oci mirrors (#8078) (Tyler Williams) #8078
• 6255642: [CLI] Don't consult local CAS for findMissing (#8083) (Siggi Simonarson) #8083
• refactor isLeader (#8059) #8059 (Lulu Zhang)
• 7a06de8: Don't report an AC hit if an output is missing (#8082) (Brandon Duffany) #8082
• ffa0cbc: Add some debug logs to help diagnose config parsing issues (#8079) (Brandon Duffany) #8079
• 2492fdf: Skip unnecessary lookup (#8085) (Tyler Williams) #8085
• 05d2b97: buildfix.sh: Bump CLI_VERSION to support arm64 linux (#8087) (Keith Smiley) #8087
• 8d1f01b: Use action.platform instead of command.platform in one more place (#8080) (Vanja Pejovic) #8080
• 0823d82: Allow empty string in platform.CoerceContainerType (#8089) (Vanja Pejovic) #8089
• 0f1ef9a: Remove an unused function (#8088) (Brandon Duffany) #8088
• 1cad61d: Save requested and effective timeouts to clickhouse (#8081) (Vanja Pejovic) #8081
• 6a79aca: fix a bug in tasksize.Requested (#8091) (Vanja Pejovic) #8091
• eaf8ef1: Add finer-grained perms check (#8090) (Brandon Duffany) #8090
• e6e0901: Add support for directories to the Files tab (#8093) (Siggi Simonarson) #8093
• c2ca857: Add lxcfs support to fake cpuinfo for containers (#8097) (Tyler Williams) #8097
• 3ab0efe: Add directory and symlink support to the compare UI (#8099) (Siggi Simonarson) #8099
• b684cda: One var to rule them all (#8100) (Tyler Williams) #8100
• 8bfda9d: Add a generic priority queue (used in followup) (#8105) (Tyler Williams) #8105
• 51bfc93: Update golang.org/x/net from v0.29.0 to v0.33.0 for dependabot (#8104) (Zoey Greer) #8104
• 1009ceb: Surface slow interrupt warnings in the executor logs (#8094) (Brandon Duffany) #8094
• 5ea6d6c: Fix HTTP file download auth (#8115) (Brandon Duffany) #8115
• 6e2a43e: Update executor image to pick up fixes for vulnerabilities (#8102) (Zoey Greer) #8102
• a318702: Update docker package versions on the executor to fix vulnerabilities (#8103) (Zoey Greer) #8103
• 9efd515: Update podman for the executor to fix vulnerabilities (#8107) (Zoey Greer) #8107
• 1b4e4d1: Update runc for the executor to fix vulnerabilities (#8108) (Zoey Greer) #8108
• beb4d05: Update rootlesskit for the executor to fix vulnerabilities (#8109) (Zoey Greer) #8109
• 46f05a5: Get firecracker stats from host cgroup (#8111) (Brandon Duffany) #8111
• 9e0b71e: In config=remote, use --remote_download_toplevel (#8075) (Vanja Pejovic) #8075
• 7422f25: Use flags-as-proto to determine command line schema (#8057) (Zoey Greer) #8057
• c68c4d8: Update app image to pick up fixes for vulnerabilities (#8101) (Zoey Greer) #8101
• b34d7a2: New cert bundle hash (#8121) (Son Luong Ngoc)
• 6e4a85a: Another hash update (#8130) (Siggi Simonarson)