microsandbox-rb 0.9.1 → 0.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9a11efe93577fa841e3825418b7ea2bdd27cadd404d64f750ef060fa255d4bc
-  data.tar.gz: 9ccca9426b0ddefed890528408775068244959e69400497c904ffb2d408c27a5
+  metadata.gz: 69a06d8d3c54bdd0339a3149904ac906377ddcc3aa295725548ceac20001b1ae
+  data.tar.gz: ca7b9c5ed1ca3d35bec0b2229db7f1f229b58964f89c48e386e187d8d7bb0dd4
 SHA512:
-  metadata.gz: 6cc9f1524466a9e910ee21aabcefbf62a8abfa79625d1bdd7a7a37fc634db018a8d8efa277613691d69b153fed22d1d5fcaf493ecbaac629b1b1a866e861461e
-  data.tar.gz: c36aa8379159eead35e062c4f282a34deb3957dbf93a34ed48d395ef9e52c96a7f3343a145f24f3418fe25a5a8e1dfc64d23b8514845d80090a14161739e43c3
+  metadata.gz: 4d11c9b6a98de5c66b4d0fda89d7b8efe3610d68408e96664707f150cb358bb3ca9e6550acf684e12e9989cf70211a79a45b7dc5603f4d6b0861be41c4528690
+  data.tar.gz: dfe032911a9207ba074a47bc9065c0e78f45537b4b3fd9d8059f9e08def6211c35e6a5fcfd93ebc26fe9f7dda818924d298274c7d99d91ee00cfc63b61c44865

data/CHANGELOG.md

@@ -6,6 +6,36 @@ All notable changes to this gem are documented here. The format is based on
 microsandbox runtime it embeds; each release notes the upstream runtime tag it
 wraps, and the README's Versioning section keeps the full gem→runtime map.
 
+## [0.9.2] - 2026-07-08
+
+Adopts upstream runtime **`v0.6.2` → `v0.6.3`**. No Ruby API change; the
+native glue moves to the explicit-backend variants of a few SDK calls that
+went "ambient config" upstream (#1091).
+
+### Fixed
+
+- **DNS no longer advertises unreachable address families to the guest**
+  (upstream #1083): on hosts without a working IPv6 route the sandbox is
+  IPv4-only, but the DNS forwarder previously still returned real AAAA
+  records, so v6-preferring resolvers inside the guest (gRPC/c-ares
+  foremost) tried IPv6 first and failed with unreachable-network errors.
+  AAAA queries in a v4-only sandbox (and A queries in a v6-only one) now
+  synthesize an empty NOERROR answer, steering guests to the usable family.
+  Also normalizes IPv4-mapped IPv6 addresses for policy/rebind/resolved-
+  hostname checks.
+
+### Changed
+
+- **Embedded runtime is now `v0.6.3`** (`Microsandbox::RUNTIME_VERSION` /
+  `Microsandbox.runtime_version`). Also inherited: upstream TLS interception
+  scopes upstream-certificate verification per destination (#1073).
+- Native glue adapted to the upstream v0.6.3 SDK surface (#1091 restored
+  "ambient local config" as the public shape): `Image.get/list/inspect/
+  remove/prune` and `all_sandbox_metrics` now call the explicit
+  `*_local(backend, …)` variants, and the resolved-`msb`-path probe uses the
+  `LocalConfig#resolve_msb_path` method form. Behavior is identical — the
+  gem already held an explicit local backend at every call site.
+
 ## [0.9.1] - 2026-07-03
 
 Adopts upstream runtime **`v0.6.1` → `v0.6.2`**. The upstream SDK crate's public

data/Cargo.lock

@@ -122,7 +122,7 @@ version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -133,7 +133,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
  "once_cell_polyfill",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1418,7 +1418,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1616,7 +1616,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -2975,8 +2975,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -3029,8 +3029,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-agent-client"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "ciborium",
  "microsandbox-protocol",
@@ -3042,8 +3042,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-db"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "async-trait",
  "sea-orm",
@@ -3054,8 +3054,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-filesystem"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "libc",
  "microsandbox-utils",
@@ -3067,8 +3067,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-image"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "astral-tokio-tar",
  "async-compression",
@@ -3093,8 +3093,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-metrics"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "chrono",
  "libc",
@@ -3105,8 +3105,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-migration"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "sea-orm-migration",
  "serde_json",
@@ -3114,8 +3114,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-network"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "base64",
  "bytes",
@@ -3156,8 +3156,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-protocol"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "chrono",
  "ciborium",
@@ -3171,8 +3171,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-runtime"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "bytes",
  "chrono",
@@ -3202,8 +3202,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-types"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "chrono",
  "serde",
@@ -3214,8 +3214,8 @@ dependencies = [
 
 [[package]]
 name = "microsandbox-utils"
-version = "0.6.2"
-source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.2#e9043c89d3432a548908bb145581be4fa1e2e3d9"
+version = "0.6.3"
+source = "git+https://github.com/superradcompany/microsandbox?tag=v0.6.3#7121a8c3385252d9a9ec83677fea5a49a475cdb2"
 dependencies = [
  "dirs",
  "libc",
@@ -3227,7 +3227,7 @@ dependencies = [
 
 [[package]]
 name = "microsandbox_rb"
-version = "0.9.1"
+version = "0.9.2"
 dependencies = [
  "chrono",
  "futures",
@@ -4761,7 +4761,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4829,7 +4829,7 @@ dependencies = [
  "security-framework 3.7.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4850,7 +4850,7 @@ dependencies = [
  "security-framework 3.7.0",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5430,7 +5430,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "52d1cfed4120b4d927bf7c0f86d2087a4a7d6027c906d9f9d525a80573b9be51"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5870,7 +5870,7 @@ dependencies = [
  "getrandom 0.4.2",
  "once_cell",
  "rustix",
- "windows-sys 0.52.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -6230,7 +6230,7 @@ checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
 dependencies = [
  "memoffset",
  "tempfile",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -6656,7 +6656,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.48.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]

data/README.md

@@ -393,8 +393,8 @@ change diverged the two numbers — the gem version is **not** a reliable indica
 of the embedded runtime version. To learn which runtime a build wraps, ask it:
 
 ```ruby
-Microsandbox::VERSION          # => "0.9.0"  (the gem's own version)
-Microsandbox.runtime_version   # => "v0.6.2"  (the embedded upstream runtime tag)
+Microsandbox::VERSION          # => "0.9.2"  (the gem's own version)
+Microsandbox.runtime_version   # => "v0.6.3"  (the embedded upstream runtime tag)
 ```
 
 | Gem version | Upstream runtime | Notes |
@@ -412,6 +412,7 @@ Microsandbox.runtime_version   # => "v0.6.2"  (the embedded upstream runtime tag
 | `0.8.2`  | `v0.5.10` | gem-only: redact secrets from errors, typed snapshot errors, panic-free durations, fat-gem loader + `extconf` preflight fixes, threading/streaming docs |
 | `0.9.0`  | `v0.6.1` | adopts upstream `v0.6.0`+`v0.6.1` (zombie-runtime wait fix, secret substitution through CONNECT proxies, stale-sandbox cleanup); upstream public API is additive — no Ruby surface change |
 | `0.9.1`  | `v0.6.2` | adopts upstream `v0.6.2` (faster image loads/pulls via early cache gate + zlib-rs); upstream API unchanged — no Ruby surface change |
+| `0.9.2`  | `v0.6.3` | adopts upstream `v0.6.3` (v4-only sandboxes stop advertising AAAA DNS answers — fixes guest gRPC/c-ares preferring unreachable IPv6; scoped upstream TLS verification); glue moves to `*_local` SDK variants — no Ruby surface change |
 
 **Going forward** — the gem version moves on its own semver track and no longer
 mirrors the upstream tag:

data/ext/microsandbox/Cargo.toml

@@ -6,8 +6,8 @@ name = "microsandbox_rb"
 description = "Ruby SDK native extension for microsandbox — secure, fast microVM-based sandboxing."
 # Must equal Microsandbox::VERSION (lib/microsandbox/version.rb) — Native.version
 # returns this via env!("CARGO_PKG_VERSION") and version_spec.rb asserts equality.
-# The core-crate dependency below stays pinned at its own tag (v0.6.2).
-version = "0.9.1"
+# The core-crate dependency below stays pinned at its own tag (v0.6.3).
+version = "0.9.2"
 authors = ["Super Rad Company <development@superrad.company>"]
 repository = "https://github.com/superradcompany/microsandbox"
 license = "Apache-2.0"
@@ -35,8 +35,8 @@ rb-sys = "0.9"
 # `.cargo/config.toml.example`). "ssh" matches the feature set the Python/Node
 # SDKs ship with; default features add "prebuilt" (provisions msb + libkrunfw at
 # build time), "net", and "keyring".
-microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.2", default-features = true, features = ["ssh"] }
-microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.2" }
+microsandbox = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.3", default-features = true, features = ["ssh"] }
+microsandbox-network = { git = "https://github.com/superradcompany/microsandbox", tag = "v0.6.3" }
 
 # Async core bridged to Ruby's synchronous API via a blocking tokio runtime.
 tokio = { version = "1", features = ["rt-multi-thread", "sync", "time"] }

data/ext/microsandbox/src/image.rs

@@ -82,12 +82,12 @@ fn report_to_hash(report: ImagePruneReport) -> RHash {
 }
 
 fn get(reference: String) -> Result<RHash, Error> {
-    let handle = with_local_backend(async |local| Image::get(local, &reference).await)?;
+    let handle = with_local_backend(async |local| Image::get_local(local, &reference).await)?;
     Ok(handle_to_hash(&handle))
 }
 
 fn list() -> Result<RArray, Error> {
-    let handles = with_local_backend(async |local| Image::list(local).await)?;
+    let handles = with_local_backend(async |local| Image::list_local(local).await)?;
     let arr = ruby().ary_new();
     for h in handles.iter() {
         arr.push(handle_to_hash(h))?;
@@ -96,16 +96,16 @@ fn list() -> Result<RArray, Error> {
 }
 
 fn inspect(reference: String) -> Result<RHash, Error> {
-    let detail = with_local_backend(async |local| Image::inspect(local, &reference).await)?;
+    let detail = with_local_backend(async |local| Image::inspect_local(local, &reference).await)?;
     Ok(detail_to_hash(detail))
 }
 
 fn remove(reference: String, force: bool) -> Result<(), Error> {
-    with_local_backend(async |local| Image::remove(local, &reference, force).await)
+    with_local_backend(async |local| Image::remove_local(local, &reference, force).await)
 }
 
 fn prune() -> Result<RHash, Error> {
-    let report = with_local_backend(async |local| Image::prune(local).await)?;
+    let report = with_local_backend(async |local| Image::prune_local(local).await)?;
     Ok(report_to_hash(report))
 }
 

data/ext/microsandbox/src/lib.rs

@@ -34,7 +34,7 @@ fn version() -> String {
 /// helpers (Python/Node/Go).
 fn all_sandbox_metrics() -> Result<RHash, Error> {
     let map = backend::with_local_backend(async |local| {
-        microsandbox::sandbox::all_sandbox_metrics(local).await
+        microsandbox::sandbox::all_sandbox_metrics_local(local).await
     })?;
     let hash = runtime::ruby().hash_new();
     for (name, metrics) in &map {
@@ -113,7 +113,7 @@ fn resolved_msb_path() -> Result<String, Error> {
             available_when: "with the local backend".into(),
         })
     })?;
-    let path = microsandbox::config::resolve_msb_path(local.config()).map_err(error::to_ruby)?;
+    let path = local.config().resolve_msb_path().map_err(error::to_ruby)?;
     Ok(path.to_string_lossy().into_owned())
 }
 

data/lib/microsandbox/version.rb

@@ -8,12 +8,12 @@ module Microsandbox
   # Versioning section of the README for the full gem-to-runtime map. Must equal
   # the native ext's Cargo crate version (`Native.version`), enforced by
   # spec/unit/version_spec.rb.
-  VERSION = "0.9.1"
+  VERSION = "0.9.2"
 
   # The upstream microsandbox runtime release this gem build embeds — the `tag`
   # pinned on the `microsandbox`/`microsandbox-network` git deps in
   # ext/microsandbox/Cargo.toml. Exposed at runtime as
   # {Microsandbox.runtime_version}. spec/unit/version_spec.rb asserts it stays in
   # sync with the Cargo tag so it can't silently drift out of date.
-  RUNTIME_VERSION = "v0.6.2"
+  RUNTIME_VERSION = "v0.6.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: microsandbox-rb
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.2
 platform: ruby
 authors:
 - ya-luotao