Merge branch 'main' into create-al2023-rootfs

Author: JamesC1305

CHANGELOG.md

@@ -23,6 +23,16 @@ and this project adheres to
 
 ### Fixed
 
+- [#5762](https://github.com/firecracker-microvm/firecracker/pull/5762): Cap
+  virtio-rng per-request entropy to 64 KiB. Previously, a guest could construct
+  a descriptor chain that caused Firecracker to allocate more host memory than
+  the guest actually provided, potentially leading to excessive host memory
+  consumption.
+- [#5760](https://github.com/firecracker-microvm/firecracker/pull/5760): Fixed
+  HID (Hardware ID) of VMGenID device so that it aligns with the upstream Linux
+  kernel. This caused the driver not to be bound correctly to the device prior
+  to Linux kernel 6.10.
+
 ## [1.15.0]
 
 ### Added

Cargo.lock

@@ -91,7 +91,7 @@ v3.1 will be patched since were the last two Firecracker releases and less than
 | Release | Release Date | Latest Patch | Min. end of support | Official end of Support         |
 | ------: | -----------: | -----------: | ------------------: | :------------------------------ |
 |   v1.15 |   2026-03-09 |      v1.15.0 |          2026-09-09 | Supported                       |
-|   v1.14 |   2025-12-17 |      v1.14.2 |          2026-06-17 | Supported                       |
+|   v1.14 |   2025-12-17 |      v1.14.3 |          2026-06-17 | Supported                       |
 |   v1.13 |   2025-08-28 |      v1.13.2 |          2026-02-28 | 2026-03-09 (v1.15 released)     |
 |   v1.12 |   2025-05-07 |      v1.12.1 |          2025-11-07 | 2025-12-17 (v1.14 released)     |
 |   v1.11 |   2025-03-18 |      v1.11.0 |          2025-09-18 | 2025-09-18 (end of 6mo support) |

docs/RELEASE_POLICY.md

@@ -10,7 +10,7 @@ name = "clippy-tracing"
 bench = false
 
 [dependencies]
-clap = { version = "4.5.60", features = ["derive"] }
+clap = { version = "4.6.0", features = ["derive"] }
 itertools = "0.14.0"
 proc-macro2 = { version = "1.0.106", features = ["span-locations"] }
 quote = "1.0.45"

src/clippy-tracing/Cargo.toml

@@ -13,7 +13,7 @@ bench = false
 tracing = ["log-instrument", "vmm/tracing"]
 
 [dependencies]
-clap = { version = "4.5.60", features = ["derive", "string"] }
+clap = { version = "4.6.0", features = ["derive", "string"] }
 displaydoc = "0.2.5"
 libc = "0.2.183"
 log-instrument = { path = "../log-instrument", optional = true }

src/cpu-template-helper/Cargo.toml

@@ -17,7 +17,7 @@ bench = false
 
 [dependencies]
 bitcode = { version = "0.6.9", features = ["serde"] }
-clap = { version = "4.5.60", features = ["derive", "string"] }
+clap = { version = "4.6.0", features = ["derive", "string"] }
 displaydoc = "0.2.5"
 libc = "0.2.183"
 serde = { version = "1.0.228", features = ["derive"] }

src/seccompiler/Cargo.toml

@@ -13,7 +13,7 @@ bench = false
 tracing = ["log-instrument", "fc_utils/tracing", "vmm/tracing"]
 
 [dependencies]
-clap = { version = "4.5.60", features = ["derive", "string"] }
+clap = { version = "4.6.0", features = ["derive", "string"] }
 displaydoc = "0.2.5"
 
 fc_utils = { package = "utils", path = "../utils" }

src/snapshot-editor/Cargo.toml

@@ -30,8 +30,8 @@ derive_more = { version = "2.1.1", default-features = false, features = [
 ] }
 displaydoc = "0.2.5"
 event-manager = "0.4.2"
-gdbstub = { version = "0.7.9", optional = true }
-gdbstub_arch = { version = "0.3.2", optional = true }
+gdbstub = { version = "0.7.10", optional = true }
+gdbstub_arch = { version = "0.3.3", optional = true }
 kvm-bindings = { version = "0.14.0", features = ["fam-wrappers", "serde"] }
 kvm-ioctls = "0.24.0"
 libc = "0.2.183"