v3.2.0

This is the first release of Spin since it's donation to CNCF 🎉 This release brings various fixes and UX/DX improvements (See the changelog for a glimpse into what's changed). One notable fix is the added ability for Spin to push to a registry components that are composed with their dependencies to fix an issue with running in various Spin runtimes like runwasi.

Thank you to all of the contributors!

Verifying the Release Signature

After downloading the v3.2.0 release of Spin, either via the artifact attached to this release corresponding to your OS/architecture combination or via the installation method of your choice, you are ready to verify the release signature.

First, install cosign. This is the tool we'll use to perform signature verification. Then run the following command:

cosign verify-blob \
    --signature spin.sig --certificate crt.pem \
    --certificate-identity https://github.com/spinframework/spin/.github/workflows/release.yml@refs/tags/v3.2.0 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-sha c9be6d8feafc15cf1e1ef17bd9f6cb72988fa350 \
    --certificate-github-workflow-repository spinframework/spin \
    spin

If the verification passed, you should see:

Verified OK

What's Changed

• fix(.github): pin tailscale to 1.78.1 for deploy by @vdice in #2967
• bump ver on main to v3.2.0-pre0 by @michelleN in #2968
• Fix deny-all adapter for socket imports by @fibonacci1729 in #2971
• fix #2974 -- use redis::aio::ConnectionManager by @fibonacci1729 in #2976
• Azure Cosmos multiple stores per container by @rylev in #2953
• Update TinyGo templates to address static init problems by @itowlson in #2977
• fix(oci): update oci-distribution crate to get jwt fix by @vdice in #2983
• fix(templates/http-go): Remove scheduler flag from http-go build command by @adamreese in #2981
• In spin new/add, display only templates compatible with current command by @itowlson in #2984
• Warn if application uses a reserved route by @itowlson in #2986
• Fix spin watch Ctrl+C not working before first successful build by @itowlson in #2991
• Clearer progress info for multi-command builds by @itowlson in #2994
• remove CachingStoreManager from factor-key-value by @dicej in #2995
• alias spin plugin uninstall -> rm by @michelleN in #2999
• New clippies and rust-analyzer chores for Rust 1.84 by @itowlson in #3001
• Include guidance in error for non-matching HTTP component export by @itowlson in #3002
• Update wit-bindgen used in tests by @alexcrichton in #3006
• Update Wasmtime to 29.0.1 by @alexcrichton in #3005
• docs(sips/006-spin-plugins): Fix typo in package.os field definition: osx -> macos by @PetarKirov in #3011
• Add spin fileserver to project governance by @michelleN in #3012
• Allow self.alt host for self-requests by @itowlson in #3003
• rm Fermyon heading in README by @michelleN in #3013
• flake: update for newer rust by @endocrimes in #3015
• Check allowed hosts before checking the request_interceptor by @alexcrichton in #3016
• feat(push): allow pushing composed components to registry by @fibonacci1729 in #2996
• Use connection pooling when querying CosmosDB by @kate-goldenring in #3017
• fix: support empty files directories by @kate-goldenring in #3020
• Update workflows to remove most fermyon refs by @fibonacci1729 in #3024
• factors-executor: Add ComponentLoader::load_instance_pre by @lann in #3036
• componentize: Tweak clang version parsing by @lann in #3031
• fix: remove unneeded spin-core dep from key-value-azure factor by @kate-goldenring in #3022
• Don't upload release artifacts to s3 by @fibonacci1729 in #3027
• Change Homebrew data dir from fermyon-spin to spinframework-spin by @kate-goldenring in #3039
• chore: update homebrew workflow step to use new tap by @fibonacci1729 in #3029
• rm Fermyon from template output and examples by @michelleN in #3034
• update Copyright to The Spin Framework Contributors by @michelleN in #3037
• Fixes and enhancements to Cosmos KV host implementation by @kate-goldenring in #3032
• Revert expected test output for legacy apps by @itowlson in #3046
• app: Wrap inner LockedApp in Arc by @lann in #3047
• Fix concurrent HTTP component downloads race condition by @itowlson in #3050
• Allow "choose from list" parameters in templates by @itowlson in #3052
• If a component errors after starting the response, show that error by @itowlson in #3041
• Validate keys before persisting items in Azure CosmosDB key-value store by @ThorstenHans in #3054
• Pull in last changes for v3.2 release by @fibonacci1729 in #3056
• Bump version for v3.2 by @fibonacci1729 in #3055

New Contributors

• @PetarKirov made their first contribution in #3011

Full Changelog: v3.1.2...v3.2.0