chore(deps): bump oras-project/setup-oras from 2.0.1 to 2.0.2 by dependabot[bot] · Pull Request #1887 · hyperlight-dev/hyperlight

dependabot · 2026-10-06T03:03:52Z

Bumps oras-project/setup-oras from 2.0.1 to 2.0.2.

Release notes

Sourced from oras-project/setup-oras's releases.

v2.0.2

Highlights

Support ORAS CLI version(s): 1.3.4

What's Changed

chore(deps): Bump @types/node from 26.1.0 to 26.1.1 by @dependabot[bot] in oras-project/setup-oras#187

chore(deps): Bump typescript from 6.0.3 to 7.0.2 by @dependabot[bot] in oras-project/setup-oras#186

chore(deps): Bump actions/setup-node from 6 to 7 by @dependabot[bot] in oras-project/setup-oras#188

chore(deps): Bump @types/node from 26.1.1 to 26.1.2 by @dependabot[bot] in oras-project/setup-oras#189

fix: bump undici to >=8.5.0 to resolve dependabot alerts by @TerryHowe in oras-project/setup-oras#185

chore(deps): Bump esbuild from 0.28.1 to 0.28.2 by @dependabot[bot] in oras-project/setup-oras#191

chore(deps): Bump @types/node from 26.1.2 to 26.2.0 by @dependabot[bot] in oras-project/setup-oras#190

chore: update releases.json for 1.3.4 by @github-actions[bot] in oras-project/setup-oras#192

chore(deps): Bump @types/node from 26.2.0 to 26.4.0 by @dependabot[bot] in oras-project/setup-oras#193

chore(deps): Bump apache/skywalking-eyes from 0.8.0 to 0.9.0 by @dependabot[bot] in oras-project/setup-oras#194

chore(deps): Bump @types/node from 26.4.0 to 26.4.1 by @dependabot[bot] in oras-project/setup-oras#196

Raise the undici override floor to 8.9.0 by @arpitjain099 in oras-project/setup-oras#200

chore(deps): Bump @types/node from 26.4.1 to 26.5.1 by @dependabot[bot] in oras-project/setup-oras#201

chore(deps): Bump @types/node from 26.5.1 to 26.6.1 by @dependabot[bot] in oras-project/setup-oras#202

chore(deps): Bump @types/node from 26.6.1 to 26.6.2 by @dependabot[bot] in oras-project/setup-oras#203

feat: automate patch releases for new ORAS CLI versions by @Brilly-Bohyun in oras-project/setup-oras#205

New Contributors

@arpitjain099 made their first contribution in oras-project/setup-oras#200

@Brilly-Bohyun made their first contribution in oras-project/setup-oras#205

Full Changelog: oras-project/setup-oras@v2.0.1...v2.0.2

Commits

005458a feat: automate patch releases for new ORAS CLI versions (#205)
9f241ed chore(deps): Bump @types/node from 26.6.1 to 26.6.2 (#203)
931fc54 chore(deps): Bump @types/node from 26.5.1 to 26.6.1 (#202)
f629924 chore(deps): Bump @types/node from 26.4.1 to 26.5.1 (#201)
ccb7116 Raise the undici override floor to 8.9.0 (#200)
52b6f72 chore(deps): Bump @types/node from 26.4.0 to 26.4.1 (#196)
39b47eb chore(deps): Bump apache/skywalking-eyes from 0.8.0 to 0.9.0 (#194)
47f8aa9 chore(deps): Bump @types/node from 26.2.0 to 26.4.0 (#193)
8fb134d chore: update releases.json for 1.3.4 (#192)
47a14f7 chore(deps): Bump @types/node from 26.1.2 to 26.2.0 (#190)
Additional commits viewable in compare view

Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 2.0.1 to 2.0.2. - [Release notes](https://github.com/oras-project/setup-oras/releases) - [Commits](oras-project/setup-oras@1d808f7...005458a) --- updated-dependencies: - dependency-name: oras-project/setup-oras dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

hyperlight-gh-bot · 2026-10-28T21:18:32Z

Benchmark Results

Measured commit: e5b5d4585e08
Baseline commit: 4b3e9610dc0d

kvm / amd (Linux) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`377.53 µs` (➖ 1.02x faster)
`byte_chunks`		`756.94 ns` (➖ 1.01x slower)
`vec_bytes`		`583.58 ns` (➖ 1.04x faster)

payload_allocation

	`slot_pool_segmented`
`65536`	`142.08 ns` (➖ 1.00x slower)
`262144`	`524.77 ns` (➖ 1.01x slower)

sandboxes

	`create_initialized_and_drop`
`medium`	`83.21 ms` (➖ 1.01x slower)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`7.70 ns` (➖ 1.00x slower)	`7.68 ns` (➖ 1.01x faster)	`7.68 ns` (➖ 1.00x faster)

snapshot_files

	`load_snapshot_unverified`
`small`	`92.66 µs` (➖ 1.00x faster)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`1.91 µs` (➖ 1.09x faster)	`2.04 µs` (➖ 1.07x slower)
`262144`	`7.40 µs` (➖ 1.05x slower)	`7.16 µs` (➖ 1.02x slower)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`1.02 µs` (➖ 1.01x faster)	`991.83 ns` (➖ 1.04x faster)
`65536`	`6.19 µs` (➖ 1.03x faster)	`6.14 µs` (➖ 1.07x faster)
`262144`	`26.86 µs` (➖ 1.02x faster)

kvm / intel (Linux) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`673.50 µs` (➖ 1.01x faster)
`byte_chunks`		`672.31 ns` (➖ 1.03x faster)
`vec_bytes`		`510.90 ns` (➖ 1.06x faster)

payload_allocation

	`slot_pool_segmented`
`65536`	`178.22 ns` (➖ 1.00x faster)
`262144`	`522.64 ns` (➖ 1.01x faster)

sandboxes

	`create_initialized_and_drop`
`medium`	`81.43 ms` (➖ 1.04x slower)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`7.23 ns` (➖ 1.03x slower)	`7.18 ns` (➖ 1.03x slower)	`7.16 ns` (➖ 1.02x slower)

snapshot_files

	`load_snapshot_unverified`
`small`	`48.60 µs` (➖ 1.01x slower)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`2.12 µs` (➖ 1.02x faster)	`2.14 µs` (➖ 1.03x faster)
`262144`	`7.55 µs` (➖ 1.02x faster)	`7.55 µs` (➖ 1.02x faster)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`722.02 ns` (➖ 1.02x faster)	`735.58 ns` (➖ 1.01x faster)
`65536`	`6.99 µs` (➖ 1.05x faster)	`7.00 µs` (➖ 1.04x faster)
`262144`	`29.77 µs` (➖ 1.01x faster)

mshv3 / amd (Linux) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`324.11 µs` (➖ 1.00x faster)
`byte_chunks`		`929.89 ns` (➖ 1.00x faster)
`vec_bytes`		`708.62 ns` (➖ 1.00x slower)

payload_allocation

	`slot_pool_segmented`
`65536`	`182.20 ns` (➖ 1.00x faster)
`262144`	`669.47 ns` (➖ 1.03x faster)

sandboxes

	`create_initialized_and_drop`
`medium`	`60.60 ms` (➖ 1.04x slower)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`9.86 ns` (➖ 1.01x faster)	`9.87 ns` (➖ 1.00x faster)	`9.97 ns` (➖ 1.01x slower)

snapshot_files

	`load_snapshot_unverified`
`small`	`87.06 µs` (➖ 1.00x slower)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`2.48 µs` (➖ 1.01x slower)	`2.62 µs` (➖ 1.03x faster)
`262144`	`9.16 µs` (➖ 1.06x faster)	`9.55 µs` (➖ 1.03x slower)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`1.28 µs` (➖ 1.03x slower)	`1.39 µs` (➖ 1.04x slower)
`65536`	`8.06 µs` (➖ 1.01x faster)	`7.95 µs` (➖ 1.01x faster)
`262144`	`35.03 µs` (➖ 1.04x faster)

mshv3 / intel (Linux) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`777.27 µs` (➖ 1.18x slower)
`byte_chunks`		`909.27 ns` (➖ 1.01x faster)
`vec_bytes`		`651.39 ns` (➖ 1.00x slower)

payload_allocation

	`slot_pool_segmented`
`65536`	`241.72 ns` (➖ 1.03x faster)
`262144`	`659.43 ns` (➖ 1.02x faster)

sandboxes

	`create_initialized_and_drop`
`medium`	`69.24 ms` (➖ 1.09x slower)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`8.68 ns` (➖ 1.01x faster)	`8.70 ns` (➖ 1.00x faster)	`9.39 ns` (➖ 1.08x slower)

snapshot_files

	`load_snapshot_unverified`
`small`	`44.60 µs` (➖ 1.01x faster)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`2.28 µs` (➖ 1.00x faster)	`2.28 µs` (➖ 1.01x faster)
`262144`	`7.94 µs` (➖ 1.00x slower)	`8.22 µs` (➖ 1.03x slower)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`897.55 ns` (➖ 1.01x faster)	`900.18 ns` (➖ 1.02x faster)
`65536`	`7.41 µs` (➖ 1.00x faster)	`7.47 µs` (➖ 1.00x slower)
`262144`	`41.05 µs` (➖ 1.05x slower)

hyperv-ws2025 / amd (Windows) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`1.83 ms` (➖ 1.01x faster)
`byte_chunks`		`1.15 µs` (➖ 1.00x slower)
`vec_bytes`		`776.88 ns` (➖ 1.02x slower)

payload_allocation

	`slot_pool_segmented`
`65536`	`230.13 ns` (➖ 1.07x faster)
`262144`	`791.37 ns` (➖ 1.01x faster)

sandboxes

	`create_initialized_and_drop`
`medium`	`79.27 ms` (➖ 1.06x faster)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`10.61 ns` (➖ 1.16x faster)	`10.57 ns` (➖ 1.05x faster)	`10.64 ns` (➖ 1.06x faster)

snapshot_files

	`load_snapshot_unverified`
`small`	`586.89 µs` (➖ 1.48x faster)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`2.55 µs` (➖ 1.06x faster)	`2.49 µs` (➖ 1.01x faster)
`262144`	`8.59 µs` (➖ 1.00x faster)	`8.61 µs` (➖ 1.00x faster)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`1.34 µs` (➖ 1.00x slower)	`1.35 µs` (➖ 1.04x faster)
`65536`	`8.71 µs` (➖ 1.00x slower)	`9.20 µs` (➖ 1.07x slower)
`262144`	`37.41 µs` (➖ 1.01x faster)

hyperv-ws2025 / intel (Windows) (➖ stable)

No benchmark improved or regressed.

Benchmark Results

function_call_codec

	`decode_vec_bytes_copy`	`encode_control`
	`2.92 ms` (➖ 1.09x faster)
`byte_chunks`		`1.18 µs` (➖ 1.00x faster)
`vec_bytes`		`775.26 ns` (➖ 1.02x faster)

payload_allocation

	`slot_pool_segmented`
`65536`	`263.43 ns` (➖ 1.23x slower)
`262144`	`938.12 ns` (➖ 1.14x slower)

sandboxes

	`create_initialized_and_drop`
`medium`	`101.24 ms` (➖ 1.08x faster)

slot_pool

	`alloc_dealloc_4096`	`alloc_dealloc_128`	`alloc_dealloc_1500`
	`10.62 ns` (➖ 1.07x slower)	`11.10 ns` (➖ 1.14x slower)	`10.51 ns` (➖ 1.09x slower)

snapshot_files

	`load_snapshot_unverified`
`small`	`513.67 µs` (➖ 1.16x faster)

virtq_readonly

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`65536`	`2.34 µs` (➖ 1.03x slower)	`2.36 µs` (➖ 1.01x slower)
`262144`	`7.78 µs` (➖ 1.07x faster)	`7.76 µs` (➖ 1.43x faster)

virtq_readwrite

	`slot_pool_segmented`	`slot_pool_segmented_fragmented`
`8192`	`1.08 µs` (➖ 1.05x faster)	`1.09 µs` (➖ 1.04x faster)
`65536`	`8.28 µs` (➖ 1.05x faster)	`9.22 µs` (➖ 1.03x faster)
`262144`	`44.42 µs` (➖ 1.03x slower)

_{Reported by cargo ci bench-report --candidate run:40764271649 --config-file bench_report.toml.}

dependabot Bot added the kind/dependencies For PRs that update dependencies or related components label Oct 6, 2026

dependabot Bot requested review from andreiltd, danbugs, dblnz, devigned, jprendes, jsturtevant, ludfjig, simongdavies, squillace and syntactically as code owners October 6, 2026 03:03

This comment has been minimized.

Sign in to view

dependabot Bot force-pushed the dependabot/github_actions/oras-project/setup-oras-2.0.2 branch from 6af88a9 to dabd809 Compare October 8, 2026 09:13

This comment has been minimized.

Sign in to view

jsturtevant force-pushed the dependabot/github_actions/oras-project/setup-oras-2.0.2 branch from dabd809 to e5b5d45 Compare October 28, 2026 20:32

jsturtevant approved these changes Oct 28, 2026

View reviewed changes

jsturtevant merged commit 7e2066b into main Oct 28, 2026
67 checks passed

jsturtevant deleted the dependabot/github_actions/oras-project/setup-oras-2.0.2 branch October 28, 2026 22:01

Conversation

dependabot Bot commented on behalf of github Oct 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.0.2

Highlights

What's Changed

New Contributors

Uh oh!

This comment has been minimized.

This comment has been minimized.

hyperlight-gh-bot Bot commented Oct 28, 2026

Benchmark Results

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Benchmark Results

function_call_codec

payload_allocation

sandboxes

slot_pool

snapshot_files

virtq_readonly

virtq_readwrite

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 6, 2026 •

edited

Loading