chore(deps): Bump hyperlight-host from 0.16.0 to 0.17.0 in /src/code-validator/guest

[dependabot]

Bumps hyperlight-host from 0.16.0 to 0.17.0.

Release notes

Sourced from hyperlight-host's releases.

Release v0.17.0

What's Changed

Added

• macOS/Apple Silicon support using Hypervisor.framework (single-address-space backend) by @​syntactically in hyperlight-dev/hyperlight#1674
• SandboxBuilder, the entry point for creating a sandbox. It gathers machine configuration, host functions, init data and memory mappings, then builds a MultiUseSandbox from a guest binary on disk, a guest binary in memory, or a snapshot by @​jprendes in hyperlight-dev/hyperlight#1725
• MultiUseSandbox::status(), which returns SandboxStatus for inspecting sandbox lifecycle state (poisoned, unrecoverable) by @​ludfjig in hyperlight-dev/hyperlight#1727
• Support WIT source inputs directly in host_bindgen! / guest_bindgen! component bindgen macros by @​andreiltd in hyperlight-dev/hyperlight#1589

Changed

• Breaking: Guest MSR state is now saved and restored across snapshots. SandboxConfiguration::guest_msrs declares the MSRs a guest depends on: declared MSRs are captured in a snapshot and restored, while every other MSR resets to a clean default. On KVM the guest may only read or write declared MSRs, on MSHV and WHP this is not enforced by @​ludfjig in hyperlight-dev/hyperlight#991
• Breaking: Filesystem paths are now represented using PathBuf. GuestBinary::FilePath now stores a PathBuf instead of a String, and MultiUseSandbox::generate_crashdump_to_dir accepts Into<PathBuf> instead of Into<String>. Callers passing a String to GuestBinary::FilePath must convert it using .into() by @​midsterx in hyperlight-dev/hyperlight#1652
• Breaking: GuestBinary::Buffer owns its bytes as a Vec<u8>, so GuestBinary no longer borrows and carries no lifetime parameter by @​jprendes in hyperlight-dev/hyperlight#1760
• Deprecate MultiUseSandbox::poisoned in favor of MultiUseSandbox::status().is_poisoned() by @​ludfjig in hyperlight-dev/hyperlight#1727
• MultiUseSandbox::restore has been made more flexible and now accepts snapshots from any guest binary or memory layout when host functions are compatible by @​ludfjig in hyperlight-dev/hyperlight#1728
• Certain fixed guest addresses were changed on AArch64 to more easily accommodate 16k pages without wasting memory. Snapshots taken from sandboxes using the old addresses will not be loadable by new hyperlight versions by @​syntactically in hyperlight-dev/hyperlight#1674
• Improvements to component bindgen: expose fallibility of host API calls, properly track positivity/negativity, disambiguate chains of associated types, support reading WAT text components by @​syntactically in hyperlight-dev/hyperlight#1724, hyperlight-dev/hyperlight#1723, hyperlight-dev/hyperlight#1721, and hyperlight-dev/hyperlight#1732

Removed

Fixed

• Improved snapshot/OCI validation, rejecting malformed metadata and non-regular artifact files during load by @​ludfjig in hyperlight-dev/hyperlight#1668
• Fix RSS peak on Windows by replacing scratch zeroing with a fresh allocation on restore by @​danbugs in hyperlight-dev/hyperlight#1765
• Mark a sandbox unrecoverable in rare cases when snapshot restore fails while updating its VM mappings by @​ludfjig in hyperlight-dev/hyperlight#1727
• Fix symbol resolution in guest core dumps for sandboxes created from snapshots by @​ludfjig in hyperlight-dev/hyperlight#1618
• Fix dynamic mapping ownership on unmap failure by @​ludfjig in hyperlight-dev/hyperlight#1675
• Reset XCR0 during x86 snapshot restore by @​ludfjig in hyperlight-dev/hyperlight#1718
• Reseed guest libc rand() and random() after restoring a snapshot to avoid multiple sandboxes sharing PRNG state by @​ludfjig in hyperlight-dev/hyperlight#1667
• Validate ELF program headers in ElfInfo::new() to prevent host process abort from malformed guest binaries. PT_LOAD segments are now bounds-checked, base_va/va_size are stored as fields, and load_at() uses fully checked arithmetic by @​danbugs

Full Changelog (excl. dependencies)

• Adds optional repo variables for job timeout values by @​simongdavies in hyperlight-dev/hyperlight#1600
• Fix CI caching and parameterize workflows by arch for future aarch64 by @​ludfjig in hyperlight-dev/hyperlight#1597
• feat(ci): add mozilla sccache action by @​andreiltd in hyperlight-dev/hyperlight#1580
• feat: support WIT source inputs in component bindgen macro by @​andreiltd in hyperlight-dev/hyperlight#1589
• update PR validation and daily runs to reduce PR dependance on ARM64 runners by @​simongdavies in hyperlight-dev/hyperlight#1603
• Automate removal of the ready-for-review label by @​simongdavies in hyperlight-dev/hyperlight#1568
• Add snapshot golden tests by @​ludfjig in hyperlight-dev/hyperlight#1446
• make sure nightly job failure adds release blocker label by @​simongdavies in hyperlight-dev/hyperlight#1606
• PR label management needs PR write permission by @​simongdavies in hyperlight-dev/hyperlight#1608
• Review label management by @​simongdavies in hyperlight-dev/hyperlight#1610
• Rewrite copilot instructions by @​ludfjig in hyperlight-dev/hyperlight#1636
• Disable arm runners since unavailable by @​ludfjig in hyperlight-dev/hyperlight#1646
• Fix musl error assertion by @​ludfjig in hyperlight-dev/hyperlight#1653
• Support core dump on snapshots created from snapshot/disk by @​ludfjig in hyperlight-dev/hyperlight#1618
• feat(virtq): add virtio-villain inspired packed virtq coverage by @​andreiltd in hyperlight-dev/hyperlight#1634
• Improve snapshot/oci validation by @​ludfjig in hyperlight-dev/hyperlight#1668
• Fix bad state on unmap failure by @​ludfjig in hyperlight-dev/hyperlight#1675
• Prevent MSRs from leaking across calls to MultiuseSandbox::restore by @​ludfjig in hyperlight-dev/hyperlight#991
• Revert "Disable arm runners since unavailable (#1646)" by @​syntactically in hyperlight-dev/hyperlight#1692

... (truncated)

Changelog

Sourced from hyperlight-host's changelog.

[v0.17.0] - 2026-08-27

Added

• macOS/Apple Silicon support using Hypervisor.framework (single-address-space backend) by @​syntactically in hyperlight-dev/hyperlight#1674
• SandboxBuilder, the entry point for creating a sandbox. It gathers machine configuration, host functions, init data and memory mappings, then builds a MultiUseSandbox from a guest binary on disk, a guest binary in memory, or a snapshot by @​jprendes in hyperlight-dev/hyperlight#1725
• MultiUseSandbox::status(), which returns SandboxStatus for inspecting sandbox lifecycle state (poisoned, unrecoverable) by @​ludfjig in hyperlight-dev/hyperlight#1727
• Support WIT source inputs directly in host_bindgen! / guest_bindgen! component bindgen macros by @​andreiltd in hyperlight-dev/hyperlight#1589

Changed

• Breaking: Guest MSR state is now saved and restored across snapshots. SandboxConfiguration::guest_msrs declares the MSRs a guest depends on: declared MSRs are captured in a snapshot and restored, while every other MSR resets to a clean default. On KVM the guest may only read or write declared MSRs, on MSHV and WHP this is not enforced by @​ludfjig in hyperlight-dev/hyperlight#991
• Breaking: Filesystem paths are now represented using PathBuf. GuestBinary::FilePath now stores a PathBuf instead of a String, and MultiUseSandbox::generate_crashdump_to_dir accepts Into<PathBuf> instead of Into<String>. Callers passing a String to GuestBinary::FilePath must convert it using .into() by @​midsterx in hyperlight-dev/hyperlight#1652
• Breaking: GuestBinary::Buffer owns its bytes as a Vec<u8>, so GuestBinary no longer borrows and carries no lifetime parameter by @​jprendes in hyperlight-dev/hyperlight#1760
• Deprecate MultiUseSandbox::poisoned in favor of MultiUseSandbox::status().is_poisoned() by @​ludfjig in hyperlight-dev/hyperlight#1727
• MultiUseSandbox::restore has been made more flexible and now accepts snapshots from any guest binary or memory layout when host functions are compatible by @​ludfjig in hyperlight-dev/hyperlight#1728
• Certain fixed guest addresses were changed on AArch64 to more easily accommodate 16k pages without wasting memory. Snapshots taken from sandboxes using the old addresses will not be loadable by new hyperlight versions by @​syntactically in hyperlight-dev/hyperlight#1674
• Improvements to component bindgen: expose fallibility of host API calls, properly track positivity/negativity, disambiguate chains of associated types, support reading WAT text components by @​syntactically in hyperlight-dev/hyperlight#1724, hyperlight-dev/hyperlight#1723, hyperlight-dev/hyperlight#1721, and hyperlight-dev/hyperlight#1732

Removed

Fixed

• Improved snapshot/OCI validation, rejecting malformed metadata and non-regular artifact files during load by @​ludfjig in hyperlight-dev/hyperlight#1668
• Fix RSS peak on Windows by replacing scratch zeroing with a fresh allocation on restore by @​danbugs in hyperlight-dev/hyperlight#1765
• Mark a sandbox unrecoverable in rare cases when snapshot restore fails while updating its VM mappings by @​ludfjig in hyperlight-dev/hyperlight#1727
• Fix symbol resolution in guest core dumps for sandboxes created from snapshots by @​ludfjig in hyperlight-dev/hyperlight#1618
• Fix dynamic mapping ownership on unmap failure by @​ludfjig in hyperlight-dev/hyperlight#1675
• Reset XCR0 during x86 snapshot restore by @​ludfjig in hyperlight-dev/hyperlight#1718
• Reseed guest libc rand() and random() after restoring a snapshot to avoid multiple sandboxes sharing PRNG state by @​ludfjig in hyperlight-dev/hyperlight#1667
• Validate ELF program headers in ElfInfo::new() to prevent host process abort from malformed guest binaries. PT_LOAD segments are now bounds-checked, base_va/va_size are stored as fields, and load_at() uses fully checked arithmetic by @​danbugs

Commits

• 388ea8e chore: prepare release v0.17.0 (#1778)
• 7588f1f Merge commit from fork
• 77bbe9a Avoid Cargo cache cleanup races on macOS (#1777)
• 1d0deec Batch register restore on MSHV and WHP (#1774)
• 944bb16 chore(deps): bump log from 0.4.33 to 0.4.34 (#1768)
• 68f125c chore(deps): bump syn from 3.0.3 to 3.0.4 (#1775)
• 56103a1 chore(deps): bump uuid from 1.24.1 to 1.25.0 (#1769)
• 562d25f Cache MSRs that should be reset in default case (#1772)
• f4f73c7 docs: add release-blocker resolution step to release checklist (#1773)
• f6f233b Construct a SandboxBuilder from its guest source (#1760)
• Additional commits viewable in compare view