All pull requests

Pull requests

• chore(master): release 1.1.1

  autorelease: pending
  #840·vgs-ci-bot[bot] opened Nov 12, 2026Bot·

  ·

• chore: sync libstarlark with Bazel 6fa3298c70 and keep Larky's defaults

  #818·mahmoudimus opened Nov 7, 2026Collaborator·

  ·
  2

• fix(vault): keep the SYNTHETIC decorator keys in DecoratorConfig.options

  #813·mahmoudimus opened Nov 6, 2026Collaborator·4/4·

  ·
  1

• feat(synthetic): add @vgs//synthetic Faker and vault.redact(alias=...)

  #812·mahmoudimus opened Nov 6, 2026Collaborator·3/4·

  ·
  1

• feat(vault): add an optional record keyword to vault.reveal and vault.delete

  #811·mahmoudimus opened Nov 6, 2026Collaborator·2/4·

  ·
  1

• test(libstarlark): make PrinterTest's stack overflow independent of JIT state

  #810·mahmoudimus opened Nov 6, 2026Collaborator·1/4·

  ·
  1

• fix: make jose match python-jose for zip, A*GCMKW, HMAC and RSA JWKs, and to_pem

  #797·mahmoudimus opened Oct 19, 2026Collaborator·5/5·

  ·
  7

• fix: handle jwe key unwrap errors and fix jwk.register_key as python-jose does

  #796·mahmoudimus opened Oct 19, 2026Collaborator·4/5·

  ·
  1

• feat: open X25519 ECDH-ES JWEs: X25519 in Crypto.PublicKey.ECC, Crypto.Protocol.DH and Concat KDF

  #794·mahmoudimus opened Oct 19, 2026Collaborator·3/5·

  ·
  3

• feat: add tenant-bound pooled GraalWasm isolates

  DO NOT MERGE
  #792·mahmoudimus opened Oct 14, 2026Collaborator·

  ·
  7

• feat(wasm): isolate remote execution in a limited worker Pod

  DO NOT MERGE
  #789·mahmoudimus opened Oct 14, 2026Collaborator·

  ·
  5

• feat: Add authenticated remote WASM worker transport

  DO NOT MERGE
  #787·mahmoudimus opened Oct 13, 2026Collaborator·7/7·

  ·
  5

• feat: Add opt-in supervised WASM worker backend

  DO NOT MERGE
  #786·mahmoudimus opened Oct 13, 2026Collaborator·6/7·

  ·
  7

• docs: validate a signed token on a request and reject it with a 401

  #782·mahmoudimus opened Oct 13, 2026Collaborator·2/5·

  ·
  3

• feat: port python-jose 3.5.0's jwt module to @vendor//jose

  #779·mahmoudimus opened Oct 13, 2026Collaborator·1/5·

  ·
  6

• fix: keep VGSHttpResponse headers a dict the host can send

  DO NOT MERGE
  #775·mahmoudimus opened Oct 13, 2026Collaborator·

  ·
  10

• feat: Ship local WASM modules and optional GraalVM isolation

  DO NOT MERGE
  #768·mahmoudimus opened Oct 6, 2026Collaborator·5/7·2 of 5 tasks·

  ·
  3

• feat: Build JavaScript for @vgs//wasm with Javy, without SIMD

  DO NOT MERGE
  #767·mahmoudimus opened Oct 6, 2026Collaborator·4/7·2 of 5 tasks·

  ·
  5

• feat: Add GraalWasm as an optional WebAssembly runtime (-Dlarky.wasm.runtime=graal)

  DO NOT MERGE
  #766·mahmoudimus opened Oct 6, 2026Collaborator·3/7·2 of 5 tasks·

  ·
  5

• feat: Add larky-wasm, a one-file WebAssembly runtime API with Endive as the default

  DO NOT MERGE
  #765·mahmoudimus opened Oct 6, 2026Collaborator·1/7·2 of 5 tasks·

  ·
  7

• feat: Add @vgs//wasm to run WebAssembly shipped with a script

  DO NOT MERGE
  #761·mahmoudimus opened Oct 3, 2026Collaborator·2/7·2 of 5 tasks·

  ·

• feat: Compile bytecode chunks to JVM methods (-Dstarlark.bytecode.vm=jvm)

  DO NOT MERGE
  #728·mahmoudimus opened Sep 30, 2026Collaborator·4/4·2 of 5 tasks·

  ·

• feat: Run typed programs on the bytecode VMs

  DO NOT MERGE
  #727·mahmoudimus opened Sep 30, 2026Collaborator·3/4·2 of 5 tasks·

  ·

• feat: Add starlark-go, starlark-rust and Buck-style bytecode VMs

  DO NOT MERGE
  #726·mahmoudimus opened Sep 30, 2026Collaborator·2/4·2 of 5 tasks·

  ·

• feat: Add a bytecode compiler and VM to libstarlark, behind -Dstarlark.bytecode

  DO NOT MERGE
  #725·mahmoudimus opened Sep 30, 2026Collaborator·1/4·2 of 5 tasks·

  ·