v1.16.1

SaschaHeyer/gen-ai-livestreamv1.16.1Jul 2, 2026by not4s

AI Summary

This release focuses on stability fixes, specifically addressing vsock connection timeouts during snapshot restore and reverting path handling restrictions to allow symlinks.

Key Highlights

Reverted use of O_NOFOLLOW for jailer paths to allow symlinks in cgroup and network namespace operations
Fixed vsock guest-to-host timeout after snapshot restore triggered by taking a snapshot with an in-flight TX descriptor
Ensured TX queue notifications are replayed correctly on restore to re-process in-flight descriptors

Full Release Notes

## Fixed

* [#5959](https://github.com/firecracker-microvm/firecracker/pull/5959): Reverted the use of `O_NOFOLLOW` for the jailer's cgroup and network namespace file operations, so symlinks are again allowed in these paths.
* [#5958](https://github.com/firecracker-microvm/firecracker/pull/5958): Fixed a bug that caused vsock guest-to-host connections to time out after snapshot restore, triggered by taking a snapshot with a TX descriptor in-flight. On restore the device now replays the TX queue notification so in-flight TX descriptors are re-processed and notification suppression is re-armed.