Repository navigation
Update NVX runtime bundle to 0.2.0 - #1724
Open
Huzaifa Danish (huzaifa-d) wants to merge 1 commit into
Open
Huzaifa Danish (huzaifa-d) wants to merge 1 commit into
Huzaifa Danish (huzaifa-d) wants to merge 1 commit into
Conversation
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
|
Azure Pipelines: There may be pipelines that require an authorized user to comment /azp run to run. |
Contributor
There was a problem hiding this comment.
🔵 Needs a closer look
The trusted binary and guest-image update requires maintainer confirmation of the internal checksum-manifest digest and Windows/dependency-feed validation, which this review could not independently verify.
No open issues 🎉
What changed in this PR
Updates MXC’s Windows NVX backend to use the signed 0.2.0 runtime bundle through aci_edge_sandboxes 0.1.2, aligning dependency pins, integrity verification, and documentation.
Changes:
- Updates
aci_edge_sandboxes, its model dependency, and the transitivenvxdependency. - Replaces the approved checksum-manifest hash and records the new archive digest.
- Updates the NVX guide’s bundle version and signed-agent documentation link.
| File | Description |
|---|---|
src/mxc-sdk/src/backends/nvx/signature_verification.rs |
Updates the approved manifest hash and archive digest comment. |
src/mxc-sdk/Cargo.toml |
Pins aci_edge_sandboxes to 0.1.2. |
src/Cargo.lock |
Records updated dependency versions and checksums. |
docs/backends/nvx/nvx.md |
Aligns bundle guidance and documentation links with the update. |
Review effort: Balanced
Huzaifa Danish (huzaifa-d)
marked this pull request as ready for review
November 10, 2026 21:22
Darren Hoehna (dhoehna)
approved these changes
Nov 10, 2026
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
📖 Description
Update
aci_edge_sandboxesfrom 0.1.1 to 0.1.2.🔍 Validation
Windows x64 with WHP; Cargo commands ran from
src. The test runs used an isolatedLOCALAPPDATAbecause the host's existing NVX state directory failed its ACL check.✅ Checklist
feature-acceptedCargo.lock, thedependency-feed-checkcheck passes (see pull request builds)📋 Issue Type