chore(deps): update dependency lima-vm/lima to v2.2.0

[renovate]

This PR contains the following updates:

Package	Update	Change
lima-vm/lima	minor	v2.1.1 → v2.2.0

---

Release Notes

lima-vm/lima (lima-vm/lima)

v2.2.0

Compare Source

Highlights:

• 🪟Experimentally support Windows server 2025 guests
• 🪟Experimentally support Windows 11 guests
• 🐧Experimentally allow opting out from password-less sudo

Changes

• Windows guest support:

  • Experimentally support Windows server 2025 guests (#​5138, thanks to LFX mentee @​mie313)
  • Experimentally support Windows 11 guests (#​5164 #​5185 #​5244, thanks to LFX mentee @​mie313)

• Linux guest support:

  • Experimentally allow opting out from password-less sudo (#​5109 etc., thanks to @​Aneesh-Hegde)

• Windows host support:

  • Change the default VM driver from wsl2 to qemu (#​4788)
  • Remove dependency on cygpath.exe (#​5205, thanks to LFX mentee @​mie313 with assistance from @​jandubois)

• macOS host support:

  • Add LaunchDaemon support for headless macOS servers (#​4984, thanks to @​resker)

• VM driver infrastructure:

  • Update API (#​4877, thanks to @​unsuman)

• QEMU:

  • Implement TPM emulation (#​5148, thanks to @​mie313)

• VZ:

  • Implement virtio-sound interface (#​5016, thanks to @​Aneesh-Hegde)

• limactl CLI:

  • Add limactl screenshot (#​5098, thanks to @​trodemaster)
  • Accept limactl edit flags in limactl restart (#​5076, thanks to @​itsme-ranger)
  • Accept --shell flag in limactl (create|edit|start) (#​5194, thanks to @​unsuman)

• Networking:

  • Limit socket_vmnet access from %everyone to the %admin group (#​5190, thanks to @​ekalinin)

• nerdctl:

  • Update from v2.3.4 to v2.3.5 (#​5297)

• Templates:

  • almalinux-kitten: Move to experimental/ (#​4736)
  • alpine: Support --plain (#​3057)
  • debian: Support --image-variant=nocloud (#​5159, thanks to @​Nachiket-Roy)
  • fedora: support RISC-V 64 (#​5201)
  • ubuntu: Support --image-variant=minimal (#​5159, thanks to @​Nachiket-Roy)
  • k8s: Support version and registry parameters (#​4872 #​5200, thanks to @​afbjorklund)
  • experimental/ubuntu-next: point to ubuntu-26.10 (#​5214)

Full changes: https://github.com/lima-vm/lima/milestone/70?closed=1
Thanks to @​Aneesh-Hegde @​Austin1serb @​Nachiket-Roy @​Nashit-h @​SABITHSAHEB @​SAY-5 @​afbjorklund @​arimu1 @​arixmkii @​bitalizer @​ciderale @​coulof @​ekalinin @​gaurav0107 @​itsme-ranger @​jandubois @​kavirakesh14 @​loncharles @​mie313 @​mvanhorn @​opjt @​pirate @​resker @​trodemaster @​unsuman

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/29840916918

The sha256sum of the SHA256SUMS file itself is 7da5160ee9b22de8eec4222e581334ee6326881e20d5aa8eb29b22f897312a5f .

---

Release manager: @​AkihiroSuda

v2.1.4

Compare Source

Changes

• Cherry-picks from master to release/2.1
  • Only add xorrisofs flag to the xorrisofs command (#​5129, thanks to @​afbjorklund)
  • fix(qemu): fallback from hvf to tcg on macOS (#​5137, thanks to @​kavirakesh14)
  • nerdctl: update from v2.3.3 to v2.3.4 (#​5169)
  • templates: update (#​5170)
  • templates/freebsd-15: support 9p mounts (#​5172)
  • cmd/limactl: include name in network list --json output (#​5179, thanks to @​coulof)

Full changes: https://github.com/lima-vm/lima/milestone/73?closed=1

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/28630554371

The sha256sum of the SHA256SUMS file itself is 8bd82f03bc23acafc7e129fdbcbd9401b50eee2723817b8127f16dee3aebef92 .

---

Release manager: @​AkihiroSuda

v2.1.3

Compare Source

• Cherry-picks from master to release/2.1 (#​5131)

  • limayaml: do not default containerd.user=true on non-Linux guests (#​5090, thanks to @​gaurav0107)
  • fix(copytool): fallback to scp for remote source and destination in auto mode (#​5097, thanks to @​unsuman)
  • templates: switch the default image from ubuntu-25.10 to ubuntu-26.04 (#​5106)
  • krunkit: disable ssh.overVsock by default (#​5123)
  • fix(makefile): propagate build failure for additional drivers (#​5125, thanks to @​unsuman)
  • templates: update (#​5130)
  • nerdctl: update from v2.2.2 to v2.3.3 (#​5134)
    • v2.3.0 release note
    • v2.3.1 release note
    • v2.3.2 release note
    • v2.3.3 release note
      • nerdctl v2.3.3 contains containerd v2.3.2, which fixes CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262

• Fix CVE-2026-53657 (GHSA-2j9v-p4xj-cjw2) "An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket"

Full changes: https://github.com/lima-vm/lima/milestone/72

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/27824357138

The sha256sum of the SHA256SUMS file itself is ddaf499316c159493ccf853393e35c93d69e8c1f85cb041f6f7e918157625c6c .

---

Release manager: @​AkihiroSuda

v2.1.2

Compare Source

Changes

• limactl CLI:

  • fix(shell): check if mounts contain hostCurrentDir, not just len > 0 (#​4799, thanks to @​opjt)
  • limactl: add --param shortcut for template parameters (#​4873, thanks to @​jandubois)
  • shell: fix path quoting for rsync 3.0.0 through 3.2.3 (#​4883, thanks to @​Mysterio-17)
  • pkg/store: treat unknown terminal width as unlimited in limactl ls (#​4918, thanks to @​sahitya-chandra)
  • feat: add tab suggestions for --set flag (#​5000, thanks to @​Aneesh-Hegde)
  • fix(shell-sync): preserve synced guest changes on TUI interruption (#​5002)

• Templates:

  • Update k8s.yaml for bootstrapToken configuration in kubeadm (#​4829, thanks to @​techthumb)
  • templates: migrate from cpuType to vmOpts.qemu.cpuType (#​4834, thanks to @​AkihiroSuda)
  • Multi node k8s test updates and related fixes (#​4835, thanks to @​techthumb)
  • Bump k8s flannel version from 0.27.4 to 0.28.4 (#​4843, thanks to @​afbjorklund)
  • templates: add ubuntu-26.04 (#​4874, thanks to @​AkihiroSuda)
  • templates: k8s: pin Kubernetes version to 1.36 (#​4882, thanks to @​AkihiroSuda)
  • templates: split template:alpine to template:alpine-{3.21,3.22,3.23} (#​4897, thanks to @​Mysterio-17)
  • feat(templates): add Fedora 44 template; remove Fedora 41 template (#​4905, thanks to @​valdela1)
  • Missing image and checksum for debian-13 riscv64 (#​4978, thanks to @​afbjorklund)
  • fix: prevent docker from running as root in rootless environment (#​4987, thanks to @​Aneesh-Hegde)

• Hostagent:

  • hostagent: close stale GuestAgentClient on reconnect to stop ClientConn leak (#​4889, thanks to @​mn-ram)
  • hostagent: stop leaking inotify watchers and re-spawn the gRPC stream after guest-agent reconnect (#​4895, thanks to @​mn-ram)
  • hostagent: stop destroying ga.sock on guest-agent reconnect (#​4911, thanks to @​mn-ram)
  • hostagent: wait for the guest agent before opening the inotify stream (#​4924, thanks to @​sahitya-chandra)

• Drivers:

  • Krunkit: support SSHOverVsock and replace SSH-based guestagent connection with vsock (#​4822)
  • wsl2: stop spinning in for { <-ctx.Done() } after instance stop (#​4892, thanks to @​mn-ram)
  • fix: track driver PID to prevent zombie processes (#​4939, thanks to @​Aneesh-Hegde)
  • fix(darwin): pin main goroutine to OS thread 0 for VZ GUI (#​5036, thanks to @​trodemaster)

• QEMU:

  • openSUSE dropped the 2MB OVMF images from QEMU in version 202602 (#​4910, thanks to @​jandubois)
  • QEMU command line: allow kernel-irqchip enabled with WHPX (#​4933, thanks to @​arixmkii)
  • qemu: fix non-deterministic boot disk with bootindex and s390x support (#​4944, thanks to @​Soumya-codr)
  • Deprecate _LIMA_QEMU_UEFI_IN_BIOS flag (#​4948, thanks to @​arixmkii)
  • fix(validate): correct misleading mountType validation error on Windows (#​4956, thanks to @​InsidiousLion)
  • qemu: pass -vga none for headless guests (#​4975, thanks to @​jandubois)

• Port Forwarding:

  • portfwd: fix gRPC tunnel connection leak (#​5043, thanks to @​vasileknik76)

• Guest Support:

  • Fix DNS not propagated from base template (#​4803, thanks to @​opjt)
  • feat: validate macOS 26+ requirement for macOS guest VMs (#​4809, thanks to @​sharanrajt)
  • Busybox grep doesn't support the long form options (#​4915, thanks to @​jandubois)
  • Settle udev between sfdisk and lsblk (#​4920, thanks to @​jandubois)
  • Add Apparmor's fusermount3 custom rule for reverse SSHFS (#​4968, thanks to @​mie313)

• Documentation:

  • Fix LIMA_SHELLENV_ALLOW docs to match implementation (#​4832, thanks to @​jandubois)
  • docs(stargz): drop Rosetta requirement note (#​4860, thanks to @​mvanhorn)
  • docs: add blogs section with curated CNCF and nttlabs posts (#​4863, thanks to @​singhvishalkr)
  • docs: add limactl help yq concept guide to explain yqlib limitations (#​4886, thanks to @​Mysterio-17)
  • docs: add network and disk management guide (#​4925, thanks to @​alliasgher)
  • docs: add base image update and supply chain guidance (#​4963)

Full Changes: https://github.com/lima-vm/lima/milestone/71?closed=1

Thanks to @​afbjorklund @​AkihiroSuda @​alexandear @​alliasgher @​Aneesh-Hegde @​arixmkii @​ashwat287 @​InsidiousLion @​jandubois @​kolyshkin @​mie313 @​mn-ram @​mvanhorn @​Mysterio-17 @​opjt @​sahitya-chandra @​sharanrajt @​singhvishalkr @​Soumya-codr @​SwarritSrivastava @​techthumb @​trodemaster @​valdela1 @​varsha-0007 @​vasileknik76 🙏🏻

Usage

$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux

---

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/lima-vm/lima/actions/runs/26744671609

The sha256sum of the SHA256SUMS file itself is 84da4b818130a3601c2aafa53bca25a0e8088b4aa9780b451fc9b778f96b994b .

---

Release manager: Ansuman Sahoo (@​unsuman)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.