firecracker-microvm/firecracker v1.16.1 on GitHub

Fixed

#5959: Reverted the use of O_NOFOLLOW for the jailer's cgroup and network namespace file operations, so symlinks are again allowed in these paths.
#5958: Fixed a bug that caused vsock guest-to-host connections to time out after snapshot restore, triggered by taking a snapshot with a TX descriptor in-flight. On restore the device now replays the TX queue notification so in-flight TX descriptors are re-processed and notification suppression is re-armed.