Runner Provisioner Release 0.1.3

New:

• Added support for SSH reruns on KubeVirt VM runners: you can now SSH directly into the exact VM that ran a job, over the public internet, for debugging. Off by default.

Improvements:

• runner-provisioner can now poll task counts using each resource class’s own token instead of a separate global CircleCI API token, so that token no longer needs to be provisioned as a secret. Existing configurations using the old token keep working.
• Added HTTP/HTTPS proxy support, so runner-provisioner and the VMs it provisions can operate in environments with restricted outbound internet access.
• Renamed the chart’s tokenProxy sidecar setting to sidecar for clarity; the old tokenProxy.enabled value is still honored.

Security:

• Patched a high-severity vulnerability in a bundled compression library (CVE-2026-63209).