[chandarith-chea]

This bumps the version to 0.6.9 on the same 21 lines in 15 files as #66. It also pins Dockiva Engine to af13b2b (from 08c7901).

What changes for users

Dockiva Engine (Tomnerb/dockiva-engine#29 to #32):

• docker/build-push-action no longer hangs in its post step (chore(release): prepare v0.3.4 #31). With buildx older than 0.23, the action's build summary opens both ends of two named pipes (FIFOs) from two threads of one Node process. The engine paired a FIFO open only with another process, so those threads waited for each other forever and the job never finished. Threads of one process now pair as on Linux.
• docker run -m gets Docker's swap allowance (VM-free: exec, -it, networks, Compose, limits and faster writes #30). Without --memory-swap, a container may use as much swap again as its -m, as on Docker. A vite build that was OOM-killed at -m 6g now passes. --memory-swap equal to -m keeps the strict limit. free, /proc/meminfo, docker inspect and docker stats report it. docker stats also counts a container's running execs.
• A copied-up directory keeps its inode number (chore(release): prepare v0.3.3 #29), as on overlayfs. tar -xf of an archive with a ./ entry into an existing image directory (e.g. actions/setup-node-style extraction) no longer fails with "Directory renamed before its status could be extracted".
• tar as root no longer fails on symlinks (VM-free: 21 popular images run, image size limits removed #32). An open(O_PATH|O_NOFOLLOW) of a symlink opens the link, as on Linux. Before, glibc's fchmodat(AT_SYMLINK_NOFOLLOW) got ELOOP, so extracting node_modules/.bin links printed "Too many levels of symbolic links" and tar exited 2.

Checks

• This branch changes only the version lines and DOCKIVA_ENGINE_REF. af13b2b is engine main's tip, and v0.6.8's pin 08c7901 is an ancestor of it. Engine CI (corpus) passed on af13b2b.
• App: go test ./... passes.
• Engine af13b2b, bundle built with bundle_dockiva_engine.py for this release: verify_dockivad.py --new-home passes 31 of 31. verify_fork_sockets.py --cpus 4: 100 PASS, 0 FAIL, including the new fifo_threads_guest and opath_link_guest.
• release.yml is unchanged since v0.6.8. Its runner labels are ubuntu-24.04, ubuntu-24.04-arm, macos-26 and windows-2025.

Not checked

• swift test and a local macOS app build on this branch. Only version lines changed since v0.6.8, which passed both.
• The app with a native-engine build (--guest-assets) on this branch. The release workflow builds that.

After merge: tag main v0.6.9.