microkit: add 2.3.1 manual

_config.yml

@@ -40,7 +40,7 @@ collections:
 sel4: "16.0.0"
 camkes: "camkes-3.13.0"
 capdl: "0.6.0"
-microkit: "2.3.0"
+microkit: "2.3.1"
 
 # Front matter defaults:
 defaults:

_data/projects/microkit.yml

@@ -12,6 +12,24 @@ repositories:
     repo: microkit_tutorial
 
 sdk_downloads:
+  - version: 2.3.1
+    sdks:
+    - label: "microkit-sdk-2.3.1-linux-x86-64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.3.1/microkit-sdk-2.3.1-linux-x86-64.tar.gz"
+      os: Linux
+      arch: x86-64
+    - label: "microkit-sdk-2.3.1-linux-aarch64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.3.1/microkit-sdk-2.3.1-linux-aarch64.tar.gz"
+      os: Linux
+      arch: AArch64
+    - label: "microkit-sdk-2.3.1-macos-x86-64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.3.1/microkit-sdk-2.3.1-macos-x86-64.tar.gz"
+      os: macOS
+      arch: x86-64
+    - label: "microkit-sdk-2.3.1-macos-aarch64.tar.gz"
+      url: "https://github.com/seL4/microkit/releases/download/2.3.1/microkit-sdk-2.3.1-macos-aarch64.tar.gz"
+      os: macOS
+      arch: AArch64
   - version: 2.3.0
     sdks:
     - label: "microkit-sdk-2.3.0-linux-x86-64.tar.gz"

content_collections/_releases/microkit/2.3.1.md

@@ -0,0 +1,50 @@
+---
+version: 2.3.1
+project: microkit
+parent: /releases/microkit.html
+SPDX-License-Identifier: CC-BY-SA-4.0
+SPDX-FileCopyrightText: 2026 seL4 International
+---
+
+# Microkit Release 2.3.1
+
+This release contains a security fix, various bug fixes, and new board support.
+
+## Security
+
+* Endpoint and Notification capabilities now only get the rights they need.
+  Previously the tool gave all rights, which let a let a PD do more than
+  intended. For example, a client PD with a PPC to a server PD can receive
+  on the server's Endpoint and consume all the messages meant for the server.
+
+## Bug fixes
+
+* When using the domain scheduler, a VM's VCPUs are now placed in the same
+  domain as the VMM PD. Previously VM performance was badly degraded.
+* The tool now checks that VM priority in the SDF are valid.
+* The second CPU cluster on the RockPro64 is now enabled in SMP
+  configurations.
+* The tool now reports an error for duplicate MSI or I/O APIC interrupt
+  sources. The kernel does not detect this, so it previously went
+  unnoticed.
+
+## Board support
+
+* Raspberry Pi 5B
+
+## Known issue
+
+* Currently, on x86-64, VMs will not work if you create more than 1 VM per
+  system or use the SMP configuration of `x86_64_generic_vtx`. This is due
+  to a bug in seL4, which was fixed in
+  [PR 1732](https://github.com/seL4/seL4/pull/1732). The fix will be brought
+  to Microkit on the next seL4 and Microkit release.
+
+## Full changelog
+
+Use `git log 2.3.0..2.3.1` in <https://github.com/seL4/microkit/>
+
+## More details
+
+See the [documentation](/projects/microkit/manual/2.3.1/)
+or ask on the mailing list!

projects/microkit/manual/latest

@@ -1 +1 @@
-2.3.0
+2.3.1