diff --git a/.cargo/audit.toml b/.cargo/audit.toml
index c1030c0..7b5d48e 100644
--- a/.cargo/audit.toml
+++ b/.cargo/audit.toml
@@ -9,4 +9,8 @@ ignore = [
     # S3/GCS release backend 的 XML 清單解析；chefer `upgrade` 走 GitHub backend（JSON、
     # TLS），該程式路徑不會被觸發。等 self_update 換到 quick-xml >=0.41 後移除本條並升版。
     "RUSTSEC-2026-0194",
+    # RUSTSEC-2026-0195: 同上一條的 quick-xml <0.41（NsReader 無上限 namespace 配置的
+    # 記憶體耗盡 DoS）。同依賴鏈、同不觸發之程式路徑、同解除條件（self_update 換到
+    # quick-xml >=0.41 後一併移除）。
+    "RUSTSEC-2026-0195",
 ]
diff --git a/Cargo.lock b/Cargo.lock
index 6ad8258..2f8e412 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -242,7 +242,7 @@ checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
 
 [[package]]
 name = "chefer-assembler"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "chefer-bundle",
@@ -256,7 +256,7 @@ dependencies = [
 
 [[package]]
 name = "chefer-bundle"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -266,7 +266,7 @@ dependencies = [
 
 [[package]]
 name = "chefer-cli"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "appcipe-normalize",
@@ -295,7 +295,7 @@ dependencies = [
 
 [[package]]
 name = "chefer-pack"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "appcipe-spec",
@@ -316,7 +316,7 @@ dependencies = [
 
 [[package]]
 name = "chefer-runtime"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "chefer-bundle",
@@ -1078,7 +1078,7 @@ dependencies = [
 
 [[package]]
 name = "guest-agent"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "chefer-bundle",
@@ -3053,7 +3053,7 @@ checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
 
 [[package]]
 name = "vmm-backend"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "anyhow",
  "chefer-bundle",
@@ -3250,7 +3250,7 @@ dependencies = [
 
 [[package]]
 name = "whp-helper"
-version = "0.2.0"
+version = "0.3.0"
 dependencies = [
  "smoltcp",
  "tar",
diff --git a/crates/appcipe-spec/Cargo.toml b/crates/appcipe-spec/Cargo.toml
index 346affa..ed1c4a3 100644
--- a/crates/appcipe-spec/Cargo.toml
+++ b/crates/appcipe-spec/Cargo.toml
@@ -5,7 +5,7 @@ edition = "2024"
 
 [dependencies]
 anyhow = "1.0.98"
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
 serde = { version = "1.0.219", features = ["derive"] }
 serde_yaml = "0.9.34"
 
diff --git a/crates/chefer-assembler/Cargo.toml b/crates/chefer-assembler/Cargo.toml
index d1cea06..1571ec2 100644
--- a/crates/chefer-assembler/Cargo.toml
+++ b/crates/chefer-assembler/Cargo.toml
@@ -1,11 +1,11 @@
 [package]
 name = "chefer-assembler"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
 anyhow = "1.0.102"
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
 clap = { version = "4.6.1", features = ["derive"] }
 fs-err = "3.3.0"
 sha2 = "0.11.0"
diff --git a/crates/chefer-bundle/Cargo.toml b/crates/chefer-bundle/Cargo.toml
index 9c8d906..e70ed88 100644
--- a/crates/chefer-bundle/Cargo.toml
+++ b/crates/chefer-bundle/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "chefer-bundle"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
diff --git a/crates/chefer-cli/Cargo.toml b/crates/chefer-cli/Cargo.toml
index 3e48ed5..3c9cebf 100644
--- a/crates/chefer-cli/Cargo.toml
+++ b/crates/chefer-cli/Cargo.toml
@@ -1,14 +1,14 @@
 [package]
 name = "chefer-cli"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
 anyhow = "1.0.98"
 appcipe-normalize = { version = "0.1.0", path = "../appcipe-normalize" }
 appcipe-spec = { path = "../appcipe-spec" }
-chefer-assembler = { version = "0.2.0", path = "../chefer-assembler" }
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
+chefer-assembler = { version = "0.3.0", path = "../chefer-assembler" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
 chefer-pack = { path = "../chefer-pack" }
 clap = { version = "4.5.43", features = ["derive"] }
 comfy-table = "7.1.4"
@@ -23,7 +23,7 @@ serde_yaml = "0.9.34"
 sha2 = "0.11.0"
 tar = "0.4.46"
 tempfile = "3.27.0"
-vmm-backend = { version = "0.2.0", path = "../vmm-backend" }
+vmm-backend = { version = "0.3.0", path = "../vmm-backend" }
 zip = { version = "8.6.0", default-features = false, features = ["deflate-flate2"] }
 zstd = "0.13.3"
 
diff --git a/crates/chefer-pack/Cargo.toml b/crates/chefer-pack/Cargo.toml
index 5191b19..7054a54 100644
--- a/crates/chefer-pack/Cargo.toml
+++ b/crates/chefer-pack/Cargo.toml
@@ -1,12 +1,12 @@
 [package]
 name = "chefer-pack"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
 anyhow = "1.0.102"
 appcipe-spec = { version = "0.1.0", path = "../appcipe-spec" }
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
 flate2 = "1.1.9"
 fs-err = "3.3.0"
 # registry pull（source: image）。rustls 對齊 workspace（chefer-cli 也用 rustls）。
diff --git a/crates/chefer-runtime/Cargo.toml b/crates/chefer-runtime/Cargo.toml
index d606fc1..811d33f 100644
--- a/crates/chefer-runtime/Cargo.toml
+++ b/crates/chefer-runtime/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "chefer-runtime"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
@@ -15,8 +15,8 @@ clap = { version = "4.0", features = ["derive"] }
 fs-err = "3.3.0"
 sha2 = "0.11.0"
 ctrlc = "3.5.2"
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
-vmm-backend = { version = "0.2.0", path = "../vmm-backend" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
+vmm-backend = { version = "0.3.0", path = "../vmm-backend" }
 
 [target.'cfg(windows)'.dependencies]
 windows-sys = { version = "0.61", features = [
diff --git a/crates/guest-agent/Cargo.toml b/crates/guest-agent/Cargo.toml
index 938cd98..c8f0e2a 100644
--- a/crates/guest-agent/Cargo.toml
+++ b/crates/guest-agent/Cargo.toml
@@ -1,11 +1,11 @@
 [package]
 name = "guest-agent"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
 anyhow = "1.0.102"
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
 clap = { version = "4.6.1", features = ["derive"] }
 hex = "0.4.3"
 ruzstd = "0.8.3"
diff --git a/crates/vmm-backend/Cargo.toml b/crates/vmm-backend/Cargo.toml
index f265ecd..6c84671 100644
--- a/crates/vmm-backend/Cargo.toml
+++ b/crates/vmm-backend/Cargo.toml
@@ -1,12 +1,12 @@
 [package]
 name = "vmm-backend"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [dependencies]
 anyhow = "1.0.102"
-chefer-bundle = { version = "0.2.0", path = "../chefer-bundle" }
-guest-agent = { version = "0.2.0", path = "../guest-agent" }
+chefer-bundle = { version = "0.3.0", path = "../chefer-bundle" }
+guest-agent = { version = "0.3.0", path = "../guest-agent" }
 sha2 = "0.11.0"
 tar = "0.4.46"
 
diff --git a/crates/whp-helper/Cargo.toml b/crates/whp-helper/Cargo.toml
index 19b3be7..2a03c33 100644
--- a/crates/whp-helper/Cargo.toml
+++ b/crates/whp-helper/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "whp-helper"
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 
 [[bin]]