OpenSandbox

vdocker/execd/v1.0.17 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 16d Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Updates 🐛 Bug Fixes, ✨ Features, and What's New across a mixed release.

Type	Severity	Summary	CVE
Feature	Medium	Add EXECD_BOOTSTRAP_PRE_SCRIPT for pre-bootstrap env seeding Add EXECD_BOOTSTRAP_PRE_SCRIPT for pre-bootstrap env seeding Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix
Bugfix	Medium	Defer SSE response headers until first event fires Defer SSE response headers until first event fires Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	Preserve blank lines in command stdout SSE stream Preserve blank lines in command stdout SSE stream Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	Make uploaded files durable on virtio-fs / 9pfs Make uploaded files durable on virtio-fs / 9pfs Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—

Full changelog

Defer SSE response headers until first event fires. Pre-execution errors in RunCommand/RunCode/RunInSession previously wrote JSON onto an already-committed text/event-stream response, breaking SDK parsers (opensandbox: empty sse stream). Headers now commit lazily via idempotent setupSSEResponse; sync errors return application/json cleanly (#912)
Preserve blank lines in command stdout SSE stream. readFromPos no longer drops standalone newlines; \r\n coalesced (#902)
Make uploaded files durable on virtio-fs / 9pfs. /files/upload fsyncs parent dir and retries stat after chmod, fixing intermittent "file not found" on follow-up /command calls (#895)

Thanks to these contributors ❤️

Docker Hub: opensandbox/execd:v1.0.17
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.17

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.