OpenSandbox

vjava/sandbox/v1.0.16 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 14d Containers & Orchestration

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

ReleasePort's take

Moderate signal

editorial:auto 13d

ReleasePort Layer 1 v1.0.16 adds several new isolation APIs and removes the unused PoolStateStoreContentionException.

Why it matters: New isolation.runOnce, withSession, list(), bind‑mounts, and FORCE‑destroy capabilities expand session control; removal of the never‑raised PoolStateStoreContentionException simplifies error handling.

Summary

AI summary

Updates ✨ Features, 👥 Contributors, and 📦 Misc across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	Removes CredentialMatch.ports; port derived from scheme instead. Removes CredentialMatch.ports; port derived from scheme instead. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature
Feature	Medium	Adds isolation.runOnce API for one-shot sessions with cleanup. Adds isolation.runOnce API for one-shot sessions with cleanup. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds isolation.withSession scoped session helper with guaranteed cleanup. Adds isolation.withSession scoped session helper with guaranteed cleanup. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds sandbox.isolation().list() to enumerate isolated sessions. Adds sandbox.isolation().list() to enumerate isolated sessions. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds bind mounts support via CreateIsolatedSessionRequest.binds with uidMode. Adds bind mounts support via CreateIsolatedSessionRequest.binds with uidMode. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds FORCE-destroy capability to SandboxPoolManager with DESTROYING/DESTROYED states. Adds FORCE-destroy capability to SandboxPoolManager with DESTROYING/DESTROYED states. Source: llm_adapter@2026-07-13 Confidence: high	—
Feature	Medium	Adds credential vault placeholder substitutions for path, query, header, and body bindings. Adds credential vault placeholder substitutions for path, query, header, and body bindings. Source: llm_adapter@2026-07-13 Confidence: high	—
Deprecation	Low	Removes PoolStateStoreContentionException (never raised). Removes PoolStateStoreContentionException (never raised). Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Medium	Bumps version to 1.0.16 and realigns default User-Agent string. Bumps version to 1.0.16 and realigns default User-Agent string. Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

What's New

✨ Features

Isolation convenience APIs — isolation.runOnce(code, workspace, ...) and isolation.withSession(req) { ... } for one-shot / scoped sessions with guaranteed cleanup. (#1222)
List isolated sessions — sandbox.isolation().list(). (#1269)
Isolated bind mounts — CreateIsolatedSessionRequest.binds accepts BindMount(source, dest, readonly) for arbitrary host→namespace mappings; also exposes uidMode. (#1264)
Sandbox pool destroy — SandboxPoolManager FORCE-destroy with DESTROYING fence + DESTROYED tombstone, supported by both in-memory and Redis stores. (#1225)
Credential Vault placeholder substitutions — opt-in placeholders for path / query / header / body (incl. passthrough bindings). (#1251)
IsolationService now declares runOnce / withSession as default methods — custom implementations may need to accept the defaults. (#1222)
CredentialMatch.ports removed; intercept port is derived from scheme (http→80, https→443). Drop any .ports(...) calls. (#1189)
PoolStateStoreContentionException removed (never actually raised). (#1198)

📦 Misc

Bump to 1.0.16; realign default User-Agent (OpenSandbox-Kotlin-SDK/1.0.16) which had lagged, with a regression test to prevent future drift. (#1248)

👥 Contributors

@jianpingpei
@jwx0925
@ninan-nn
@Pangjiping

Breaking Changes

`CredentialMatch.ports` removed; intercept port derived from scheme (http→80, https→443). Drop any `.ports(...)` calls.
`PoolStateStoreContentionException` removed (never actually raised).

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

All releases →

Related context

Related tools

Earlier breaking changes

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.
vserver/v0.2.0 Execd install path flattened from "/opt/opensandbox/bin/" to "/opt/opensandbox/".