OpenSandbox

vk8s/image-committer/v0.1.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 21d Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Updates 👥 Contributors, 🐛 Bug Fixes, and What's New across a mixed release.

Full changelog

Fall back to stopped snapshot containers — When committing a Kubernetes sandbox snapshot, the image-committer now falls back to nerdctl ps -a if the running-container lookup returns empty. Previously, if a container had already exited by the time the commit ran, the operation would fail. The committer still prefers running containers but can now find exited containers that still exist locally, making snapshot commits more reliable in race-prone scenarios. (#1164)

Docker Hub: opensandbox/image-committer:v0.1.1
GHCR: ghcr.io/opensandbox-group/opensandbox/image-committer:v0.1.1
Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/image-committer:v0.1.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.