OpenSandbox

vsdks/sandbox/go/v1.0.2 Feature

This release adds 4 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Added skipAccumulation support for execution handlers, platform specification, PVC auto-provisioning fields, and opt‑in SecureAccess for Kubernetes ingress gateways.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds `skipAccumulation` support for execution handlers. Adds `skipAccumulation` support for execution handlers. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds `PlatformSpec` support to sandbox creation APIs for OS/architecture targeting. Adds `PlatformSpec` support to sandbox creation APIs for OS/architecture targeting. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds SDK model support for PVC auto-provisioning fields. Adds SDK model support for PVC auto-provisioning fields. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds `SecureAccess` opt‑in support for sandbox creation via Kubernetes ingress gateway mode. Adds `SecureAccess` opt‑in support for sandbox creation via Kubernetes ingress gateway mode. Source: llm_adapter@2026-06-08 Confidence: high	—
Refactor	Low	Lowers Go module target to Go 1.20 and slims test dependencies. Lowers Go module target to Go 1.20 and slims test dependencies. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

What's New

Features

Added skipAccumulation support for execution handlers. When enabled, stdout/stderr events are still delivered to callbacks but are not appended to accumulated execution logs, preventing unbounded memory growth for long-running streamed commands. https://github.com/opensandbox-group/OpenSandbox/pull/990
Added PlatformSpec support to sandbox creation APIs, including CreateSandboxRequest.Platform, SandboxInfo.Platform, and SandboxCreateOptions.Platform. This lets Go callers request specific OS/architecture targets such as Windows sandboxes. https://github.com/opensandbox-group/OpenSandbox/pull/921
Added SDK model support for PVC auto-provisioning fields. https://github.com/opensandbox-group/OpenSandbox/pull/749
Added SecureAccess support for sandbox creation. This is opt-in and currently supported by Kubernetes ingress gateway mode. https://github.com/opensandbox-group/OpenSandbox/pull/745

Misc

Lowered the Go module target to Go 1.20 and slimmed test dependencies. https://github.com/opensandbox-group/OpenSandbox/pull/707

Contributors

@Pangjiping
@zpzjzj
@ninan-nn

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

All releases →

Related context

Related tools

Earlier breaking changes

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.