This release adds 3 notable features for engineering teams evaluating rollout.
Published 2d
Containers & Orchestration
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai
ai-agent
ai-infra
kubernetes
sandbox
Summary
AI summaryUpdates ✨ Features, 👥 Contributors, and 🐛 Bug Fixes across a mixed release.
Full changelog
What's New
✨ Features
- Retrying pool acquire policies — Go sandbox pools now support
AcquirePolicyRetryNextIdleandAcquirePolicyRetryNextIdleThenCreate, allowingAcquireto skip stale idle candidates before failing or falling back to direct create. Existing policies keep their current behavior;MaxAcquireRetriesdefaults to 3. #1347 - Sandbox create metrics —
Sandbox.Createnow reports fire-and-forgetsandbox.createlatency events to the lifecycle server. Reporting ignores old-server version skew and can be disabled withOPENSANDBOX_DISABLE_METRICS=1. #1307 - Client IP header — the SDK now best-effort detects the host intranet IPv4 and sends it as
OPEN-SANDBOX-CLIENT-IPon outbound requests. User-provided headers are never overwritten. #1326 - Attach to isolated sessions — the SDK can now attach to an existing isolated session by session ID, allowing stateless workers to recover a functional handle while the execd in-memory session remains alive. #1295
- UID mode availability — isolated session responses now expose per-mode
setpriv/usernsavailability, and unavailable requested modes fail with503 NOT_SUPPORTED. #1320 - Exact snapshot name filtering — snapshot listing now supports an exact
namefilter. #1301 - Isolated session bind mounts and listing — isolated sessions can now receive explicit bind mounts, and the SDK exposes isolated session listing so callers can inspect active sessions. #1264 #1269
- Credential Vault placeholder substitutions — request matching now supports opt-in placeholders for path, query, header, and body surfaces, including passthrough auth bindings. #1251
🐛 Bug Fixes
- Streaming and stale connection hardening — long-lived SSE command streams no longer use the normal total request timeout, so command output is not cut off by
RequestTimeout. IdempotentGET/HEADrequests retry once on a fresh connection after timeout, reset, or EOF errors. #1316
📦 Misc
- Bumped the Go SDK version constant and default User-Agent string for this release. #1384
👥 Contributors
- @FAUST-BENCHOU
- @Pangjiping
- @jianpingpei
- @jwx0925
- @ninan-nn
- @ruirui6946
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Earlier breaking changes
- vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
- vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
- vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
- vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
- vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.
Beta — feedback welcome: [email protected]