This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+11 more
Summary
AI summaryUpdates cli, runtime, and chore across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds explicit mount kind flags to CLI. Adds explicit mount kind flags to CLI. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Extracts transport client packages into separate agent-client module. Extracts transport client packages into separate agent-client module. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Inherits global log level for sandbox runs in CLI. Inherits global log level for sandbox runs in CLI. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Links installer commands through local bin. Links installer commands through local bin. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Unifies sandbox lifecycle APIs in SDK. Unifies sandbox lifecycle APIs in SDK. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Low |
Atomically creates per-sandbox named volumes via MountBuilder::create_named. Atomically creates per-sandbox named volumes via MountBuilder::create_named. Source: granite4.1:30b@2026-06-10-audit Confidence: high |
— |
| Feature | Low |
Reports guest runtime metrics. Reports guest runtime metrics. Source: granite4.1:30b@2026-06-10-audit Confidence: high |
— |
| Feature | Low |
Adds idempotent named volume mounts. Adds idempotent named volume mounts. Source: granite4.1:30b@2026-06-10-audit Confidence: high |
— |
| Bugfix | Medium |
Prevents idle reclamation of sandboxes with running executions. Prevents idle reclamation of sandboxes with running executions. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Stops CI disk cleanup from deleting the active checkout. Stops CI disk cleanup from deleting the active checkout. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Hardens heartbeat idle detection in runtime. Hardens heartbeat idle detection in runtime. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Wakes publisher after draining host channel in network layer. Wakes publisher after draining host channel in network layer. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Bugfix | Medium |
Skips sandboxes whose slot stopped updating in metrics collector. Skips sandboxes whose slot stopped updating in metrics collector. Source: llm_adapter@2026-06-10 Confidence: high |
— |
Full changelog
What's Changed
- chore(release): update skills release gitlink by @appcypher in https://github.com/superradcompany/microsandbox/pull/924
- chore: refresh npm lockfile after v0.5.5 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/926
- feat(cli): add explicit mount kind flags by @appcypher in https://github.com/superradcompany/microsandbox/pull/927
- feat(agent-client): extract transport client packages by @appcypher in https://github.com/superradcompany/microsandbox/pull/935
- fix(runtime): exclude sandboxes with running execs from idle reclamation by @dijdzv in https://github.com/superradcompany/microsandbox/pull/934
- fix(ci): stop disk cleanup from deleting the active checkout by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/943
- fix(runtime): harden heartbeat idle detection by @appcypher in https://github.com/superradcompany/microsandbox/pull/937
- fix(network): wake publisher after draining host channel by @chiehwangs in https://github.com/superradcompany/microsandbox/pull/930
- fix(metrics-collector): skip sandboxes whose slot stopped updating by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/942
- fix(cli): inherit global log level for sandbox runs by @appcypher in https://github.com/superradcompany/microsandbox/pull/947
- feat(installer): link commands through local bin by @appcypher in https://github.com/superradcompany/microsandbox/pull/945
- feat(sdk): unify sandbox lifecycle APIs by @appcypher in https://github.com/superradcompany/microsandbox/pull/938
- feat(sandbox): atomically create per-sandbox named volumes via MountBuilder::create_named by @nuri-yoo in https://github.com/superradcompany/microsandbox/pull/801
- feat(metrics): report guest runtime metrics by @appcypher in https://github.com/superradcompany/microsandbox/pull/939
- feat(volumes): add idempotent named volume mounts by @appcypher in https://github.com/superradcompany/microsandbox/pull/950
- docs: reposition microsandbox around untrusted workloads by @appcypher in https://github.com/superradcompany/microsandbox/pull/952
- chore(release): bump microsandbox to 0.5.6 by @appcypher in https://github.com/superradcompany/microsandbox/pull/951
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.5.5...v0.5.6
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About microsandbox
secure, local, cross-platform and programmable sandboxes for AI agents
Related context
Related tools
Beta — feedback welcome: [email protected]