This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
ReleasePort's take
Light signalMistle v0.6.0 adds sandbox profile automations and related features for webhooks, runtime configuration, and provider management. The release includes 10 stability fixes across profile UI, port handling, and workflow systems.
Why it matters: Sandbox profile automations expand workflow capabilities with 19 new features across webhooks, runtime configuration, and provider integrations. Ten bugfixes improve stability in profile management and credential handling. Routine upgrade.
Summary
AI summaryAdd sandbox profile automations tab and many related enhancements.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Save sandbox profile drafts atomically Save sandbox profile drafts atomically Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Surface webhook trigger capabilities Surface webhook trigger capabilities Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Check draft automation impact Check draft automation impact Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox runtime config columns Add sandbox runtime config columns Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Sync slack webhook trigger capabilities Sync slack webhook trigger capabilities Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox integration kind Add sandbox integration kind Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox runtime integration definition Add sandbox runtime integration definition Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Improve Slack webhook setup visibility Improve Slack webhook setup visibility Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox providers catalog endpoint Add sandbox providers catalog endpoint Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Expose sandbox provider profile fields Expose sandbox provider profile fields Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Validate sandbox profile providers Validate sandbox profile providers Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox runtime profile editor Add sandbox runtime profile editor Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Sync github webhook trigger capabilities Sync github webhook trigger capabilities Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Pass sandbox runtime through workflows Pass sandbox runtime through workflows Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Resolve sandbox runtime credentials Resolve sandbox runtime credentials Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Apply sandbox runtime resources Apply sandbox runtime resources Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox profile automations tab Add sandbox profile automations tab Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add sandbox base image provider builders Add sandbox base image provider builders Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Pass automation cwd to webhook conversations Pass automation cwd to webhook conversations Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Keep sandbox profile tab background full height Keep sandbox profile tab background full height Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Reserve port access http stream ids Reserve port access http stream ids Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Recover sandbox profile publish snapshots Recover sandbox profile publish snapshots Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Preserve sandbox startup step retries Preserve sandbox startup step retries Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Keep primary repository switches in current codex thread Keep primary repository switches in current codex thread Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Show published sandbox profile version Show published sandbox profile version Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Preserve terminal cwd in session workbench Preserve terminal cwd in session workbench Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Load workflow migration script tsconfig Load workflow migration script tsconfig Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Save identity link connection before enabling Save identity link connection before enabling Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Require source order keys for webhook automations Require source order keys for webhook automations Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Remove identity linking loading spinners Remove identity linking loading spinners Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
[0.6.0] - 2026-05-11
Features
- Save sandbox profile drafts atomically (#1838)
- Surface webhook trigger capabilities (#1842)
- Check draft automation impact (#1855)
- Add sandbox runtime config columns (#1878)
- Sync slack webhook trigger capabilities (#1861)
- Add sandbox integration kind (#1883)
- Add sandbox runtime integration definition (#1884)
- Improve Slack webhook setup visibility (#1886)
- Add sandbox providers catalog endpoint (#1885)
- Expose sandbox provider profile fields (#1890)
- Validate sandbox profile providers (#1891)
- Add sandbox runtime profile editor (#1892)
- Sync github webhook trigger capabilities (#1895)
- Pass sandbox runtime through workflows
- Resolve sandbox runtime credentials
- Apply sandbox runtime resources
- Add sandbox profile automations tab (#1915)
- Add sandbox base image provider builders (#1918)
Bug Fixes
- Pass automation cwd to webhook conversations (#1845)
- Keep sandbox profile tab background full height (#1846)
- Reserve port access http stream ids (#1848)
- Recover sandbox profile publish snapshots (#1847)
- Preserve sandbox startup step retries (#1849)
- Keep primary repository switches in current codex thread (#1851)
- Show published sandbox profile version (#1852)
- Preserve terminal cwd in session workbench
- Load workflow migration script tsconfig (#1859)
- Save identity link connection before enabling (#1860)
- Require source order keys for webhook automations (#1879)
- Remove identity linking loading spinners (#1880)
- Align snapshot status tile (#1881)
- Rename profile settings label (#1882)
- Run ts integration for app and package changes (#1888)
- Include Slack app id in integration fixtures (#1889)
- Run data-plane workflow migrations with script tsconfig (#1893)
- Use profile sandbox runtime for lifecycle workflows (#1898)
- Enforce managed sandbox provider availability (#1899)
- Update system profile binding requests (#1900)
- Show published sandbox profiles first (#1905)
- Stabilize sandbox profile draft discard transitions (#1908)
- Inspect sandbox instances with persisted provider (#1901)
- Stop requiring data-plane e2b deployment config (#1902)
- Resolve sandbox credentials after lifecycle claims (#1903)
- Derive sandbox credential source from provider (#1904)
- Improve setup script test controls (#1914)
- Avoid persisting sandbox runtime adapters (#1917)
- Resolve sandbox base publish script sources (#1919)
Refactors
- Clarify session terminal cwd wiring (#1862)
- Retire tokenizer proxy (#1863)
- Make webhook source actions provider-neutral (#1906)
- Use workspace source export condition (#1907)
- Neutralize provider app setup dashboard names (#1909)
- Use provider app setup action metadata (#1910)
- Use provider app installed notice metadata (#1912)
- Use generic provider app setup errors (#1913)
Documentation
- Remove PR body file requirement (#1887)
Chores
- Remove compose tokenizer egress config (#1844)
- Update codex cli to 0.129.0 (#1843)
- (deps) Bump @opentelemetry/api-logs from 0.215.0 to 0.216.0 (#1802)
- Remove tokenizer proxy workflow references (#1864)
- (deps) Bump @storybook/addon-a11y from 10.3.5 to 10.3.6 (#1856)
- (deps) Bump @storybook/addon-links from 10.3.5 to 10.3.6 (#1858)
- (deps) Bump zod from 4.3.6 to 4.4.3 (#1854)
- (deps) Bump @storybook/addon-docs from 10.3.5 to 10.3.6 (#1857)
- (deps) Bump undici from 7.24.6 to 8.2.0 (#1853)
- (deps) Remediate dependabot security alerts (#1850)
- (deps) Bump actions/upload-artifact from 4 to 7 (#1868)
- (deps) Bump crate-ci/typos from 1.43.5 to 1.46.1 (#1869)
- (deps) Bump dorny/paths-filter from 3 to 4 (#1870)
- (deps) Bump Infisical/secrets-action from 1.0.11 to 1.0.16 (#1872)
- (deps) Bump rustls-pki-types from 1.14.0 to 1.14.1 in /packages/sandboxd (#1873)
- (deps) Bump actions/download-artifact from 4 to 8 (#1874)
- (deps) Bump hyper-rustls from 0.27.7 to 0.27.9 in /packages/sandboxd (#1876)
- (deps) Bump tokio-tungstenite and tungstenite in /packages/sandboxd (#1877)
- (deps) Bump rcgen to 0.14.7 in /packages/sandboxd (#1875)
- (release) V0.6.0 (#1922)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Mistle
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]