OpenSandbox

vcsharp/sandbox/v0.1.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Added skipAccumulation, PVC auto‑provisioning fields, and SecureAccess support for sandbox execution and access control.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds skipAccumulation support for execution handlers. Adds skipAccumulation support for execution handlers. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds SDK model support for PVC auto-provisioning fields. Adds SDK model support for PVC auto-provisioning fields. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds SecureAccess support for sandbox creation and endpoint access headers (opt‑in, Kubernetes ingress gateway mode). Adds SecureAccess support for sandbox creation and endpoint access headers (opt‑in, Kubernetes ingress gateway mode). Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

Added skipAccumulation support for execution handlers. When enabled, stdout/stderr events are still delivered to callbacks but are not appended to accumulated execution logs, preventing unbounded memory growth for long-running streamed commands. https://github.com/opensandbox-group/OpenSandbox/pull/990
Added SDK model support for PVC auto-provisioning fields. https://github.com/opensandbox-group/OpenSandbox/pull/749
Added SecureAccess support for sandbox creation and endpoint access headers. This is opt-in and currently supported by Kubernetes ingress gateway mode. https://github.com/opensandbox-group/OpenSandbox/pull/745

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.