OpenSandbox

vjava/code-interpreter/v1.0.16 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 14d Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

deps

Summary

AI summary

Updates 📦 Misc, 👥 Contributors, and What's New across a mixed release.

Type	Severity	Summary	CVE
Dependency	Low	Bumped Kotlin code-interpreter SDK and sandbox dependencies to version 1.0.16. Bumped Kotlin code-interpreter SDK and sandbox dependencies to version 1.0.16. Source: llm_adapter@2026-07-13 Confidence: high	—
Bugfix	Low	Corrected Maven POM repository URL to point at opensandbox-group/OpenSandbox. Corrected Maven POM repository URL to point at opensandbox-group/OpenSandbox. Source: llm_adapter@2026-07-13 Confidence: high	—

Full changelog

Align with sandbox SDK 1.0.16 — Bumped the Kotlin code-interpreter SDK artifact to 1.0.16 and bumped its com.alibaba.opensandbox:sandbox / sandbox-api dependency to 1.0.16. Consumers automatically pick up the new sandbox SDK capabilities (isolation runOnce / withSession, list isolated sessions, bind mounts, sandbox pool destroy, credential vault placeholder substitutions) — see the sandbox v1.0.16 release notes for details.
Fix Maven POM repository URL — SCM / project URL in the published POM now points at opensandbox-group/OpenSandbox instead of the old alibaba/OpenSandbox. (#1139)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.