This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
ReleasePort's take
Moderate signalThe Kotlin SDK release v1.0.11 adds sandbox metadata patch support and a stable Diagnostics API.
Why it matters: Update the Kotlin SDK to version 1.0.11 to enable new sandbox metadata patching and reliable diagnostics monitoring.
Summary
AI summaryAdded sandbox metadata patch and stable diagnostics APIs in the Kotlin SDK.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Add sandbox metadata patch support to the Kotlin SDK. Add sandbox metadata patch support to the Kotlin SDK. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add stable Diagnostics API support to the Kotlin SDK. Add stable Diagnostics API support to the Kotlin SDK. Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Tune Kotlin sandbox pool degraded warmup backoff to reduce pressure during prolonged create failures. Tune Kotlin sandbox pool degraded warmup backoff to reduce pressure during prolonged create failures. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
What's Changed
✨ Features
-
Add sandbox metadata patch support to the Kotlin SDK.
SandboxandSandboxManagercan now apply JSON merge-patch updates through the new metadata patch API, including delete semantics fornullvalues; the Kotlin SDK uses a handwritten adapter path so those deletes are preserved correctly and returns parsedSandboxApiExceptiondetails with the request ID when the server rejects the request. Server and lifecycle spec support landed alongside the SDK surface. https://github.com/alibaba/OpenSandbox/pull/857 https://github.com/alibaba/OpenSandbox/pull/861 https://github.com/alibaba/OpenSandbox/pull/863 -
Add stable Diagnostics API support to the Kotlin SDK.
SandboxandSandboxManagernow exposegetDiagnosticLogsandgetDiagnosticEventswith required diagnosticscope, plus domain models, converters, adapter wiring, and tests. Existing legacy DevOps clients are not broken, but the stable Diagnostics API currently returnsDIAGNOSTICS_NOT_IMPLEMENTEDfrom the open-source server until a stable backend implementation is added. https://github.com/alibaba/OpenSandbox/pull/869
🐛 Bug Fixes
- Tune Kotlin sandbox pool degraded warmup backoff to reduce pressure during prolonged create failures. The degraded retry window now starts at an effective 30 seconds, grows up to a 1-day cap, and avoids advancing exponential attempts more than once for multiple concurrent warmup failures in the same reconcile batch. https://github.com/alibaba/OpenSandbox/pull/865 https://github.com/alibaba/OpenSandbox/pull/873
👥 Contributors
Thanks to these contributors ❤️
@ninan-nn
@Pangjiping
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]