This release adds 5 notable features for engineering teams evaluating rollout.
Published 1mo
Containers & Orchestration
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai
ai-agent
ai-infra
kubernetes
sandbox
Summary
AI summaryAdded resource requests, line‑based file reads, directory listing with depth control, detailed replace‑content feedback, and Credential Vault support to the OpenSandbox Java/Kotlin SDK.
Full changelog
What's New
Features
- Added
resourceRequeststo sandbox creation so Kubernetes-backed sandboxes can set resource requests separately from limits. Omitting the field preserves the existing behavior where requests match limits. - Added line-based file reads through
GET /files/downloadwithoffsetandlimitquery parameters. Kotlin/JVM SDK callers can now read large text files by line range without downloading the entire file. - Added directory listing support through the new execd directory API. The SDK now exposes depth-controlled traversal and file entry types, while symlinks are reported as symlinks and are not recursively traversed. https://github.com/opensandbox-group/OpenSandbox/pull/1001
- Added detailed replace-content feedback without breaking existing callers. Existing replace methods keep their original behavior, while detailed methods opt in to per-file
replacedCountresults so callers can detect no-match and multi-match replacements. https://github.com/opensandbox-group/OpenSandbox/pull/991 - Added Credential Vault support to the Kotlin/JVM SDK surface, including model, adapter, sandbox creation, and E2E coverage. https://github.com/opensandbox-group/OpenSandbox/pull/1009 https://github.com/opensandbox-group/OpenSandbox/pull/1023
Bug Fixes
- Fixed resourceRequests-related Kotlin SDK test and model coverage.
- Added a Java-friendly directory-listing overload so Java callers do not need to pass an explicit
nulldepth. Directory entries are documented as lexically ordered within each directory. https://github.com/opensandbox-group/OpenSandbox/pull/1001 - Fixed replace-content detailed response handling while keeping the original replace API backward-compatible. https://github.com/opensandbox-group/OpenSandbox/pull/991
Misc
- Bumped the Kotlin/JVM Sandbox SDK package version and default User-Agent to
1.0.13.
Contributors
- @Pangjiping
- @asiudgufgbukbsa
- @jwx0925
- @ninan-nn
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Earlier breaking changes
- vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
- vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
- vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
- vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
- vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.
Beta — feedback welcome: [email protected]