OpenSandbox

vjava/sandbox/v1.0.14 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Summary

AI summary

Updates 👥 Contributors, ✨ Features, and 🐛 Bug Fixes across a mixed release.

Full changelog

Snapshot readiness polling — New SandboxManager.waitForSnapshotReady(snapshotId, timeout, pollingInterval) method lets callers block until a snapshot reaches Ready state, replacing hand-rolled polling loops. Throws SnapshotFailedException on terminal failure and SandboxReadyTimeoutException on timeout. Java-friendly via @JvmOverloads with sensible defaults (15 min timeout, 2 s interval). Also introduces SnapshotState constants (Creating / Ready / Failed / Deleting / Unknown) so callers can compare states without magic strings. Pure client-side convenience — no server or spec changes required. (#1051)

replaceContents() empty-body crash — Fixed NullPointerException when calling replaceContents() (verbose=false). The execd endpoint returns an empty HTTP 200 body in non-verbose mode, which the generated OpenAPI client failed to deserialize. The SDK adapter layer now catches the null cast so the replacement result is correctly treated as successful. Also refactored replaceContentsDetailed() to use the generated API client instead of hand-rolled HTTP. (#1094)

Added batch multi-file replaceContent e2e test coverage for both verbose and non-verbose paths (Go, Java, C# — matching existing Python/JS coverage). (#1094)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.