This release adds 5 notable features for engineering teams evaluating rollout.
Published 1mo
Containers & Orchestration
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai
ai-agent
ai-infra
kubernetes
sandbox
Summary
AI summaryAdded resource request customization for Kubernetes sandboxes, enabling line-based file reads, directory listing with depth control, detailed replace‑content feedback, and Credential Vault support in the JavaScript SDK.
Full changelog
What's New
Features
- Added
resourceRequeststo sandbox creation so Kubernetes-backed sandboxes can set resource requests separately from limits. Omitting the field preserves the existing behavior where requests match limits. - Added line-based file reads through
GET /files/downloadwithoffsetandlimitquery parameters. This lets SDK callers read slices of large text files without downloading the full file. - Added directory listing support through the new execd directory API. The SDK now exposes depth-controlled traversal and file entry types, while symlinks are reported as symlinks and are not recursively traversed. https://github.com/opensandbox-group/OpenSandbox/pull/1001
- Added detailed replace-content feedback without breaking existing callers. Existing replace methods keep their original no-return behavior, while new detailed methods opt in to per-file
replacedCountresults so callers can detect no-match and multi-match replacements. https://github.com/opensandbox-group/OpenSandbox/pull/991 - Added Credential Vault support to the JavaScript SDK surface, including SDK model coverage and multi-language E2E coverage for credential injection flows. https://github.com/opensandbox-group/OpenSandbox/pull/1009 https://github.com/opensandbox-group/OpenSandbox/pull/1023
Bug Fixes
- Background log tails with an empty response body are now accepted instead of being treated as malformed output.
- Regenerated JavaScript execd API types from the latest spec updates, including the line-read and replace-content API changes.
Misc
- Bumped the JavaScript Sandbox SDK package version to
0.1.9.
Contributors
- @Pangjiping
- @asiudgufgbukbsa
- @jwx0925
- @ninan-nn
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Earlier breaking changes
- vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
- vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
- vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
- vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
- vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.
Beta — feedback welcome: [email protected]