OpenSandbox

vpython/sandbox/v0.1.10 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo Containers & Orchestration

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-agent ai-infra kubernetes sandbox

Affected surfaces

auth deps

Summary

AI summary

Updates Behavior Changes, Bug Fixes, and What's New across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Added `skip_accumulation` support for execution handlers to stream output without growing logs. Added `skip_accumulation` support for execution handlers to stream output without growing logs. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Low	Added SDK model support for PVC auto‑provisioning fields. Added SDK model support for PVC auto‑provisioning fields. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Low	Added `secure_access` opt‑in support for sandbox creation and endpoint access headers in Kubernetes ingress gateway mode. Added `secure_access` opt‑in support for sandbox creation and endpoint access headers in Kubernetes ingress gateway mode. Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency	Low	Updated dependency lockfiles, including `idna` and `pytest` updates from Dependabot. Updated dependency lockfiles, including `idna` and `pytest` updates from Dependabot. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix
Bugfix	Medium	Sandbox Pool skips near‑expiry idle sandboxes in acquire to avoid timeout race. Sandbox Pool skips near‑expiry idle sandboxes in acquire to avoid timeout race. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Pool warmup renews sandboxes before idling, aligning store and server‑side TTLs. Pool warmup renews sandboxes before idling, aligning store and server‑side TTLs. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Python SSE parser tolerates `traceback: null` for compatibility with older execd deployments. Python SSE parser tolerates `traceback: null` for compatibility with older execd deployments. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

What's New

Behavior Changes

Sandbox Pool now skips idle sandboxes that are too close to expiry before returning them from pool.acquire(). This avoids a race where checkReady can time out because the selected sandbox expires server-side before it can be renewed. The default threshold is min(60s, idle_timeout / 2) and can be disabled with acquire_min_remaining_ttl=timedelta(0). https://github.com/opensandbox-group/OpenSandbox/pull/986

Features

Added skip_accumulation support for execution handlers. When enabled, stdout/stderr events are still delivered to callbacks but are not appended to ExecutionLogs, allowing long-running or high-output executions to stream with constant memory. https://github.com/opensandbox-group/OpenSandbox/pull/990
Added SDK model support for PVC auto-provisioning fields. https://github.com/opensandbox-group/OpenSandbox/pull/749
Added secure_access support for sandbox creation and endpoint access headers. This is opt-in and currently supported by Kubernetes ingress gateway mode. https://github.com/opensandbox-group/OpenSandbox/pull/745

Bug Fixes

The Python SSE parser now tolerates traceback: null from older or mixed execd deployments, keeping command-start error handling compatible across versions. https://github.com/opensandbox-group/OpenSandbox/pull/701
Pool warmup now renews sandboxes before returning them to idle state, keeping store TTL and server-side TTL aligned. https://github.com/opensandbox-group/OpenSandbox/pull/986

Misc

Updated dependency lockfiles, including idna and pytest updates from Dependabot.

Contributors

@Aboysky
@Pangjiping
@asiudgufgbukbsa
@ninan-nn

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track OpenSandbox

Get notified when new releases ship.

About OpenSandbox

Secure, Fast, and Extensible Sandbox runtime for AI agents.

All releases →

Related context

Related tools

Earlier breaking changes

vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.