This release adds 4 notable features for engineering teams evaluating rollout.
Published 1mo
Containers & Orchestration
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
ai
ai-agent
ai-infra
kubernetes
sandbox
Summary
AI summaryAdded resource requests, line‑based file reads, directory listing, detailed replace‑content feedback, and Credential Vault support in the Python SDK.
Full changelog
What's New
Features
- Added
resourceRequeststo sandbox creation so Kubernetes-backed sandboxes can set resource requests separately from limits. Omitting the field preserves the existing behavior where requests match limits. - Added line-based file reads through
GET /files/downloadwithoffsetandlimitquery parameters. The Python sync and async SDK surfaces were regenerated and wired through to support reading large text files by line range. - Added directory listing support through the new execd directory API. The SDK now exposes depth-controlled traversal and file entry types, while symlinks are reported as symlinks and are not recursively traversed. https://github.com/opensandbox-group/OpenSandbox/pull/1001
- Added detailed replace-content feedback without breaking existing callers. Existing replace methods keep their original behavior, while detailed methods opt in to per-file
replacedCountresults so callers can detect no-match and multi-match replacements. https://github.com/opensandbox-group/OpenSandbox/pull/991 - Added Credential Vault support to the Python SDK path and aligned it with the multi-language SDK coverage for credential injection flows. https://github.com/opensandbox-group/OpenSandbox/pull/1009 https://github.com/opensandbox-group/OpenSandbox/pull/1023
Bug Fixes
- Fixed resourceRequests-related Python SDK tests and generated model handling.
- Fixed replace-content detailed response handling by using the generated verbose parameter and preserving the non-verbose compatibility path.
- Synced generated Python SDK code with the latest lifecycle and execd specs.
Misc
- Bumped the Python Sandbox SDK fallback version and default User-Agent to
0.1.11.
Contributors
- @Pangjiping
- @asiudgufgbukbsa
- @jwx0925
- @ninan-nn
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Earlier breaking changes
- vpython/sandbox/v0.1.14 Removes `CredentialMatch.ports`; port now derived from scheme.
- vjava/sandbox/v1.0.16 Removes CredentialMatch.ports; port derived from scheme instead.
- vdocker/egress/v1.1.4 `Match.Ports` field removed from Credential Vault bindings; ports derived from scheme.
- vdocker/egress/v1.1.4 'X-Forwarded-Proto' is trusted only from configured proxy CIDRs.
- vdocker/egress/v1.1.4 Credential Vault requires `dns+nft` enforcement for egress connections.
Beta — feedback welcome: [email protected]