Skip to content

microsandbox

v0.5.0 Breaking

This release includes 3 breaking changes for platform teams planning a safe upgrade.

Published 7d Virtualization
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agents ai container docker linux macos
+12 more
mcp nodejs orchestration rust sandbox sandboxing security self-hosted typescript virtualization vm windows

Affected surfaces

auth rbac crypto_tls

Summary

AI summary

Updated Go and Node SDKs, enhanced network configuration, added SSH support, improved CLI ergonomics, and refined metrics handling across multiple components.

Full changelog

What's Changed

  • feat(sdk/go): Go SDK with full API parity (#568) by @khrees in https://github.com/superradcompany/microsandbox/pull/587
  • fix(release): restore pre-v0.4.4 lockfile-refresh flow by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/717
  • Fix Go SDK build by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/720
  • chore(security): revise security policy and reporting guidelines by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/726
  • fix(sdk-node): accept link-local in plain-object network policies by @jachris in https://github.com/superradcompany/microsandbox/pull/724
  • chore(deps): bump the cargo group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/718
  • drop redundant MSB_PATH reads at python + node sdk layers by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/730
  • feat(sdk/node-ts): add createWithProgress for image pull events by @Eronmmer in https://github.com/superradcompany/microsandbox/pull/589
  • Add Go SDK docs and snapshots by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/719
  • ci(release): warm go module proxy after tagging sdk/go by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/735
  • docs(readme): add go sdk install instruction by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/736
  • feat(net): make ipv4 and ipv6 pool configurable by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/739
  • fix(sdk): fix zero uptime reported by AllSandboxMetrics by @cedws in https://github.com/superradcompany/microsandbox/pull/740
  • docs(sdk): document blocking/nonblocking nature of exec funcs by @cedws in https://github.com/superradcompany/microsandbox/pull/734
  • feat(network): wire ingress policy gate into publisher.rs by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/621
  • feat(net): add configurable port bind addresses by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/747
  • fix(cli logs): emit JSON Lines in follow mode too by @dijdzv in https://github.com/superradcompany/microsandbox/pull/749
  • chore(benchmarks): move suite to superradcompany/sandbox-bench by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/757
  • feat(metrics): live metrics via shared-memory registry by @appcypher in https://github.com/superradcompany/microsandbox/pull/753
  • feat(cli): make --script ergonomic and add --script-raw by @appcypher in https://github.com/superradcompany/microsandbox/pull/750
  • chore(ci): add python sdk integration ci by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/760
  • Treat dot paths as local inputs by @qaijuang in https://github.com/superradcompany/microsandbox/pull/764
  • fix(sandbox): flush root-fs writes on stop by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/746
  • fix(net): install tls ca certs into trust directories by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/767
  • feat(cli): change start cmd to take variadic args by @cedws in https://github.com/superradcompany/microsandbox/pull/733
  • feat(passthroughfs): add per-mount stat-virt and host-perms policies by @appcypher in https://github.com/superradcompany/microsandbox/pull/751
  • feat(sdk): add cross-SDK raw agent client by @appcypher in https://github.com/superradcompany/microsandbox/pull/761
  • Refresh cached TLS intercept certs before expiry by @venbrinoDev in https://github.com/superradcompany/microsandbox/pull/763
  • feat: rotation-aware log streaming engine + sdk bindings by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/755
  • feat(agent-relay): raise max clients to 128 and wire id_range_step by @appcypher in https://github.com/superradcompany/microsandbox/pull/765
  • fix(ci): shorten node sdk msb home paths by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/772
  • Passthrough secret violation type by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/771
  • docs(sdk/go): add cpu/memory defaults to docstrings by @cedws in https://github.com/superradcompany/microsandbox/pull/773
  • refactor(cli)!: consolidate network policy flags around --net-default and *.foo.com suffix by @appcypher in https://github.com/superradcompany/microsandbox/pull/774
  • feat(python-sdk)!: simplify sandbox execution API by @appcypher in https://github.com/superradcompany/microsandbox/pull/776
  • feat(ssh): add sandbox SSH client and server support by @appcypher in https://github.com/superradcompany/microsandbox/pull/779
  • feat(sandbox): add configurable OCI upper size by @appcypher in https://github.com/superradcompany/microsandbox/pull/781
  • Fix published-port stalls by waking smoltcp after host accepts by @billroy in https://github.com/superradcompany/microsandbox/pull/780
  • chore(releases): auto-mark rc tags as prereleases by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/786
  • fix(net): harden SNI deny-domain policy evaluation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/782
  • fix(network): preserve encoded request bodies during secret substitution by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/768
  • fix(python): harden exec options and integration coverage by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/789
  • fix(runtime): re-enable split irqchip on x86 Linux by @appcypher in https://github.com/superradcompany/microsandbox/pull/796
  • docs(contributing): add agent contribution guide by @appcypher in https://github.com/superradcompany/microsandbox/pull/798
  • refactor(image)!: restructure image crate modules by @appcypher in https://github.com/superradcompany/microsandbox/pull/795
  • chore(release): bump microsandbox to 0.5.0 by @appcypher in https://github.com/superradcompany/microsandbox/pull/785

New Contributors

  • @khrees made their first contribution in https://github.com/superradcompany/microsandbox/pull/587
  • @jachris made their first contribution in https://github.com/superradcompany/microsandbox/pull/724
  • @cedws made their first contribution in https://github.com/superradcompany/microsandbox/pull/740
  • @venbrinoDev made their first contribution in https://github.com/superradcompany/microsandbox/pull/763
  • @billroy made their first contribution in https://github.com/superradcompany/microsandbox/pull/780

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.6...v0.5.0

Breaking Changes

  • refactor(cli)!: consolidate network policy flags around --net-default and *.foo.com suffix
  • feat(python-sdk)!: simplify sandbox execution API
  • refactor(image)!: restructure image crate modules

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track microsandbox

Get notified when new releases ship.

Sign up free

About microsandbox

secure, local, cross-platform and programmable sandboxes for AI agents

All releases →

Beta — feedback welcome: [email protected]