This release includes 2 breaking changes for platform teams planning a safe upgrade.
Published 2h
Virtualization
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agents
ai
container
docker
linux
macos
+12 more
mcp
nodejs
orchestration
rust
sandbox
sandboxing
security
self-hosted
typescript
virtualization
vm
windows
Summary
AI summaryBroad release touches sandbox, ci, metrics, and deps.
Full changelog
What's Changed
- chore: refresh npm lockfile after v0.5.4 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/869
- feat(sandbox): per-sandbox labels and label-based selection by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/864
- feat(runtime): stop attached sandboxes when creator process exits by @cedws in https://github.com/superradcompany/microsandbox/pull/875
- feat(metrics): attach per-sandbox labels to emitted metrics by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/866
- feat(sandbox): import oci image labels as sandbox labels by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/880
- fix(db): read connections must not create the catalog db by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/879
- feat(metrics): add --exclude-label-key to msb-metrics by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/881
- feat(protocol): agent protocol versioning foundation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/874
- ci: pin all actions by @cedws in https://github.com/superradcompany/microsandbox/pull/876
- refactor(deps): inherit internal crates via [workspace.dependencies] by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/877
- ci: group dependabot updates by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/893
- feat(ssh): tcp forwarding through the guest agent by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/878
- refactor(sdk/go)!: remove CreateSandboxDetached by @cedws in https://github.com/superradcompany/microsandbox/pull/907
- ci: fix dependabot multi-ecosystem settings by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/906
- refactor(sdk)!: use builder flag for detached creation by @appcypher in https://github.com/superradcompany/microsandbox/pull/909
- fix(sandbox): reject zero resource limits in builder by @chiehwangs in https://github.com/superradcompany/microsandbox/pull/912
- feat(python): add image management API by @appcypher in https://github.com/superradcompany/microsandbox/pull/916
- docs(sdk/go): improve docstrings for port publish funcs by @cedws in https://github.com/superradcompany/microsandbox/pull/917
- fix(network): wake poll loop after draining inbound relay channel by @wreed4 in https://github.com/superradcompany/microsandbox/pull/915
- feat(cli): group top-level help commands by @appcypher in https://github.com/superradcompany/microsandbox/pull/918
- fix(agentd): restore default guest privileges by @appcypher in https://github.com/superradcompany/microsandbox/pull/911
- fix(network/dns): return NXDOMAIN for policy-denied queries so stub resolvers fail closed by @dijdzv in https://github.com/superradcompany/microsandbox/pull/858
- chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/910
- feat(install): add Homebrew tap support for macOS by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/536
- feat(image): add prune for unused cached images by @appcypher in https://github.com/superradcompany/microsandbox/pull/913
- chore(release): bump microsandbox to 0.5.5 by @appcypher in https://github.com/superradcompany/microsandbox/pull/923
New Contributors
- @chiehwangs made their first contribution in https://github.com/superradcompany/microsandbox/pull/912
- @wreed4 made their first contribution in https://github.com/superradcompany/microsandbox/pull/915
Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.5.4...v0.5.5
Breaking Changes
- refactor(sdk/go)!: remove CreateSandboxDetached
- refactor(sdk)!: use builder flag for detached creation
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About microsandbox
secure, local, cross-platform and programmable sandboxes for AI agents
Related context
Related tools
Beta — feedback welcome: [email protected]