Skip to content

Release history

microsandbox releases

secure, local, cross-platform and programmable sandboxes for AI agents

All releases

41 shown

No immediate action
v0.6.7 Breaking risk

mintlify, SDK, network, filesystem, snapshot

No immediate action
v0.6.6 Mixed

yank workflow + filesystem fix + lockfile refresh

Review required
v0.6.4 Mixed
RCE / SSRF

Live resize + CLI metrics + UDP fixes

No immediate action
v0.6.3 Mixed

TLS scoping + IPv6 fix + SDK parity

No immediate action
v0.6.2 Mixed

SDK rename + CLI progress + perf boost

No immediate action
v0.6.1 Mixed

CLI features + fixes

No immediate action
v0.6.0 Mixed

Windows support + SDK fixes + Network fix

Review required
v0.5.10 Mixed
Dependencies Auth

CLI streaming + quota + lifecycle API

No immediate action
v0.5.9 Mixed

SDK docs + sandbox config + heartbeat removal

Review required
v0.5.8 New feature
Auth RBAC RCE / SSRF

deps refresh + new features

Review required
v0.5.7 Mixed
Auth

Secret logging + substitution + AgentSocketPath

No immediate action
v0.5.6 Mixed

CLI mounts, runtime reclamation, SDK unification

No immediate action
v0.5.5 Breaking risk

Sandbox, metrics, SSH, Go SDK, install

No immediate action
v0.5.4 Mixed

metrics sidecar + runtime fixes

No immediate action
v0.5.3 Mixed

Sandbox limit + CLI commands + Network flush

No immediate action
v0.5.2 Mixed

Runtime + SDK fixes + lockfile

No immediate action
v0.5.1 Mixed

SSH feature + docs + agentd

Review required
v0.5.0 Breaking risk
Auth RBAC Crypto / TLS

SDK updates, networking, SSH, CLI, metrics

Review required
v0.4.6 Bug fix
Auth

SIGKILL + stdin fixes

v0.4.5 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • fix(release): add version to microsandbox-utils build-dep by @appcypher in https://github.com/superradcompany/microsandbox/pull/662
  • Optimize Image persistance queries by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/665
  • Metrics Sampling Interval by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/654
  • feat(utils): MSB_HOME env override for isolated state by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/669
  • refactor(db): typed read/write pools with retry-on-busy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/666
  • fix(network): gate address families on host route availability by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/671
  • docs(sdk): align rust and typescript networking references by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/670
  • fix(agent): bound relay handshake reads and prefer boot-error.json on timeout by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/673
  • chore(release): bump version to 0.4.5 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/672
  • chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/677
  • docs(recipes): add systemd services recipe by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/674
  • ci: add Check/Test Summary aggregator jobs for required-checks gating by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/679
  • docs(sdk): document PatchBuilder / Patch in each sdk reference by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/678

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.4...v0.4.5

v0.4.4 Bug fix
Notable features
  • exec.log capture, boot-error.json, typed ExecFailed for logs
  • file‑first disk snapshots across CLI, Rust, TS, Python
  • agentd hands off PID 1 to a guest init binary
Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.3 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/649
  • fix(net): --no-net actually air-gaps the guest by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/647
  • feat(logs): exec.log capture, boot-error.json, typed ExecFailed by @appcypher in https://github.com/superradcompany/microsandbox/pull/650
  • feat(snapshot): file-first disk snapshots across cli, rust, ts, python by @appcypher in https://github.com/superradcompany/microsandbox/pull/652
  • feat(agentd): hand off PID 1 to a guest init binary by @appcypher in https://github.com/superradcompany/microsandbox/pull/653
  • chore(release): bump version to 0.4.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/655

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.3...v0.4.4

v0.4.3 New feature
Notable features
  • Install `msb` alias alongside `microsandbox` CLI
  • Add inline `--script` flag and rename file form to `--script-path`
Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/641
  • domain-rule enforcement at DNS, SNI, and policy layers by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/633
  • feat(packaging): install msb alias alongside microsandbox CLI by @appcypher in https://github.com/superradcompany/microsandbox/pull/642
  • feat(cli): add inline --script and rename file form to --script-path by @appcypher in https://github.com/superradcompany/microsandbox/pull/643
  • fix(node-sdk): ship libkrunfw under canonical name in npm platform package by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/648

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.2...v0.4.3

v0.4.2 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • chore: refresh npm lockfile after v0.4.1 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/639
  • chore(release): fix npm exec bit and bump to 0.4.2 by @appcypher in https://github.com/superradcompany/microsandbox/pull/640

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.1...v0.4.2

v0.4.1 Breaking risk
Breaking changes
  • Node SDK builders redesigned as native napi classes
Full changelog

What's Changed

  • fix(ci): repair node sdk release step by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/630
  • fix(cli): correct dns_block_domain help text (REFUSED, not NXDOMAIN) by @voidborne-d in https://github.com/superradcompany/microsandbox/pull/631
  • refactor(sdk-node)!: redesign builders as native napi classes by @appcypher in https://github.com/superradcompany/microsandbox/pull/634
  • Reject unsupported glibc in installer by @qaijuang in https://github.com/superradcompany/microsandbox/pull/635
  • chore: bump version to 0.4.1 by @appcypher in https://github.com/superradcompany/microsandbox/pull/638

New Contributors

  • @voidborne-d made their first contribution in https://github.com/superradcompany/microsandbox/pull/631
  • @qaijuang made their first contribution in https://github.com/superradcompany/microsandbox/pull/635

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.4.0...v0.4.1

v0.4.0 Breaking risk
Breaking changes
  • TypeScript SDK redesigned with builder API and bundled binaries
  • OCI rootfs storage switched to block-backed implementation via VMDK + EROFS
Notable features
  • DNS interception for tcp/53 and DoT/853 queries
  • Disk-image volume mounts
  • Network policy redesign with per-rule direction
Full changelog

What's Changed

  • fix(sdk): self-heal shims when msb binary is missing by @appcypher in https://github.com/superradcompany/microsandbox/pull/575
  • execStreamWithConfig for TS SDK by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/569
  • feat(image)!: block-backed OCI rootfs via VMDK + EROFS fsmeta by @appcypher in https://github.com/superradcompany/microsandbox/pull/548
  • fix(runtime): restore VM boot and agentd docker build by @appcypher in https://github.com/superradcompany/microsandbox/pull/579
  • feat(agentd): introduce AgentdConfig to read env vars once at startup by @dijdzv in https://github.com/superradcompany/microsandbox/pull/507
  • build: use vendored dbus by @Glatzel in https://github.com/superradcompany/microsandbox/pull/562
  • Add sandbox-wide guest rlimits by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/549
  • Add keyring feature flag by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/563
  • refactor(agentd): split BootParams out of AgentdConfig by @appcypher in https://github.com/superradcompany/microsandbox/pull/580
  • refactor(dns): forward via hickory-client instead of hickory-resolver by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/578
  • docs: refresh banner palette and clean up duplicate assets by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/581
  • feat(image): support custom TLS certs and insecure registries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/496
  • docs: add recipe for pulling images from local docker registry by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/474
  • ci: sync mintlify branch to release commit by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/588
  • Adding Secret Injection options similar to the Rust SDK for node-ts sdk. by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/586
  • feat(network): trust host CAs inside sandbox guests (opt-in) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/583
  • fix(dns): fetch nameservers via scdynamicstore on macos by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/582
  • test: add integration test infrastructure by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/547
  • feat(dns): intercept tcp/53 and dot/853 queries by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/585
  • docs(networking): split into overview, dns, tls, security-model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/584
  • chore(deps): bump rustls-webpki from 0.103.11 to 0.103.13 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/596
  • fix(network): improve domain & domain suffix rules enforcement by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/605
  • feat(sdk): expose per-sandbox libkrunfw_path override by @appcypher in https://github.com/superradcompany/microsandbox/pull/599
  • feat(network): add host.microsandbox.internal alias by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/602
  • chore(deps-dev): bump postcss from 8.5.9 to 8.5.10 in /sdk/node-ts in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/614
  • feat(volumes): add disk-image volume mounts and unified readonly by @appcypher in https://github.com/superradcompany/microsandbox/pull/609
  • feat(network): redesign policy schema with per-rule direction (1/4) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/618
  • feat(network): policy + dns builders with lazy-parse error model by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/619
  • Fix command syntax in README examples by @mahmudsudo in https://github.com/superradcompany/microsandbox/pull/622
  • feat(cli): --net-rule grammar and flag set rewrite by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/620
  • docs(networking): align with new policy, add ts builder by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/616
  • feat(sdk-node)!: redesign TypeScript SDK with builder API and bundled binaries by @appcypher in https://github.com/superradcompany/microsandbox/pull/623
  • chore: bump version to 0.4.0 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/627
  • fix(ci): pass napi target only to build:native in release by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/629

New Contributors

  • @wellsbunk5 made their first contribution in https://github.com/superradcompany/microsandbox/pull/569
  • @Glatzel made their first contribution in https://github.com/superradcompany/microsandbox/pull/562
  • @mahmudsudo made their first contribution in https://github.com/superradcompany/microsandbox/pull/622

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.14...v0.4.0

v0.3.14 New feature
Notable features
  • Docker image publishing to release pipeline
  • CLI entry points for cargo, npm, and pip
Full changelog

What's Changed

  • feat(docker): add Docker image publishing to release pipeline by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/560
  • feat(sdk): add microsandbox CLI entry points for cargo/npx/pipx by @appcypher in https://github.com/superradcompany/microsandbox/pull/570
  • chore: bump version to 0.3.14 by @appcypher in https://github.com/superradcompany/microsandbox/pull/573

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.13...v0.3.14

v0.3.13 Breaking risk
Breaking changes
  • Removed msb shell command
Notable features
  • Python SDK with pyo3 bindings
  • File-level volume mount support
  • TypeScript SDK: filesystem readStream and metricsStream
Full changelog

What's Changed

  • refactor(cli): remove msb shell command by @appcypher in https://github.com/superradcompany/microsandbox/pull/509
  • docs: add global config.json reference page by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/511
  • feat(sandbox): support file-level volume mounts by @dijdzv in https://github.com/superradcompany/microsandbox/pull/504
  • docs(readme): simplify README by removing detailed feature sections by @appcypher in https://github.com/superradcompany/microsandbox/pull/516
  • docs: fix incorrect code examples across SDK documentation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/522
  • feat(sdk): add filesystem readStream to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/521
  • fix(agentd): fix flaky PTY drain test by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/524
  • feat(benchmarks): add Docker vs Microsandbox filesystem benchmark harness by @appcypher in https://github.com/superradcompany/microsandbox/pull/525
  • feat(sdk): add metricsStream and attach to TypeScript SDK by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/523
  • fix(network): update Content-Length after body secret substitution by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/530
  • test(sdk): add Node.js SDK smoke tests and CI workflow by @Eronmmer in https://github.com/superradcompany/microsandbox/pull/517
  • Add --allow-private-ips CLI flag for NetworkPolicy::allow_all by @Bahtya in https://github.com/superradcompany/microsandbox/pull/520
  • docs: restructure navigation and split SDK reference by language by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/535
  • fix(tls): prevent data loss in TLS MITM proxy under parallel connections by @dijdzv in https://github.com/superradcompany/microsandbox/pull/534
  • feat(network): add upstream CA trust and rename TLS CA config by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/533
  • docs: add AI Agents page and reorganize Getting Started by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/541
  • fix(tls): Node.js TLS 1.3 connections hang through MITM proxy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/542
  • fix(tls): intermittent CERT_NOT_YET_VALID on fast-booting sandboxes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/543
  • feat(sdk): add Python SDK with pyo3 bindings by @appcypher in https://github.com/superradcompany/microsandbox/pull/539
  • fix(cli): make command optional for msb exec in interactive mode by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/540
  • chore(deps): bump rand from 0.10.0 to 0.10.1 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/550
  • feat(cli): add interactive multi-select to msb self uninstall by @appcypher in https://github.com/superradcompany/microsandbox/pull/551
  • docs: add Python SDK snippets and reference pages by @appcypher in https://github.com/superradcompany/microsandbox/pull/553
  • chore: bump version to 0.3.13 by @appcypher in https://github.com/superradcompany/microsandbox/pull/554
  • fix(ci): install dbus-devel in manylinux container for Python wheel builds by @appcypher in https://github.com/superradcompany/microsandbox/pull/555
  • fix(ci): detect CI env inside maturin Docker containers by @appcypher in https://github.com/superradcompany/microsandbox/pull/556
  • fix(ci): add GITHUB_ACTIONS fallback for remaining CI env checks by @appcypher in https://github.com/superradcompany/microsandbox/pull/557
  • fix(ci): install libcap-ng-devel in maturin container by @appcypher in https://github.com/superradcompany/microsandbox/pull/558

New Contributors

  • @Bahtya made their first contribution in https://github.com/superradcompany/microsandbox/pull/520

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.12...v0.3.13

v0.3.11 Bug fix

Fixes symlink extended attribute operations and initializes listxattr support.

v0.3.9 Mixed
Notable features
  • Per-command exec flags for msb run
  • Simplified exec/attach/image sandbox APIs with _with variants
Full changelog

What's Changed

  • docs: make Rust the primary SDK in README examples by @appcypher in https://github.com/superradcompany/microsandbox/pull/481
  • refactor(sandbox): simplify exec/attach/image APIs with _with variants by @appcypher in https://github.com/superradcompany/microsandbox/pull/484
  • feat(cli): add per-command exec flags to msb run and AI Agents README section by @appcypher in https://github.com/superradcompany/microsandbox/pull/485
  • fix(filesystem): remove O_RESOLVE_BENEATH from macOS /.vol inode reopen by @appcypher in https://github.com/superradcompany/microsandbox/pull/487
  • fix(runtime): route VM logs to guest.log and runtime.log by @appcypher in https://github.com/superradcompany/microsandbox/pull/488
  • chore: bump version to 0.3.9 by @appcypher in https://github.com/superradcompany/microsandbox/pull/489

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.8...v0.3.9

v0.3.8 Breaking risk
Breaking changes
  • Complete rewrite with new embeddable SDK, smoltcp networking, and composable filesystem architectures
Notable features
  • Embeddable SDK for programmatic sandbox integration
  • Smoltcp networking stack
  • Composable filesystem architecture
Full changelog

What's Changed

  • feat!: rewrite microsandbox with embeddable SDK, smoltcp networking, and composable filesystem by @appcypher in https://github.com/superradcompany/microsandbox/pull/455
  • chore(install): update install script url by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/467
  • chore(deps): update crate deps + reduce oci client verbosity by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/469
  • chore: remove image tags from examples, docs, and CLI help by @appcypher in https://github.com/superradcompany/microsandbox/pull/471
  • fix: validate workdir exists at sandbox creation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/475
  • fix: ensure return ExecTimeout when exec timed-out by @Byunk in https://github.com/superradcompany/microsandbox/pull/470
  • fix(filesystem): resolve zero inode numbers in overlay readdir by @appcypher in https://github.com/superradcompany/microsandbox/pull/478
  • chore: bump microsandbox version to 0.3.8 by @appcypher in https://github.com/superradcompany/microsandbox/pull/479

New Contributors

  • @Byunk made their first contribution in https://github.com/superradcompany/microsandbox/pull/470

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.7...v0.3.8

v0.3.6 Maintenance

## What's Changed * chore: bump workspace version to 0.3.6 and update README

v0.3.5 New feature
Notable features
  • Node.js and TypeScript SDK with synchronized documentation
Full changelog

What's Changed

  • feat(sdk): add Node.js/TypeScript SDK and sync docs with implementation by @appcypher in https://github.com/superradcompany/microsandbox/pull/463
  • chore: bump workspace version to 0.3.5 by @appcypher in https://github.com/superradcompany/microsandbox/pull/464

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.4...v0.3.5

v0.3.4 New feature
Notable features
  • ICMP echo relay and gateway ping support
Full changelog

What's Changed

  • docs: add README for microsandbox branch by @appcypher in https://github.com/superradcompany/microsandbox/pull/460
  • feat(network): add ICMP echo relay and gateway ping support by @appcypher in https://github.com/superradcompany/microsandbox/pull/461
  • chore: bump workspace version to 0.3.4 by @appcypher in https://github.com/superradcompany/microsandbox/pull/462

Full Changelog: https://github.com/superradcompany/microsandbox/compare/v0.3.3...v0.3.4

v0.3.3 New feature
Notable features
  • Volume management and guest mounts
  • User-space networking stack (smoltcp)
  • Live metrics sampling
v0.3.2 Breaking risk
Breaking changes
  • SandboxInfo replaced with SandboxHandle in SDK
  • ExecOutput encapsulated in SDK
Notable features
  • Detached sandbox mode
  • State reconciliation
  • Per-layer pull progress bars
Full changelog

What's Changed

  • feat: add detached sandbox mode, block-root example, and state reconciliation by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/431
  • refactor(sdk): replace SandboxInfo with SandboxHandle and encapsulate ExecOutput by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/432
  • feat: add per-layer pull progress bars, CLI quiet mode, and UX improvements by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/433
  • chore: bump crates to v0.3.2 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/434

Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.1...v0.3.2

v0.3.1 New feature
Notable features
  • Prebuilt binaries are now the default
  • Runtime dependencies automatically install
Full changelog

What's Changed

  • feat: make prebuilt default and auto-install runtime deps by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/427
  • chore: bump crates to v0.3.1 and pin prebuilt download version by @appcypher in https://github.com/zerocore-ai/microsandbox/pull/428

Full Changelog: https://github.com/zerocore-ai/microsandbox/compare/v0.3.0...v0.3.1

v0.3.0 Breaking risk
Breaking changes
  • Consolidated workspace into single microsandbox crate
  • Moved workspace crates under crates/ directory
Security fixes
  • RUSTSEC-2026-0007
  • RUSTSEC-2026-0009
Notable features
  • Go SDK initial implementation
  • Filesystem backends (memfs, proxyfs, overlayfs)
  • msbnet networking stack with TLS interception
microsandbox-v0.2.6 New feature

Added host argument to server start command and msbserver binary.

Beta — feedback welcome: [email protected]