What opensandbox-group/OpenSandbox shipped
Written by FoxPlug from the repository's own releases; not affiliated with Open-sandbox. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/opensandbox-group/OpenSandbox; Open-sandbox did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- OpenSandbox 1.1.0 shipped as the first stable release of one umbrella version line covering server, component images, charts, CLI and every published SDK. Release
- OpenSandbox 1.1.1 shipped as the stable patch cut that fixes the broken 1.1.0 server wheel, whose committed FastPath gRPC stubs were dropped from the package. Release
- OpenSandbox 1.1.1-rc.1 shipped as the first release candidate on the 1.1.1 patch line, cut to repair the 1.1.0 server wheel. Release
- The Go SDK 1.1.1 tag shipped on the same commit as the umbrella 1.1.1 release. Release
- OSEP-0024 landed, adding an ingress-driven lifecycle loop that pauses opted-in fast sandboxes after idle time and wakes them on access. Pull request #2152
- The ingress half of OSEP-0024 shipped with activity tracking and wake-on-access, off by default so unset flags keep behavior unchanged. Pull request #2156
- Ingress wake-on-access hardening completed, closing four gaps between the OSEP-0024 design and the shipped ingress code. Pull request #2180
- The Go SDK no longer fails file uploads and downloads that run longer than the 30 second request timeout. Pull request #2165
- Foreground command output now preserves line endings, so concatenated stdout and stderr events reconstruct blank lines and unterminated final fragments. Pull request #2033
- The JavaScript SDK added sandbox.filesWithIdentity so file operations can be bound to an explicit Linux UID and GID. Pull request #2094
Why it matters
This week the project cut its first stable umbrella release and the patch release that fixes the broken server wheel from the previous cut, so installs from the package index work again. It also landed the default-off fast sandbox lifecycle work, where idle sandboxes pause and wake on first access, and a set of fixes for the Go SDK, command output line endings, and the JavaScript filesystem API.
Changelog entry
- Shipped OpenSandbox 1.1.0 as the first stable unified umbrella release. Release
- Shipped OpenSandbox 1.1.1, fixing the broken 1.1.0 server wheel. Release
- Shipped OpenSandbox 1.1.1-rc.1 as the first candidate on the patch line. Release
- Tagged the Go SDK at 1.1.1 on the same commit as the umbrella release. Release
- Added OSEP-0024 auto-pause and wake-on-access for fast sandboxes. Pull request #2152
- Added ingress activity tracking and wake-on-access for fast sandboxes, disabled by default. Pull request #2156
- Completed ingress wake-on-access hardening for OSEP-0024. Pull request #2180
- Stopped capping Go SDK file uploads and downloads at the request timeout. Pull request #2165
- Preserved line endings in foreground command stdout and stderr events. Pull request #2033
- Added identity-bound filesystem operations to the JavaScript SDK. Pull request #2094
- Percent-encoded quoted filenames in the download Content-Disposition header. Pull request #2161
- Stopped assigning tasks to Pods Kubernetes declared NotReady. Pull request #2138
OpenSandbox 1.1.0 is out as the first stable umbrella release, and 1.1.1 fixes the 1.1.0 server wheel that dropped committed FastPath gRPC stubs. Also in: fast sandbox auto-pause and wake-on-access, Go SDK file transfers past the request timeout, and preserved command output line
This week OpenSandbox published 1.1.0, the first stable release of the unified version line covering server, component images, charts, CLI and every published SDK, plus 1.1.1 on the patch line to fix the 1.1.0 server wheel whose committed FastPath gRPC stubs were missing from the package. The fast sandbox lifecycle work landed too: ingress activity tracking and wake-on-access, both off by default, alongside OSEP-0024. Other fixes include Go SDK file uploads and downloads no longer capped by the request timeout, command output line endings preserved in stdout and stderr events, and an identity-bound filesystem API in the JavaScript SDK.
Week of September 28, 2026
What shipped
- Fixed overflow in Range parsing when clients send very large byte offsets. Pull request #2089
- Fixed command exit codes to report failures when the execution stream ends prematurely. Pull request #2099
- Added tracking for bounded TLS retirement deadlines during credential rotation. Pull request #2100
- Introduced filesystem execution identity core for explicit owner/group metadata handling. Pull request #2070
- Fixed session run timeouts to kill entire process groups, not just the bash shell. Pull request #2079
- Added support for custom snapshot image URI templates on Kubernetes. Pull request #2004
- Enabled chained upstream CONNECT proxy support under fast-sandbox profile. Pull request #2003
- Added automatic pod replacement for BatchSandbox pods stuck in provisioning failures. Pull request #1961
- Reorganized README with clearer feature tables and improved onboarding navigation. Pull request #2086
- Added ACK deployment guide for Alibaba Cloud Container Service for Kubernetes. Pull request #2048
Why it matters
This week addresses critical runtime issues in command execution, TLS credential handling, and process lifecycle management. Several fixes resolve edge cases where cleanup and timeout enforcement were incomplete or missing. Documentation improvements and new deployment guides expand platform support.
Changelog entry
- Execd: clamp Range end before computing length to prevent overflow Pull request #2089
- Cli: exit non-zero when command stream ends before execution completes Pull request #2099
- Execd: kill entire process group on session run timeout Pull request #2079
- Execd: remove bash session script files after each run Pull request #2076
- Kubernetes: support custom snapshot image URI templates Pull request #2004
- Egress: support chained upstream CONNECT proxy in fast-sandbox profile Pull request #2003
- Kubernetes: auto-replace pods stuck in provisioning failures during startup Pull request #1961
- Ingress-gateway: require secure-access keys for fast-sandbox provider Pull request #2047
- Egress: track bounded TLS retirement deadlines Pull request #2100
- Execd: add filesystem execution identity core Pull request #2070
- Server: don't fail snapshot read before worker runs Pull request #2077
- Kubernetes: skip pause dispatch for already Paused BatchSandbox Pull request #2082
This week: fixed command exit codes, process group timeouts, Range parsing overflows, and added custom snapshot image templates. Plus new ACK deployment guide and upstream proxy support.
Weekly digest: Range parsing overflow fix for large byte offsets, command exit code reporting for stream failures, process group timeout enforcement, custom Kubernetes snapshot image templates, upstream CONNECT proxy for fast-sandbox, automatic pod replacement for stuck BatchSandbox, and new Alibaba Cloud ACK deployment guide.
Week of September 21, 2026
What shipped
- All five sandbox SDKs now support setEnv for runtime environment injection across JavaScript, Python, Kotlin, Go, and C#. Pull request #2013
- CLI gained -f/--file option to osb sandbox create and osb template create for reading requests from JSON files in the public wire format. Pull request #2019
- CLI now exposes full template and snapshot management commands, matching Python SDK capabilities. Pull request #2002
- Kubernetes tenant isolation now stamps workloads with tenant labels so create/list/delete/pause/resume/proxy hide other tenants' sandboxes as 404. Pull request #1973
- Pause and resume endpoints now work with the agent-sandbox workload provider by bridging to spec.operatingMode. Pull request #1975
- Docker sandbox pause now rejects repeated pause attempts with 409 Conflict instead of incorrectly reporting 500. Pull request #2023
- Fast-sandbox integration test workflow added to run on self-hosted KVM runners via workflow dispatch and scheduled triggers. Pull request #1978
- Fast-sandbox integration environment replaced MinIO with RustFS as the S3 artifact store. Pull request #2009
- Kubernetes sandbox creation now wakes from its polling loop on watch events instead of using a fixed interval. Pull request #1996
- Helm deployment guide rewritten and manifests reviewed for 7 charts with corrected metadata and image tag defaults. Pull request #2006
Why it matters
Runtime environment injection unifies a key feature across all SDKs, CLI gains file-based request input and template management to match SDK capabilities, and multi-tenant isolation with improved pause/resume support strengthens production deployments. Fast-sandbox integration testing infrastructure now runs on dedicated hardware.
Changelog entry
- Feat(sdks): add commands.setEnv for runtime env injection across all five SDKs Pull request #2013
- Feat(cli): add -f/--file request file support to sandbox/template create Pull request #2019
- Feat(cli): add template and snapshot management commands Pull request #2002
- Feat(server): isolate tenants that share a Kubernetes namespace with opensandbox.io/tenant labels Pull request #1973
- Feat(server): bridge pause/resume to agent-sandbox spec.operatingMode Pull request #1975
- Fix(server): reject repeated pause for Docker sandboxes with 409 Conflict Pull request #2023
- Feat(templates): accept env on template create and bake into golden image Pull request #1984
- Ci: add fast-sandbox integration test workflow on self-hosted kvm runners Pull request #1978
- Feat(fast-sandbox): replace MinIO with RustFS in integration environment Pull request #2009
- Perf(server): wake creation waits on watch events instead of polling interval Pull request #1996
- Fix(manifests): correct chart metadata and image tag defaults; rewrite deployment guide Pull request #2006
- Refactor(cli): remove dead code and prune noisy comments, net -560 lines Pull request #2018
- Fix(execd): remove command completion delay while retaining output flushing Pull request #1825
- Fix(server): propagate FastPath error message through 429 capacity mapping Pull request #2001
- Feat(ingress): per-request opt-out for access renew intents with OpenSandbox-Access-Renew: skip header Pull request #1966
This week: setEnv across all five SDKs, CLI file input for sandbox/template create, tenant isolation on Kubernetes, pause/resume for agent-sandbox, and fast-sandbox integration tests on KVM runners.
This week shipped: setEnv support across all five SDKs (JavaScript, Python, Kotlin, Go, C#) for runtime environment injection. CLI gained -f/--file option for JSON request input and full template/snapshot management. Kubernetes tenants sharing a namespace now isolate sandboxes with labels. Pause/resume works with agent-sandbox. Fast-sandbox integration tests run on self-hosted KVM runners. Helm charts reviewed and deployment guide rewritten.
Week of September 14, 2026
What shipped
- OpenSandbox 1.1.0-rc.1 released, establishing unified versioning across all images, charts, CLI, and SDKs. Release
- Egress revision bootstrap reconciliation now exposes metadata-only readback and coordinator retry semantics for OSEP-0023. Pull request #1915
- Python SDK adds fsb template CRUD, template-based sandbox creation, and origin-based egress routing. Pull request #1877
- JavaScript SDK pool now aligns with Kotlin behavior, adds staged warmup, and supports Redis-backed distributed state. Pull request #1875
- Python pool reconciliation simplified to fixed 1-second cadence with staged readiness and
warmup_create_qps. Pull request #1889 - Kotlin SDK ports fsb template CRUD and origin-based routing from Python SDK. Pull request #1894
- JavaScript SDK gains fsb template management support. Pull request #1895
- C# SDK ports fsb template CRUD, template-based creation, and origin-based routing. Pull request #1898
- Go SDK receives fsb template surface with template management and origin propagation. Pull request #1897
- Docker configuration now honors
host_ipinside containers when server binds to loopback. Pull request #1918
Why it matters
The 1.1.0-rc.1 release consolidates major ecosystem improvements: all five SDKs now share fsb template APIs and pool behavior, egress and revision systems complete their OSEP-0023 implementation, and unified versioning (OSEP-0016) ensures coordinated releases across the entire platform. This week establishes consistency across SDKs that users have been requesting.
Changelog entry
- OpenSandbox 1.1.0-rc.1 released Release
- Egress: bootstrap revision process sessions with metadata-only readback and coordinator retry semantics Pull request #1915
- Python SDK: add fsb template CRUD, template-based creation, and origin-based egress routing Pull request #1877
- JavaScript SDK: align pool with Kotlin (staged warmup, distributed state, namespace destroy) Pull request #1875
- Python SDK: reconcile with 1-second fixed cadence, add
warmup_create_qps, staged readiness Pull request #1889 - Kotlin SDK: port fsb template CRUD and origin-based routing Pull request #1894
- JavaScript SDK: add fsb template management Pull request #1895
- C# SDK: port fsb template CRUD and origin-based routing Pull request #1898
- Go SDK: add fsb template CRUD with origin propagation Pull request #1897
- Docker: honor
host_ipinside containers when server binds loopback Pull request #1918 - Python SDK: fix async pool cleanup during acquire cancellation Pull request #1938
- MCP: expose streamable HTTP host and port options Pull request #1929
- JavaScript: always make final warmup attempt when initial delay is capped Pull request #1927
- Docs: add Docker/runsc overlay configuration to preserve gVisor writes in snapshots Pull request #1919
- Server: forward proxied query string unchanged Pull request #1902
- Execd: support dotenv-style quoting for lossless EXECD_ENVS round-tripping Pull request #1893
- Server: preserve repeated proxy response headers through HTTP proxy Pull request #1858
- CLI: pass native argv to command run without shell quoting Pull request #1829
- Go SDK: remove 4 MiB cap on SSE event lines Pull request #1881
- Go SDK: default negative code interpreter polling interval correctly Pull request #1885
1.1.0-rc.1 ships: unified versioning across all images/charts/SDKs, fsb templates in all five SDKs, aligned pool behavior, and egress bootstrap reconciliation. Release notes: docs/release/1.1.0.md
OpenSandbox 1.1.0-rc.1 is live. This release delivers ecosystem consistency: all five SDKs now support fsb templates and share pool behavior (staged warmup, fixed reconciliation, distributed state), egress completes OSEP-0023 revision bootstrap, and OSEP-0016 unified versioning ensures one X.Y.Z for every image, chart, CLI, and SDK cut from one commit. See docs/release/1.1.0.md for full details.