What opensandbox-group/OpenSandbox shipped
Written by FoxPlug from the repository's own releases; not affiliated with Open-sandbox. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/opensandbox-group/OpenSandbox; Open-sandbox did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of November 2, 2026
What shipped
- Template creates now forward the template's recorded machine shape as per-sandbox resource limits when the selected pool reports resource-aware mode. Pull request #2628
- Snapshot source limits are now recorded and replayed so a template sandbox restored on a resource-aware pool keeps its machine shape instead of falling back to pool defaults. Pull request #2633
- The server now records each template's effective machine shape, preferring the pinned machine spec and otherwise deriving it from resource limits with defaults. Pull request #2623
- Port-scoped egress rules are now enforced per subject in fast sandbox, where they were previously rejected with a 400. Pull request #2662
- Subject decision snapshots are now installed after vault and policy mutations, reusing the existing worker and mirror. Pull request #2649
- Background commands can now be checked for status, exit code and output produced so far. Pull request #2648
- Generic retry waits are now bounded by the wake deadline, so a retryable failure can no longer sleep past the caller's overall deadline. Pull request #2611
- Pool drain now honors caller cancellation and still completes the stopped transition and completion signal before returning the context error. Pull request #2617
- An already-cancelled pool acquire no longer removes a healthy idle entry or invokes a custom direct creator. Pull request #2616
- Closed lifecycle request objects now reject unknown fields, so settings like a read-only volume or disabled automatic creation are no longer silently dropped. Pull request #2576
Why it matters
This week addressed several silent-failure paths: unknown request fields are now rejected instead of discarded, egress policy merges no longer drop existing deny rules, and one leading UTF-8 BOM in SSE responses no longer loses the first frame. It also moved the resource-aware work forward, with snapshot limits and template machine shapes carried onto pools that account resources. Sandbox operators get more predictable egress, pool and snapshot behavior as a result.
Changelog entry
- Forward template machine shape as per-sandbox resource limits on resource-aware pools Pull request #2628
- Record and replay snapshot source limits so restores keep their machine shape Pull request #2633
- Record the effective machine shape of templates on creation Pull request #2623
- Enforce port-scoped egress rules per subject in fast sandbox Pull request #2662
- Install subject decision snapshots after vault and policy mutations Pull request #2649
- Expose background command status, exit code and incremental logs Pull request #2648
- Bound generic retry waits by the wake deadline Pull request #2611
- Honor caller cancellation while draining the pool Pull request #2617
- Preserve idle capacity on a cancelled pool acquire Pull request #2616
- Reject unknown fields in closed lifecycle request objects Pull request #2576
- Keep untouched same-scope rules when merging egress policy PATCH requests Pull request #2664
- Ignore one leading UTF-8 BOM in SSE responses Pull request #2618
This week: closed request objects reject unknown fields instead of dropping them, egress PATCH merges keep existing deny rules, and SSE responses tolerate one leading BOM. Resource-aware pools now carry template machine shapes and snapshot limits.
This week's changes for OpenSandbox users: Closed lifecycle request objects now reject unknown fields, so settings such as read-only volumes or disabled automatic volume creation are no longer silently discarded. PATCH on egress policy keeps untouched same-scope rules, closing a path where an existing deny could be dropped. SSE responses tolerate one leading UTF-8 BOM without losing the first frame, and generic retry waits are bounded by the wake deadline. Pool drain honors caller cancellation, and an already-cancelled acquire keeps healthy idle capacity. On the resource side, template creates forward the template's recorded machine shape as per-sandbox limits when the pool is resource-aware, and snapshot source limits are recorded and replayed. Port-scoped egress rules are now enforced pe
Week of October 26, 2026
What shipped
- OpenSandbox 1.2.0 shipped as the stable cut of the line, carrying everything merged since release-1.1.1, and users on 1.1.x should upgrade. Release
- Download response metadata is now exposed across the Go, JavaScript, Python, Kotlin and C# SDKs so callers can tell a 206 Partial Content response from a server or proxy that ignored Range. Pull request #1597
- The JavaScript SDK now strips protected request headers when following a cross-origin redirect. Pull request #2173
- The C# SDK now protects tenant and endpoint credentials across cross-origin redirects for regular requests, SSE and the lifecycle-metrics client. Pull request #2183
- File uploads in execd now replace the destination atomically, so a failed write keeps the old file instead of destroying it. Pull request #2433
- The server now rejects duplicate and root Docker mount destinations with a 400 error before making Docker API calls. Pull request #2421
- The server now honors a configured root path of / in host path allowlists, so binding a subpath such as /data is accepted. Pull request #2474
- Execd can now discover the per-sandbox Jupyter runtime token automatically when one is not configured explicitly. Pull request #2448
- Execd gained an opt-in compatibility setting to omit
exit_codefrom SSE events for older SDKs. Pull request #2472 - The egress side gained a credential header resolver client with both UDS and HTTPS transports and envelope enforcement. Pull request #2500
Why it matters
This week brings a stable 1.2.0 release with the Go SDK tag alongside it, so users on 1.1.x have a clear upgrade path. Across the SDKs, downloads now carry response metadata and redirects no longer replay protected credentials, while ingest and execd fixes reduce data loss on failed uploads and clearer server rejections for bad volume requests.
Changelog entry
- Release OpenSandbox 1.2.0, the stable cut carrying everything merged since release-1.1.1. Release
- Tag the Go SDK at v1.2.0 alongside the umbrella release. Release
- Expose download response metadata across the Go, JavaScript, Python, Kotlin and C# SDKs. Pull request #1597
- Strip protected OpenSandbox headers on cross-origin redirects in the JavaScript SDK. Pull request #2173
- Protect C# credentials across cross-origin redirects for requests, SSE and the lifecycle-metrics client. Pull request #2183
- Replace uploads atomically in execd so a failed write keeps the old file. Pull request #2433
- Reject duplicate and root Docker mount destinations with a 400 before Docker API calls. Pull request #2421
- Honor a POSIX root in host path allowlists. Pull request #2474
- Discover the standalone Jupyter runtime token in execd when one is not configured. Pull request #2448
- Add EXECD_SSE_LEGACY_COMPAT to omit
exit_codefrom SSE events for older SDKs. Pull request #2472 - Add the egress credential header resolver client with UDS and HTTPS transports. Pull request #2500
- Remove dead code across several modules. Pull request #2496
OpenSandbox 1.2.0 is out, with the Go SDK tagged at the same commit. Users on 1.1.x should upgrade. Also this week: download response metadata across all SDKs, cross-origin redirect header and credential fixes in the JS and C# SDKs, atomic upload replacement in execd, and the egr
OpenSandbox 1.2.0 is now available as the stable cut of the line, with the Go SDK tagged at the same commit, and everyone on 1.1.x should upgrade. This week also landed download response metadata across the Go, JavaScript, Python, Kotlin and C# SDKs so callers can tell a 206 Partial Content response from a proxy ignoring Range. The JavaScript and C# SDKs no longer replay protected credentials or headers across cross-origin redirects. In execd, a failed upload now keeps the previous file instead of destroying it, and Jupyter runtime tokens are discovered automatically when not configured. The server now rejects duplicate and root Docker mount destinations with a 400, and honors a / root in host path allowlists. On the egress side, a credential header resolver client with UDS and HTTPS trans
Week of October 19, 2026
What shipped
- OpenSandbox 1.2.0-rc.1 shipped as the first release candidate on the 1.2.0 line, carrying everything merged since release-1.1.1 with auto-pause and wake-on-access for fast sandboxes landing end to end. Release
- OpenSandbox 1.2.0-rc.2 shipped as the second release candidate on the 1.2.0 line, carrying everything merged since the first candidate with the Credential Vault landing end to end for fast sandboxes, including durable per-subject persistence and pause/resume transfer. Release
- Execd PTY WebSocket connections now support token authentication for browser clients, which cannot set the access token header on a native WebSocket handshake. Pull request #2334
- The Go SDK no longer replays non-idempotent writes by default, so retry-wrapped mutations of sandboxes, sessions, commands, files, snapshots and credentials can no longer execute twice and still return success. Pull request #2342
- Bash and isolated sessions keep reading session output past a single line longer than 16 MiB instead of stopping the read loop. Pull request #2275
- Concurrent Docker lifecycle requests that hit an expected daemon conflict or missing container now map to 409 or 404 instead of a 500 response. Pull request #2387
- Sandboxes restored from a snapshot image on Docker no longer inherit the source sandbox system labels that the create path does not set itself. Pull request #2269
- The egress DNS proxy forwards queries over TCP when the client used TCP, so answers larger than the EDNS0 buffer are no longer returned truncated. Pull request #2358
- The JavaScript SDK honors explicit API key headers regardless of header-name casing, with the same contract carried to the C# and Kotlin SDKs. Pull request #2348
- The release server image now injects the package version, so the server image and version interface no longer display the default development version. Pull request #2356
Why it matters
This week brought the second 1.2.0 release candidate, adding the Credential Vault for fast sandboxes on top of the auto-pause and wake-on-access work in the first candidate. Alongside the releases, a batch of fixes landed across the Go, JavaScript, C#, Kotlin and Python SDKs and the server, covering retry behavior, header casing, error reporting and Docker lifecycle responses. Users are asked to test the candidates and report issues.
Changelog entry
- Release OpenSandbox 1.2.0-rc.1, the first candidate on the 1.2.0 line with auto-pause and wake-on-access for fast sandboxes. Release
- Release OpenSandbox 1.2.0-rc.2 with the Credential Vault landing end to end for fast sandboxes. Release
- Execd: add browser PTY WebSocket token authentication. Pull request #2334
- Sdk-go: stop retrying non-idempotent writes by default. Pull request #2342
- Execd: keep reading session output past a line longer than 16 MiB. Pull request #2275
- Execd: keep PTY output buffered when the shell exits. Pull request #2362
- Server: map concurrent Docker lifecycle conflicts to 409 and missing containers to 404. Pull request #2387
- Server: do not inherit system labels from snapshot images on Docker. Pull request #2269
- Server: do not report image labels as sandbox metadata on Docker. Pull request #2363
- Egress: forward DNS queries over TCP when the client used TCP. Pull request #2358
- Sdk-js: honor API key headers regardless of casing, with matching fixes in the C# and Kotlin SDKs. Pull request #2348
- Release: inject the server image package version so the image and version interface report the right version. Pull request #2356
OpenSandbox 1.2.0-rc.1 and 1.2.0-rc.2 are out. rc.1 carries auto-pause and wake-on-access for fast sandboxes. rc.2 adds the Credential Vault. Also this week: Go SDK stops replaying non-idempotent writes, browser PTY WebSocket token auth, and sessions keep reading past 16 MiB line
OpenSandbox 1.2.0-rc.1 and 1.2.0-rc.2 are now available. The first candidate carries everything merged since release-1.1.1, with auto-pause and wake-on-access for fast sandboxes landing end to end. The second adds the Credential Vault for fast sandboxes, with an egress-held vault, durable per-subject persistence and pause/resume transfer. SDK and CLI packages ship at the 1.2.0 stable bump, while images publish now. Alongside the releases, this week fixed Go SDK retries of non-idempotent writes, added browser PTY WebSocket token authentication in execd, mapped concurrent Docker lifecycle conflicts to 409 or 404, stopped snapshot restores from inheriting system labels, and kept sessions reading past lines longer than 16 MiB. Please test the candidates and report issues.
Week of October 12, 2026
What shipped
- Released 1.2.0-rc.1, the first release candidate on the 1.2.0 line, bundling everything merged since 1.1.1, with auto-pause and wake-on-access for fast sandboxes landing end to end. Release
- Added the user-reachable credential vault API for fast-sandbox sandboxes, with the server pushing complete vault revisions over the FastPath handler relay. Pull request #2263
- Network rules can now be scoped by destination port, either alone or combined with an IP or CIDR target. Pull request #2212
- Added a diagnostics context endpoint that returns the owning backend type and backend-defined string identifiers for a sandbox. Pull request #2236
- Added console snapshots and diagnostics pages plus a colored log viewer tab on the sandbox detail page. Pull request #2130
- Shipped egress-trace, a read-only viewer in the egress image giving a live per-event view of how the sidecar admits outbound traffic. Pull request #2230
- File uploads and downloads in the C# SDK no longer abort at the request timeout. Pull request #2206
- Template-mode BatchSandbox pods now default to restartPolicy Never, while an explicit setting in the template still wins. Pull request #2128
- A deleted BatchSandbox is now retained until cleanup completes, so a replacement cannot write the same persistent directory while the old writer is still running. Pull request #2154
- An empty exit file is no longer read as exit code 0, so tasks are no longer briefly reported as Succeeded while the shim is writing. Pull request #2270
Why it matters
This week's release candidate is the main thing for people using the project: it is the first 1.2.0 build and carries auto-pause and wake-on-access for fast sandboxes, with images publishing now and SDK and CLI packages following at the stable bump. Alongside it, egress control grew port-scoped rules and a credential vault API, and several fixes target problems users hit in practice, such as transfers aborting at the request timeout and task results being misreported.
Changelog entry
- Release 1.2.0-rc.1, first release candidate on the 1.2.0 line with auto-pause and wake-on-access for fast sandboxes. Release
- Add the credential vault API for fast-sandbox sandboxes, served over the FastPath handler relay. Pull request #2263
- Support port-scoped egress rules, with an optional target and a new ports field. Pull request #2212
- Add the diagnostics context API returning backend type and backend-defined identifiers. Pull request #2236
- Add console snapshots and diagnostics pages and a colored log viewer on sandbox detail. Pull request #2130
- Add egress-trace, a read-only per-event viewer of sidecar traffic admission. Pull request #2230
- Fix C# SDK capping file uploads and downloads at the request timeout. Pull request #2206
- Default template-mode BatchSandbox pods to restartPolicy Never. Pull request #2128
- Retain deleted BatchSandbox resources until cleanup completes. Pull request #2154
- Fix an empty exit file being read as exit code 0 by the task executor. Pull request #2270
- Fix concurrent Docker metadata patches failing or dropping keys. Pull request #2267
- Add architecture page and user guide for auto-pause and wake-on-access. Pull request #2217
OpenSandbox 1.2.0-rc.1 is out: first release candidate on the 1.2.0 line, with auto-pause and wake-on-access for fast sandboxes landing end to end. Images publish now, SDK and CLI packages follow at the stable bump. Test it and report issues.
OpenSandbox 1.2.0-rc.1 is published, the first release candidate on the 1.2.0 line. It carries everything merged since 1.1.1, and the headline is OSEP-0024: auto-pause and wake-on-access for fast sandboxes, landing end to end. Images publish now; SDK and CLI packages ship at the 1.2.0 stable bump. Please test the candidate and report issues. Other changes this week include port-scoped egress rules, a credential vault API for fast-sandbox sandboxes, a diagnostics context endpoint, console snapshots and diagnostics pages, and egress-trace for viewing admission decisions.
Week of October 5, 2026
What shipped
- OpenSandbox 1.1.0 shipped as the first stable release of one umbrella version line covering server, component images, charts, CLI and every published SDK. Release
- OpenSandbox 1.1.1 shipped as the stable patch cut that fixes the broken 1.1.0 server wheel, whose committed FastPath gRPC stubs were dropped from the package. Release
- OpenSandbox 1.1.1-rc.1 shipped as the first release candidate on the 1.1.1 patch line, cut to repair the 1.1.0 server wheel. Release
- The Go SDK 1.1.1 tag shipped on the same commit as the umbrella 1.1.1 release. Release
- OSEP-0024 landed, adding an ingress-driven lifecycle loop that pauses opted-in fast sandboxes after idle time and wakes them on access. Pull request #2152
- The ingress half of OSEP-0024 shipped with activity tracking and wake-on-access, off by default so unset flags keep behavior unchanged. Pull request #2156
- Ingress wake-on-access hardening completed, closing four gaps between the OSEP-0024 design and the shipped ingress code. Pull request #2180
- The Go SDK no longer fails file uploads and downloads that run longer than the 30 second request timeout. Pull request #2165
- Foreground command output now preserves line endings, so concatenated stdout and stderr events reconstruct blank lines and unterminated final fragments. Pull request #2033
- The JavaScript SDK added sandbox.filesWithIdentity so file operations can be bound to an explicit Linux UID and GID. Pull request #2094
Why it matters
This week the project cut its first stable umbrella release and the patch release that fixes the broken server wheel from the previous cut, so installs from the package index work again. It also landed the default-off fast sandbox lifecycle work, where idle sandboxes pause and wake on first access, and a set of fixes for the Go SDK, command output line endings, and the JavaScript filesystem API.
Changelog entry
- Shipped OpenSandbox 1.1.0 as the first stable unified umbrella release. Release
- Shipped OpenSandbox 1.1.1, fixing the broken 1.1.0 server wheel. Release
- Shipped OpenSandbox 1.1.1-rc.1 as the first candidate on the patch line. Release
- Tagged the Go SDK at 1.1.1 on the same commit as the umbrella release. Release
- Added OSEP-0024 auto-pause and wake-on-access for fast sandboxes. Pull request #2152
- Added ingress activity tracking and wake-on-access for fast sandboxes, disabled by default. Pull request #2156
- Completed ingress wake-on-access hardening for OSEP-0024. Pull request #2180
- Stopped capping Go SDK file uploads and downloads at the request timeout. Pull request #2165
- Preserved line endings in foreground command stdout and stderr events. Pull request #2033
- Added identity-bound filesystem operations to the JavaScript SDK. Pull request #2094
- Percent-encoded quoted filenames in the download Content-Disposition header. Pull request #2161
- Stopped assigning tasks to Pods Kubernetes declared NotReady. Pull request #2138
OpenSandbox 1.1.0 is out as the first stable umbrella release, and 1.1.1 fixes the 1.1.0 server wheel that dropped committed FastPath gRPC stubs. Also in: fast sandbox auto-pause and wake-on-access, Go SDK file transfers past the request timeout, and preserved command output line
This week OpenSandbox published 1.1.0, the first stable release of the unified version line covering server, component images, charts, CLI and every published SDK, plus 1.1.1 on the patch line to fix the 1.1.0 server wheel whose committed FastPath gRPC stubs were missing from the package. The fast sandbox lifecycle work landed too: ingress activity tracking and wake-on-access, both off by default, alongside OSEP-0024. Other fixes include Go SDK file uploads and downloads no longer capped by the request timeout, command output line endings preserved in stdout and stderr events, and an identity-bound filesystem API in the JavaScript SDK.
Week of September 28, 2026
What shipped
- Fixed overflow in Range parsing when clients send very large byte offsets. Pull request #2089
- Fixed command exit codes to report failures when the execution stream ends prematurely. Pull request #2099
- Added tracking for bounded TLS retirement deadlines during credential rotation. Pull request #2100
- Introduced filesystem execution identity core for explicit owner/group metadata handling. Pull request #2070
- Fixed session run timeouts to kill entire process groups, not just the bash shell. Pull request #2079
- Added support for custom snapshot image URI templates on Kubernetes. Pull request #2004
- Enabled chained upstream CONNECT proxy support under fast-sandbox profile. Pull request #2003
- Added automatic pod replacement for BatchSandbox pods stuck in provisioning failures. Pull request #1961
- Reorganized README with clearer feature tables and improved onboarding navigation. Pull request #2086
- Added ACK deployment guide for Alibaba Cloud Container Service for Kubernetes. Pull request #2048
Why it matters
This week addresses critical runtime issues in command execution, TLS credential handling, and process lifecycle management. Several fixes resolve edge cases where cleanup and timeout enforcement were incomplete or missing. Documentation improvements and new deployment guides expand platform support.
Changelog entry
- Execd: clamp Range end before computing length to prevent overflow Pull request #2089
- Cli: exit non-zero when command stream ends before execution completes Pull request #2099
- Execd: kill entire process group on session run timeout Pull request #2079
- Execd: remove bash session script files after each run Pull request #2076
- Kubernetes: support custom snapshot image URI templates Pull request #2004
- Egress: support chained upstream CONNECT proxy in fast-sandbox profile Pull request #2003
- Kubernetes: auto-replace pods stuck in provisioning failures during startup Pull request #1961
- Ingress-gateway: require secure-access keys for fast-sandbox provider Pull request #2047
- Egress: track bounded TLS retirement deadlines Pull request #2100
- Execd: add filesystem execution identity core Pull request #2070
- Server: don't fail snapshot read before worker runs Pull request #2077
- Kubernetes: skip pause dispatch for already Paused BatchSandbox Pull request #2082
This week: fixed command exit codes, process group timeouts, Range parsing overflows, and added custom snapshot image templates. Plus new ACK deployment guide and upstream proxy support.
Weekly digest: Range parsing overflow fix for large byte offsets, command exit code reporting for stream failures, process group timeout enforcement, custom Kubernetes snapshot image templates, upstream CONNECT proxy for fast-sandbox, automatic pod replacement for stuck BatchSandbox, and new Alibaba Cloud ACK deployment guide.
Week of September 21, 2026
What shipped
- All five sandbox SDKs now support setEnv for runtime environment injection across JavaScript, Python, Kotlin, Go, and C#. Pull request #2013
- CLI gained -f/--file option to osb sandbox create and osb template create for reading requests from JSON files in the public wire format. Pull request #2019
- CLI now exposes full template and snapshot management commands, matching Python SDK capabilities. Pull request #2002
- Kubernetes tenant isolation now stamps workloads with tenant labels so create/list/delete/pause/resume/proxy hide other tenants' sandboxes as 404. Pull request #1973
- Pause and resume endpoints now work with the agent-sandbox workload provider by bridging to spec.operatingMode. Pull request #1975
- Docker sandbox pause now rejects repeated pause attempts with 409 Conflict instead of incorrectly reporting 500. Pull request #2023
- Fast-sandbox integration test workflow added to run on self-hosted KVM runners via workflow dispatch and scheduled triggers. Pull request #1978
- Fast-sandbox integration environment replaced MinIO with RustFS as the S3 artifact store. Pull request #2009
- Kubernetes sandbox creation now wakes from its polling loop on watch events instead of using a fixed interval. Pull request #1996
- Helm deployment guide rewritten and manifests reviewed for 7 charts with corrected metadata and image tag defaults. Pull request #2006
Why it matters
Runtime environment injection unifies a key feature across all SDKs, CLI gains file-based request input and template management to match SDK capabilities, and multi-tenant isolation with improved pause/resume support strengthens production deployments. Fast-sandbox integration testing infrastructure now runs on dedicated hardware.
Changelog entry
- Feat(sdks): add commands.setEnv for runtime env injection across all five SDKs Pull request #2013
- Feat(cli): add -f/--file request file support to sandbox/template create Pull request #2019
- Feat(cli): add template and snapshot management commands Pull request #2002
- Feat(server): isolate tenants that share a Kubernetes namespace with opensandbox.io/tenant labels Pull request #1973
- Feat(server): bridge pause/resume to agent-sandbox spec.operatingMode Pull request #1975
- Fix(server): reject repeated pause for Docker sandboxes with 409 Conflict Pull request #2023
- Feat(templates): accept env on template create and bake into golden image Pull request #1984
- Ci: add fast-sandbox integration test workflow on self-hosted kvm runners Pull request #1978
- Feat(fast-sandbox): replace MinIO with RustFS in integration environment Pull request #2009
- Perf(server): wake creation waits on watch events instead of polling interval Pull request #1996
- Fix(manifests): correct chart metadata and image tag defaults; rewrite deployment guide Pull request #2006
- Refactor(cli): remove dead code and prune noisy comments, net -560 lines Pull request #2018
- Fix(execd): remove command completion delay while retaining output flushing Pull request #1825
- Fix(server): propagate FastPath error message through 429 capacity mapping Pull request #2001
- Feat(ingress): per-request opt-out for access renew intents with OpenSandbox-Access-Renew: skip header Pull request #1966
This week: setEnv across all five SDKs, CLI file input for sandbox/template create, tenant isolation on Kubernetes, pause/resume for agent-sandbox, and fast-sandbox integration tests on KVM runners.
This week shipped: setEnv support across all five SDKs (JavaScript, Python, Kotlin, Go, C#) for runtime environment injection. CLI gained -f/--file option for JSON request input and full template/snapshot management. Kubernetes tenants sharing a namespace now isolate sandboxes with labels. Pause/resume works with agent-sandbox. Fast-sandbox integration tests run on self-hosted KVM runners. Helm charts reviewed and deployment guide rewritten.
Week of September 14, 2026
What shipped
- OpenSandbox 1.1.0-rc.1 released, establishing unified versioning across all images, charts, CLI, and SDKs. Release
- Egress revision bootstrap reconciliation now exposes metadata-only readback and coordinator retry semantics for OSEP-0023. Pull request #1915
- Python SDK adds fsb template CRUD, template-based sandbox creation, and origin-based egress routing. Pull request #1877
- JavaScript SDK pool now aligns with Kotlin behavior, adds staged warmup, and supports Redis-backed distributed state. Pull request #1875
- Python pool reconciliation simplified to fixed 1-second cadence with staged readiness and
warmup_create_qps. Pull request #1889 - Kotlin SDK ports fsb template CRUD and origin-based routing from Python SDK. Pull request #1894
- JavaScript SDK gains fsb template management support. Pull request #1895
- C# SDK ports fsb template CRUD, template-based creation, and origin-based routing. Pull request #1898
- Go SDK receives fsb template surface with template management and origin propagation. Pull request #1897
- Docker configuration now honors
host_ipinside containers when server binds to loopback. Pull request #1918
Why it matters
The 1.1.0-rc.1 release consolidates major ecosystem improvements: all five SDKs now share fsb template APIs and pool behavior, egress and revision systems complete their OSEP-0023 implementation, and unified versioning (OSEP-0016) ensures coordinated releases across the entire platform. This week establishes consistency across SDKs that users have been requesting.
Changelog entry
- OpenSandbox 1.1.0-rc.1 released Release
- Egress: bootstrap revision process sessions with metadata-only readback and coordinator retry semantics Pull request #1915
- Python SDK: add fsb template CRUD, template-based creation, and origin-based egress routing Pull request #1877
- JavaScript SDK: align pool with Kotlin (staged warmup, distributed state, namespace destroy) Pull request #1875
- Python SDK: reconcile with 1-second fixed cadence, add
warmup_create_qps, staged readiness Pull request #1889 - Kotlin SDK: port fsb template CRUD and origin-based routing Pull request #1894
- JavaScript SDK: add fsb template management Pull request #1895
- C# SDK: port fsb template CRUD and origin-based routing Pull request #1898
- Go SDK: add fsb template CRUD with origin propagation Pull request #1897
- Docker: honor
host_ipinside containers when server binds loopback Pull request #1918 - Python SDK: fix async pool cleanup during acquire cancellation Pull request #1938
- MCP: expose streamable HTTP host and port options Pull request #1929
- JavaScript: always make final warmup attempt when initial delay is capped Pull request #1927
- Docs: add Docker/runsc overlay configuration to preserve gVisor writes in snapshots Pull request #1919
- Server: forward proxied query string unchanged Pull request #1902
- Execd: support dotenv-style quoting for lossless EXECD_ENVS round-tripping Pull request #1893
- Server: preserve repeated proxy response headers through HTTP proxy Pull request #1858
- CLI: pass native argv to command run without shell quoting Pull request #1829
- Go SDK: remove 4 MiB cap on SSE event lines Pull request #1881
- Go SDK: default negative code interpreter polling interval correctly Pull request #1885
1.1.0-rc.1 ships: unified versioning across all images/charts/SDKs, fsb templates in all five SDKs, aligned pool behavior, and egress bootstrap reconciliation. Release notes: docs/release/1.1.0.md
OpenSandbox 1.1.0-rc.1 is live. This release delivers ecosystem consistency: all five SDKs now support fsb templates and share pool behavior (staged warmup, fixed reconciliation, distributed state), egress completes OSEP-0023 revision bootstrap, and OSEP-0016 unified versioning ensures one X.Y.Z for every image, chart, CLI, and SDK cut from one commit. See docs/release/1.1.0.md for full details.