What's Changed
Features
- feat(sandbox): enforce sandbox name byte limit by @appcypher in #830
- feat(mounts): harden volume mount options by @appcypher in #832
- feat(cli): add copy and rootfs patch commands by @appcypher in #838
- feat(cli): add env-backed secret shorthand by @appcypher in #842
Fixes
- fix(runtime): sync guest clock with host's by @toksdotdev in #833
- fix(network): flush tls intercept upstream writes by @toksdotdev in #834
- Fix DNS UDP response delivery to guests by @enricoschaaf in #824
- fix(secrets): handle body-continuation chunks across rustls reads by @jachris in #784
- fix(sdk): refresh stale docs and node typings by @appcypher in #840
- fix(network): harden secret handling and UDP ports by @appcypher in #836
- fix(filesystem): map bind mount ownership for guest users by @appcypher in #839
- fix(agentd): set HOME for implicit root execs by @appcypher in #846
Documentation
- docs: restore changelog and stop releases from dropping mintlify docs by @toksdotdev in #848
- docs: reorganize navigation (references tab + consolidate ssh) by @toksdotdev in #849
Dependencies
- chore(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 in the cargo group across 1 directory by @dependabot[bot] in #843
- chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in #847
Maintenance
- chore: refresh npm lockfile after v0.5.2 by @github-actions[bot] in #828
- chore(release): bump microsandbox to 0.5.3 by @appcypher in #835
Full Changelog: v0.5.2...v0.5.3