superradcompany/microsandbox v0.7.9

on GitHub

What's Changed

Features

• feat(modify): add and remove published ports by @toksdotdev in #1789
• feat(sdk): expose retained sandbox exit outcomes by @toksdotdev in #1812
• feat(network): return JSON policy denials by default by @toksdotdev in #1825
• feat(exec): add optional output backpressure by @toksdotdev in #1832
• feat(sdk): apply label modifications live on running sandboxes by @TheRealSibasishBehera in #1881
• feat(config): restrict backends and add context commands by @toksdotdev in #1898
• feat(network): add HTTP CONNECT proxy basic authentication - #78 by @gregwebs in #1868

Fixes

• fix(db): preserve SQLite locks during macOS identity checks by @x0day in #1787
• fix(snapshot): avoid duplicate catalog entries after import by @toksdotdev in #1802
• fix(runtime): take metrics snapshots off the runtime workers by @0xpolarzero in #1807
• fix(exec): reject signals promptly after execution ends by @toksdotdev in #1810
• fix(runtime): discard late bulk finishes after cancellation by @toksdotdev in #1816
• fix(network): release completed published TCP connections by @toksdotdev in #1815
• fix(cli): shorten default storage usage output by @toksdotdev in #1820
• fix(runtime): deliver bulk failures without waiting for finish by @toksdotdev in #1822
• fix(runtime): preserve live legacy startup endpoints by @toksdotdev in #1823
• fix(network): preserve ipv4 fallback when ipv6 stalls by @toksdotdev in #1824
• fix(installer): resolve relative install paths before changing directory by @GoldArowana in #1830
• fix(runtime): preserve partial relay frame reads across wakeups by @toksdotdev in #1838
• fix(agentd): replace the CA bundle atomically by @TheRealSibasishBehera in #1856
• fix(sdk): refuse reserved label keys in modify by @TheRealSibasishBehera in #1857
• fix(sdk-node): encode consumer paths when resolving bundled binaries by @GoldArowana in #1833
• fix(sdk): refuse env the guest cannot boot with by @TheRealSibasishBehera in #1863
• fix(cli): keep secret substitution on plain modify by @TheRealSibasishBehera in #1842
• fix(volume): retain local record until file removal succeeds by @toksdotdev in #1873
• fix(ci): improve runner disk cleanup by @toksdotdev in #1895
• fix(exec): bound command buffers without stalling shared transport by @toksdotdev in #1839
• fix(env): set the last entry of a repeated env key by @TheRealSibasishBehera in #1893
• fix(snapshot): inspect archive metadata before deferred extraction by @toksdotdev in #1903

Documentation

• docs: sync mintlify updates to main by @toksdotdev in #1814
• docs(cli): list secret options in command help by @toksdotdev in #1828
• docs: sync published mintlify updates into main by @toksdotdev in #1885

Dependencies

• chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in #1853
• chore(deps): bump webpki deps by @toksdotdev in #1894
• chore(deps-dev): Bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #1892
• chore(deps): Bump @vitest/mocker from 5.0.1 to 5.0.5 in /packages in the npm_and_yarn group across 1 directory by @dependabot[bot] in #1896

Build

• build(kernel): update firmware to Linux 6.12.113 by @toksdotdev in #1876

Tests

• test(network): cover HTTP CONNECT handshake and harden status parsing by @gregwebs in #1819

Maintenance

• chore: refresh lockfiles after v0.7.8 by @github-actions[bot] in #1808
• chore(docs): add documentation skill by @toksdotdev in #1869
• chore(release): bump microsandbox to 0.7.9 by @appcypher in #1829

Other changes

• revert(exec): remove unreleased output backpressure by @toksdotdev in #1875

New Contributors

• @GoldArowana made their first contribution in #1830

Full Changelog: v0.7.8...v0.7.9