What's Changed

• chore: refresh npm lockfile after v0.5.6 by @github-actions[bot] in #955
• docs(docker): fix docker-in-sandbox volume recipe by @appcypher in #963
• docs: clarify Docker recipe ordering by @appcypher in #962
• feat(network): enrich secret violation logs by @appcypher in #966
• fix(docs): remove pointless description in README by @appcypher in #967
• chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in #965
• feat(sdk): export AgentSocketPath for raw agentd transport by @toksdotdev in #972
• chore(deps): Bump the npm_and_yarn group across 2 directories with 1 update by @dependabot[bot] in #974
• fix(network): substitute secrets over plain HTTP by @TheRealSibasishBehera in #940
• fix(network): handle early proxy exits explicitly by @toksdotdev in #905
• feat(network): extend plain-http secret handling to more request shapes by @toksdotdev in #976
• fix(runtime): use paced balloon stats from msb_krun by @appcypher in #978
• fix(agentd): disable DAD for IPv6 addresses in virtual network by @TheRealSibasishBehera in #977
• feat(agent-client): add connect_stream byte-stream transport by @toksdotdev in #979
• chore(release): bump microsandbox to 0.5.7 by @appcypher in #980

New Contributors

• @TheRealSibasishBehera made their first contribution in #940

Full Changelog: v0.5.6...v0.5.7

Contributors

• @toksdotdev
• @appcypher
• @dependabot
• @TheRealSibasishBehera

What's Changed

• chore(release): update skills release gitlink by @appcypher in #924
• chore: refresh npm lockfile after v0.5.5 by @github-actions[bot] in #926
• feat(cli): add explicit mount kind flags by @appcypher in #927
• feat(agent-client): extract transport client packages by @appcypher in #935
• fix(runtime): exclude sandboxes with running execs from idle reclamation by @dijdzv in #934
• fix(ci): stop disk cleanup from deleting the active checkout by @toksdotdev in #943
• fix(runtime): harden heartbeat idle detection by @appcypher in #937
• fix(network): wake publisher after draining host channel by @chiehwangs in #930
• fix(metrics-collector): skip sandboxes whose slot stopped updating by @toksdotdev in #942
• fix(cli): inherit global log level for sandbox runs by @appcypher in #947
• feat(installer): link commands through local bin by @appcypher in #945
• feat(sdk): unify sandbox lifecycle APIs by @appcypher in #938
• feat(sandbox): atomically create per-sandbox named volumes via MountBuilder::create_named by @nuri-yoo in #801
• feat(metrics): report guest runtime metrics by @appcypher in #939
• feat(volumes): add idempotent named volume mounts by @appcypher in #950
• docs: reposition microsandbox around untrusted workloads by @appcypher in #952
• chore(release): bump microsandbox to 0.5.6 by @appcypher in #951

Full Changelog: v0.5.5...v0.5.6

Contributors

• @toksdotdev
• @appcypher
• @nuri-yoo
• @dijdzv
• @chiehwangs

What's Changed

• chore: refresh npm lockfile after v0.5.4 by @github-actions[bot] in #869
• feat(sandbox): per-sandbox labels and label-based selection by @toksdotdev in #864
• feat(runtime): stop attached sandboxes when creator process exits by @cedws in #875
• feat(metrics): attach per-sandbox labels to emitted metrics by @toksdotdev in #866
• feat(sandbox): import oci image labels as sandbox labels by @toksdotdev in #880
• fix(db): read connections must not create the catalog db by @toksdotdev in #879
• feat(metrics): add --exclude-label-key to msb-metrics by @toksdotdev in #881
• feat(protocol): agent protocol versioning foundation by @toksdotdev in #874
• ci: pin all actions by @cedws in #876
• refactor(deps): inherit internal crates via [workspace.dependencies] by @toksdotdev in #877
• ci: group dependabot updates by @toksdotdev in #893
• feat(ssh): tcp forwarding through the guest agent by @toksdotdev in #878
• refactor(sdk/go)!: remove CreateSandboxDetached by @cedws in #907
• ci: fix dependabot multi-ecosystem settings by @toksdotdev in #906
• refactor(sdk)!: use builder flag for detached creation by @appcypher in #909
• fix(sandbox): reject zero resource limits in builder by @chiehwangs in #912
• feat(python): add image management API by @appcypher in #916
• docs(sdk/go): improve docstrings for port publish funcs by @cedws in #917
• fix(network): wake poll loop after draining inbound relay channel by @wreed4 in #915
• feat(cli): group top-level help commands by @appcypher in #918
• fix(agentd): restore default guest privileges by @appcypher in #911
• fix(network/dns): return NXDOMAIN for policy-denied queries so stub resolvers fail closed by @dijdzv in #858
• chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in #910
• feat(install): add Homebrew tap support for macOS by @toksdotdev in #536
• feat(image): add prune for unused cached images by @appcypher in #913
• chore(release): bump microsandbox to 0.5.5 by @appcypher in #923

New Contributors

• @chiehwangs made their first contribution in #912
• @wreed4 made their first contribution in #915

Full Changelog: v0.5.4...v0.5.5

Contributors

• @wreed4
• @toksdotdev
• @appcypher
• @dependabot
• @cedws
• @dijdzv
• @chiehwangs

What's Changed

• chore: refresh npm lockfile after v0.5.3 by @github-actions[bot] in #852
• fix(runtime): use raised boot argument limits by @appcypher in #851
• fix(runtime): prevent idle timeout restart races by @appcypher in #854
• feat(metrics): add msb-metrics sidecar by @toksdotdev in #845
• fix(metrics): improve msb-metrics reporting by @toksdotdev in #856
• fix(sandbox): accept legacy mount config by @appcypher in #859
• docs: streamline onboarding and remove roadmap pages by @appcypher in #857
• fix(cli): show timestamps in local time by @appcypher in #863
• feat(image): add archive load and save support by @appcypher in #862
• chore(release): bump microsandbox to 0.5.4 by @appcypher in #865
• chore(install): purge libkrunfw library path setup by @appcypher in #867

Full Changelog: v0.5.3...v0.5.4

Contributors

• @toksdotdev
• @appcypher

What's Changed

• chore: refresh npm lockfile after v0.5.2 by @github-actions[bot] in #828
• feat(sandbox): enforce sandbox name byte limit by @appcypher in #830
• fix(runtime): sync guest clock with host's by @toksdotdev in #833
• fix(network): flush tls intercept upstream writes by @toksdotdev in #834
• feat(mounts): harden volume mount options by @appcypher in #832
• Fix DNS UDP response delivery to guests by @enricoschaaf in #824
• fix(secrets): handle body-continuation chunks across rustls reads by @jachris in #784
• feat(cli): add copy and rootfs patch commands by @appcypher in #838
• fix(sdk): refresh stale docs and node typings by @appcypher in #840
• fix(network): harden secret handling and UDP ports by @appcypher in #836
• fix(filesystem): map bind mount ownership for guest users by @appcypher in #839
• feat(cli): add env-backed secret shorthand by @appcypher in #842
• chore(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 in the cargo group across 1 directory by @dependabot[bot] in #843
• docs: restore changelog and stop releases from dropping mintlify docs by @toksdotdev in #848
• docs: reorganize navigation (references tab + consolidate ssh) by @toksdotdev in #849
• fix(agentd): set HOME for implicit root execs by @appcypher in #846
• chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in #847
• chore(release): bump microsandbox to 0.5.3 by @appcypher in #835

Full Changelog: v0.5.2...v0.5.3

Contributors

• @toksdotdev
• @appcypher
• @dependabot
• @jachris
• @enricoschaaf

What's Changed

• chore: refresh npm lockfile after v0.5.1 by @github-actions[bot] in #815
• fix(runtime): support long sandbox names for agent sockets by @toksdotdev in #820
• fix(sdk): parse bare ip network destinations by @toksdotdev in #825
• docs(python): document typed network destinations by @toksdotdev in #826
• chore(release): bump microsandbox to 0.5.2 by @toksdotdev in #827

Full Changelog: v0.5.1...v0.5.2

Contributors

• @toksdotdev

What's Changed

• build(agentd): include agentd in root workspace by @appcypher in #804
• docs(sdk/go): add documentation links to readme by @cedws in #811
• Enable ssh feature for release binary by @oza6ut0ne in #812
• fix(upgrade): support 0.5 upgrade path for old sandboxes by @appcypher in #810
• chore(release): bump microsandbox to 0.5.1 by @appcypher in #813

New Contributors

• @oza6ut0ne made their first contribution in #812

Full Changelog: v0.5.0...v0.5.1

Contributors

• @appcypher
• @oza6ut0ne
• @cedws

What's Changed

• feat(sdk/go): Go SDK with full API parity (#568) by @khrees in #587
• fix(release): restore pre-v0.4.4 lockfile-refresh flow by @toksdotdev in #717
• Fix Go SDK build by @toksdotdev in #720
• chore(security): revise security policy and reporting guidelines by @toksdotdev in #726
• fix(sdk-node): accept link-local in plain-object network policies by @jachris in #724
• chore(deps): bump the cargo group across 1 directory with 3 updates by @dependabot[bot] in #718
• drop redundant MSB_PATH reads at python + node sdk layers by @toksdotdev in #730
• feat(sdk/node-ts): add createWithProgress for image pull events by @Eronmmer in #589
• Add Go SDK docs and snapshots by @toksdotdev in #719
• ci(release): warm go module proxy after tagging sdk/go by @toksdotdev in #735
• docs(readme): add go sdk install instruction by @toksdotdev in #736
• feat(net): make ipv4 and ipv6 pool configurable by @toksdotdev in #739
• fix(sdk): fix zero uptime reported by AllSandboxMetrics by @cedws in #740
• docs(sdk): document blocking/nonblocking nature of exec funcs by @cedws in #734
• feat(network): wire ingress policy gate into publisher.rs by @toksdotdev in #621
• feat(net): add configurable port bind addresses by @toksdotdev in #747
• fix(cli logs): emit JSON Lines in follow mode too by @dijdzv in #749
• chore(benchmarks): move suite to superradcompany/sandbox-bench by @toksdotdev in #757
• feat(metrics): live metrics via shared-memory registry by @appcypher in #753
• feat(cli): make --script ergonomic and add --script-raw by @appcypher in #750
• chore(ci): add python sdk integration ci by @toksdotdev in #760
• Treat dot paths as local inputs by @qaijuang in #764
• fix(sandbox): flush root-fs writes on stop by @toksdotdev in #746
• fix(net): install tls ca certs into trust directories by @toksdotdev in #767
• feat(cli): change start cmd to take variadic args by @cedws in #733
• feat(passthroughfs): add per-mount stat-virt and host-perms policies by @appcypher in #751
• feat(sdk): add cross-SDK raw agent client by @appcypher in #761
• Refresh cached TLS intercept certs before expiry by @venbrinoDev in #763
• feat: rotation-aware log streaming engine + sdk bindings by @toksdotdev in #755
• feat(agent-relay): raise max clients to 128 and wire id_range_step by @appcypher in #765
• fix(ci): shorten node sdk msb home paths by @toksdotdev in #772
• Passthrough secret violation type by @wellsbunk5 in #771
• docs(sdk/go): add cpu/memory defaults to docstrings by @cedws in #773
• refactor(cli)!: consolidate network policy flags around --net-default and *.foo.com suffix by @appcypher in #774
• feat(python-sdk)!: simplify sandbox execution API by @appcypher in #776
• feat(ssh): add sandbox SSH client and server support by @appcypher in #779
• feat(sandbox): add configurable OCI upper size by @appcypher in #781
• Fix published-port stalls by waking smoltcp after host accepts by @billroy in #780
• chore(releases): auto-mark rc tags as prereleases by @toksdotdev in #786
• fix(net): harden SNI deny-domain policy evaluation by @toksdotdev in #782
• fix(network): preserve encoded request bodies during secret substitution by @toksdotdev in #768
• fix(python): harden exec options and integration coverage by @toksdotdev in #789
• fix(runtime): re-enable split irqchip on x86 Linux by @appcypher in #796
• docs(contributing): add agent contribution guide by @appcypher in #798
• refactor(image)!: restructure image crate modules by @appcypher in #795
• chore(release): bump microsandbox to 0.5.0 by @appcypher in #785

New Contributors

• @khrees made their first contribution in #587
• @jachris made their first contribution in #724
• @cedws made their first contribution in #740
• @venbrinoDev made their first contribution in #763
• @billroy made their first contribution in #780

Full Changelog: v0.4.6...v0.5.0

Contributors

• @billroy
• @toksdotdev
• @appcypher
• @dependabot
• @jachris
• @Eronmmer
• @cedws
• @khrees
• @venbrinoDev
• @wellsbunk5
• @dijdzv
• @qaijuang

What's Changed

• fix(ci): make rm in mcp-publish idempotent by @toksdotdev in #680
• docs(recipes): add docker-in-sandbox recipe by @appcypher in #684
• deps: bump hickory to 0.26.0-alpha.1 and rand to 0.8.6 by @toksdotdev in #690
• fix(sandbox): SIGKILL if replace exceeds grace period by @toksdotdev in #697
• fix(sdk): bun-compatible msb path bridge by @toksdotdev in #693
• feat(secrets): handle Basic auth + detect encoded/split bypasses by @toksdotdev in #702
• feat(build): honor MSB_HOME in prebuilt download path by @nuri-yoo in #704
• chore(sandbox): rename replace_grace for clarity by @toksdotdev in #710
• chore(release): automate version bumping by @toksdotdev in #711
• feat(network/dns): subject dns queries to egress policy by @toksdotdev in #694
• fix(stdin): deliver large payloads and surface broken-pipe errors by @toksdotdev in #706
• fix(image): validate digest path components by @immanuwell in #712
• fix: trust system certs for prebuilt downloads by @toksdotdev in #713
• chore(release): bump version to 0.4.6 by @toksdotdev in #714
• chore(release): bump mcp submodule to 0.4.6 by @toksdotdev in #715

New Contributors

• @nuri-yoo made their first contribution in #704
• @immanuwell made their first contribution in #712

Full Changelog: v0.4.5...v0.4.6

Contributors

• @toksdotdev
• @appcypher
• @nuri-yoo
• @immanuwell

What's Changed

• fix(release): add version to microsandbox-utils build-dep by @appcypher in #662
• Optimize Image persistance queries by @wellsbunk5 in #665
• Metrics Sampling Interval by @wellsbunk5 in #654
• feat(utils): MSB_HOME env override for isolated state by @toksdotdev in #669
• refactor(db): typed read/write pools with retry-on-busy by @toksdotdev in #666
• fix(network): gate address families on host route availability by @toksdotdev in #671
• docs(sdk): align rust and typescript networking references by @toksdotdev in #670
• fix(agent): bound relay handshake reads and prefer boot-error.json on timeout by @toksdotdev in #673
• chore(release): bump version to 0.4.5 by @toksdotdev in #672
• chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in #677
• docs(recipes): add systemd services recipe by @toksdotdev in #674
• ci: add Check/Test Summary aggregator jobs for required-checks gating by @toksdotdev in #679
• docs(sdk): document PatchBuilder / Patch in each sdk reference by @toksdotdev in #678

Full Changelog: v0.4.4...v0.4.5

Contributors

• @toksdotdev
• @appcypher
• @dependabot
• @wellsbunk5