0.2.15

Universal-Debloater-Alliance/universal-android-debloater-next-generation0.2.15Apr 27, 2026by wylswz

AI Summary

Security and stability fixes for the dify-sandbox, focusing on Debian package installation and sandbox isolation.

Key Highlights

  • Prevents interactive dpkg prompts in Debian installs.
  • Passes user code over file descriptor 3.
  • Uses per-run UIDs for the node runner.

New Features

  • Security hardening for Debian installs.
  • Pass user code over fd 3.
  • Use per-run UIDs for node runner.

Full Release Notes

## What's Changed
* Tiny change: fix typo in comment by @luoling8192 in https://github.com/langgenius/dify-sandbox/pull/220
* fix: prevent interactive dpkg prompts in Debian installs by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/240
* fix: pass sandbox user code over fd 3 by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/242
* fix: allow python fd3 reads under seccomp by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/251
* fix: abort failed sandbox setup and correct privilege drop order by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/249
* fix: use per-run UIDs for node runner by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/253

## New Contributors
* @luoling8192 made their first contribution in https://github.com/langgenius/dify-sandbox/pull/220
* @BeautyyuYanli made their first contribution in https://github.com/langgenius/dify-sandbox/pull/240

**Full Changelog**: https://github.com/langgenius/dify-sandbox/compare/0.2.14...0.2.15