Starstruk Logo MarkStarstruk

v0.5.3

Worklenz/worklenzv0.5.3May 30, 2026by github-actions[bot]

AI Summary

This update enhances security and reliability by enforcing sandbox name limits, syncing guest clocks, and hardening volume mounts and DNS handling. It also introduces new CLI commands for copying and patching.

Key Highlights

  • Enforcement of sandbox name byte limits
  • Hardening of volume mount options and DNS handling
  • Sync guest clock with host's time
  • Addition of copy and rootfs patch CLI commands

New Features

  • Enforce sandbox name byte limit
  • Add copy and rootfs patch commands
  • Add env-backed secret shorthand
  • Fix DNS UDP response delivery
  • Map bind mount ownership for guest users

Full Release Notes

## What's Changed
* chore: refresh npm lockfile after v0.5.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/828
* feat(sandbox): enforce sandbox name byte limit by @appcypher in https://github.com/superradcompany/microsandbox/pull/830
* fix(runtime): sync guest clock with host's by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/833
* fix(network): flush tls intercept upstream writes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/834
* feat(mounts): harden volume mount options by @appcypher in https://github.com/superradcompany/microsandbox/pull/832
* Fix DNS UDP response delivery to guests by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/824
* fix(secrets): handle body-continuation chunks across rustls reads by @jachris in https://github.com/superradcompany/microsandbox/pull/784
* feat(cli): add copy and rootfs patch commands by @appcypher in https://github.com/superradcompany/microsandbox/pull/838
* fix(sdk): refresh stale docs and node typings by @appcypher in https://github.com/superradcompany/microsandbox/pull/840
* fix(network): harden secret handling and UDP ports by @appcypher in https://github.com/superradcompany/microsandbox/pull/836
* fix(filesystem): map bind mount ownership for guest users by @appcypher in https://github.com/superradcompany/microsandbox/pull/839
* feat(cli): add env-backed secret shorthand by @appcypher in https://github.com/superradcompany/microsandbox/pull/842
* chore(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/843
* docs: restore changelog and stop releases from dropping mintlify docs by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/848
* docs: reorganize navigation (references tab + consolidate ssh) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/849
* fix(agentd): set HOME for implicit root execs by @appcypher in https://github.com/superradcompany/microsandbox/pull/846
* chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/847
* chore(release): bump microsandbox to 0.5.3 by @appcypher in https://github.com/superradcompany/microsandbox/pull/835


**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.5.2...v0.5.3