0.2.15

eisenzopf/rvoip0.2.15Apr 27, 2026by wylswz

AI Summary

Patch release for dify-sandbox focusing on security and stability fixes, including privilege drop order and seccomp policy adjustments.

Key Highlights

Fix privilege drop order and abort failed sandbox setup
Allow python fd3 reads under seccomp
Fix Debian dpkg prompts during install
Use per-run UIDs for node runner

New Features

Per-run UIDs for node runner
Improved seccomp policy for fd3 reads
Prevent interactive dpkg prompts

Full Release Notes

## What's Changed
* Tiny change: fix typo in comment by @luoling8192 in https://github.com/langgenius/dify-sandbox/pull/220
* fix: prevent interactive dpkg prompts in Debian installs by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/240
* fix: pass sandbox user code over fd 3 by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/242
* fix: allow python fd3 reads under seccomp by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/251
* fix: abort failed sandbox setup and correct privilege drop order by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/249
* fix: use per-run UIDs for node runner by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/253

## New Contributors
* @luoling8192 made their first contribution in https://github.com/langgenius/dify-sandbox/pull/220
* @BeautyyuYanli made their first contribution in https://github.com/langgenius/dify-sandbox/pull/240

**Full Changelog**: https://github.com/langgenius/dify-sandbox/compare/0.2.14...0.2.15