v0.7.5

hotheadhacker/no-as-a-servicev0.7.5Sep 30, 2026by github-actions[bot]

Upgrading?

AI Summary

This release improves network security and control by returning 403 errors for denied traffic and adding configurable TCP queues. It also enhances CLI usability with stdin controls and introduces CBOR operation parity.

Key Highlights

  • Return 403 instead of reset for denied HTTP/HTTPS egress
  • Add configurable TCP accept queue size for published ports
  • Add `--no-stdin` flag for exec and run commands
  • Add generation-two CBOR operation parity
  • Fix piped exec hanging on stdin

New Features

  • Add generation-two CBOR operation parity
  • Add --no-stdin for exec and run
  • Answer denied HTTP/HTTPS egress with 403 instead of a reset
  • Make published-port TCP accept queue size configurable
  • Add fork naming with deprecated compatibility aliases

Full Release Notes

<!-- Release notes generated using configuration in .github/release.yml at v0.7.5 -->

## What's Changed
### Features
* feat(control): add generation-two CBOR operation parity by @appcypher in https://github.com/superradcompany/microsandbox/pull/1669
* feat(cli): add --no-stdin for exec and run by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1688
* feat(network): answer denied HTTP/HTTPS egress with 403 instead of a reset by @tobi in https://github.com/superradcompany/microsandbox/pull/1489
* feat(network): make the published-port TCP accept queue size configurable by @yashau in https://github.com/superradcompany/microsandbox/pull/1606
* feat(sdk): add fork naming with deprecated compatibility aliases by @appcypher in https://github.com/superradcompany/microsandbox/pull/1708
### Fixes
* fix(cli): prevent piped exec from hanging on stdin by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1674
* fix(sandbox): reject snapshot patches before creating storage by @rahulpatle-sol in https://github.com/superradcompany/microsandbox/pull/1607
* fix(sandbox): keep lower directory metadata for patch parents by @gerritlansing in https://github.com/superradcompany/microsandbox/pull/1690
* fix(release): repair labeling and retry registry propagation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1698
* fix(ci): repair type generation and stabilize sandbox test cleanup by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1697
* fix(network): allow placeholders on trusted secret hosts by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1700
* fix(network): propagate guest FIN on published ports by @skorfmann in https://github.com/superradcompany/microsandbox/pull/1706
* fix(network): make readable denial responses opt-in by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1694
### Documentation
* docs(cli): clarify entrypoint argument handling by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1699
### Maintenance
* chore: refresh lockfiles after v0.7.4 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/1673
* chore: release v0.7.5 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/1711

## New Contributors
* @rahulpatle-sol made their first contribution in https://github.com/superradcompany/microsandbox/pull/1607
* @gerritlansing made their first contribution in https://github.com/superradcompany/microsandbox/pull/1690
* @yashau made their first contribution in https://github.com/superradcompany/microsandbox/pull/1606
* @skorfmann made their first contribution in https://github.com/superradcompany/microsandbox/pull/1706

**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.7.4...v0.7.5

Related Repositories