0.2.15

langgenius/dify-sandbox0.2.15Apr 27, 2026by wylswz

AI Summary

This release focuses on security hardening and stability improvements, specifically addressing Debian installation prompts, privilege dropping order, and sandbox setup reliability.

Key Highlights

Fix Debian installation to prevent interactive dpkg prompts
Pass sandbox user code over file descriptor 3
Allow Python FD3 reads under seccomp restrictions
Abort failed sandbox setup and correct privilege drop order
Use per-run UIDs for the Node runner

New Features

Use per-run UIDs for node runner

Full Release Notes

## What's Changed
* Tiny change: fix typo in comment by @luoling8192 in https://github.com/langgenius/dify-sandbox/pull/220
* fix: prevent interactive dpkg prompts in Debian installs by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/240
* fix: pass sandbox user code over fd 3 by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/242
* fix: allow python fd3 reads under seccomp by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/251
* fix: abort failed sandbox setup and correct privilege drop order by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/249
* fix: use per-run UIDs for node runner by @BeautyyuYanli in https://github.com/langgenius/dify-sandbox/pull/253

## New Contributors
* @luoling8192 made their first contribution in https://github.com/langgenius/dify-sandbox/pull/220
* @BeautyyuYanli made their first contribution in https://github.com/langgenius/dify-sandbox/pull/240

**Full Changelog**: https://github.com/langgenius/dify-sandbox/compare/0.2.14...0.2.15