Starstruk Logo MarkStarstruk

v0.5.3

matrixleons/evilwafv0.5.3May 30, 2026by github-actions[bot]

AI Summary

This release emphasizes security hardening for sandboxes, volumes, and secrets. It adds new CLI commands for copying and patching, improves DNS and TLS handling, and enforces sandbox name byte limits.

Key Highlights

  • Enforced sandbox name byte limits
  • Added CLI commands for copy and rootfs patching
  • Hardened volume mount options and secret handling
  • Improved DNS UDP response delivery and TLS intercept handling

New Features

  • Sandbox name byte limit enforcement
  • CLI copy command
  • CLI rootfs patch command
  • Env-backed secret shorthand

Full Release Notes

## What's Changed
* chore: refresh npm lockfile after v0.5.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/828
* feat(sandbox): enforce sandbox name byte limit by @appcypher in https://github.com/superradcompany/microsandbox/pull/830
* fix(runtime): sync guest clock with host's by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/833
* fix(network): flush tls intercept upstream writes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/834
* feat(mounts): harden volume mount options by @appcypher in https://github.com/superradcompany/microsandbox/pull/832
* Fix DNS UDP response delivery to guests by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/824
* fix(secrets): handle body-continuation chunks across rustls reads by @jachris in https://github.com/superradcompany/microsandbox/pull/784
* feat(cli): add copy and rootfs patch commands by @appcypher in https://github.com/superradcompany/microsandbox/pull/838
* fix(sdk): refresh stale docs and node typings by @appcypher in https://github.com/superradcompany/microsandbox/pull/840
* fix(network): harden secret handling and UDP ports by @appcypher in https://github.com/superradcompany/microsandbox/pull/836
* fix(filesystem): map bind mount ownership for guest users by @appcypher in https://github.com/superradcompany/microsandbox/pull/839
* feat(cli): add env-backed secret shorthand by @appcypher in https://github.com/superradcompany/microsandbox/pull/842
* chore(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/843
* docs: restore changelog and stop releases from dropping mintlify docs by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/848
* docs: reorganize navigation (references tab + consolidate ssh) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/849
* fix(agentd): set HOME for implicit root execs by @appcypher in https://github.com/superradcompany/microsandbox/pull/846
* chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/847
* chore(release): bump microsandbox to 0.5.3 by @appcypher in https://github.com/superradcompany/microsandbox/pull/835


**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.5.2...v0.5.3