release-1.1.1-rc.1 release-1.1.1
opensandbox-group/OpenSandboxSep 28, 2026 → Oct 9, 202611 days between releases
What's New
Stable 1.1.1 release adds identity-bound filesystems and server hardening alongside the 1.1.0 wheel fix.
New Features
- Identity-bound filesystem operations where execd executes file APIs as explicit UID/GID.
- Docker publish_host configuration to restrict port exposure.
- env support on template create for fast-sandbox golden images.
- Server hardening with race-free snapshot creation and meaningful backend error codes (502/504).
Improvements
- Server hardening with race-free snapshots and improved backend error codes.
- Tenant isolation via opensandbox.io/tenant label stamping.
- Upstream proxy chaining for the egress sidecar.
Bug Fixes
- Fixes broken 1.1.0 server wheel by including FastPath gRPC stubs.
Upgrade Notes
Upgrade from 1.1.0 to 1.1.1 to resolve the FastPath gRPC stub import failure. Identity-bound filesystem operations may require UID/GID configuration adjustments in execd. Tenant isolation is now enforced via opensandbox.io/tenant labels.
The Two Releases
OpenSandbox 1.1.1-rc.1
Sep 28, 2026· 24 days ago
This release candidate for the 1.1.1 patch line primarily fixes the broken 1.1.0 server wheel. It includes features merged since the 1.1.0 cut, such as pause/resume for the agent-sandbox provider, tenant isolation, and SDK improvements like commands.setEnv and cross-language audit cleanup.
Full release notesOpenSandbox 1.1.1
Oct 9, 2026· 13 days ago
This patch release fixes a critical bug in the 1.1.0 server wheel where FastPath gRPC stubs were missing due to hatchling's VCS-exclude filtering, ensuring clean imports. It also introduces identity-bound filesystem operations, tenant isolation for sandboxes sharing a Kubernetes namespace, and server hardening improvements.
Full release notes