docker/egress/v1.0.10

opensandbox-group/OpenSandboxdocker/egress/v1.0.10Apr 29, 2026by Pangjiping

AI Summary

Improved the egress component's stability by fixing memory leaks in mitmproxy and adding automatic log rotation.

Key Highlights

Fixed mitmproxy OOM kill by streaming large responses
Enabled automatic log rotation via lumberjack

New Features

Mitmproxy OOM fix with auto-restart
Log rotation for file-based outputs
OpenTelemetry dependency updates

Full Release Notes

## What's New

### ✨ Features
- Log rotation via lumberjack for file-based log outputs. Auto-enabled with defaults (100 MB max size, 30-day retention, 10 backups) when log path is a file. stdout/stderr unaffected. (#791)

### 🐛 Bug Fixes
- Fix mitmproxy OOM kill by streaming large response bodies (>1 MB) to disk instead of buffering them in memory. Adds automatic mitmdump restart on unexpected exit, so transient failures no longer take down the egress proxy. (#819)
- Address CodeQL static analysis findings in egress Go code — integer conversion safety, clear-text logging fixes, and other hardening. (#795)

### 📦 Misc
- Bump OpenTelemetry Go dependencies to v1.43.0 to resolve Dependabot security alerts. (#799)
- Document coding standards and add build reproducibility flags (`-trimpath`, `-buildvcs=false`, fixed metadata) to egress native binary builds. (#808)
- Rebalance code comments in enforcement path. No functional change. (#786)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping
- @hittyt

---
- Docker Hub: opensandbox/egress:v1.0.10
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.10