docker/execd/v1.0.11

opensandbox-group/OpenSandboxdocker/execd/v1.0.11Apr 12, 2026by Pangjiping

AI Summary

This release enhances the execd component with security hardening for Jupyter endpoints and fixes context handling bugs.

Key Highlights

Fixed deduplication of context entries
Enlarged default Jupyter polling interval
Added validation for request.cwd
Implemented token injection allowlisting for Jupyter

Full Release Notes

## What's New

### 🐛 Bug Fixes
- fix deduplicate context entries in `ListAllContexts` and `LanguageSessions` (#619)
- enlarge default jupyter polling interval to 100ms (#650)
- validate request.cwd and return 400 (#656)
- Bind token injection to an allowlisted host/scheme (e.g., compare req.URL.Host to the expected Jupyter endpoint before setting Authorization), and/or disable redirects for this client (CheckRedirect) unless explicitly safe (#680)

### 📦 Misc
- bump google.golang.org/grpc from 1.79.2 to 1.79.3 in /components/internal (#652)
- extract safego to internal common package and wrapper execd goroutines with safego (#670)

## 👥 Contributors

Thanks to these contributors ❤️

- @ZYecho11 
- @Pangjiping 
- @dependabot
- @tomaioo 

---
- Docker Hub: opensandbox/execd:v1.0.11
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.11