docker/execd/v1.0.16

opensandbox-group/OpenSandboxdocker/execd/v1.0.16May 14, 2026by Pangjiping

AI Summary

This release fixes critical certificate handling issues in the execd component to ensure Python tools can properly trust intercepted HTTPS traffic by merging system and proxy CA bundles.

Key Highlights

Fixed Python `requests` tool compatibility by merging system and mitmproxy CA bundles.
Added `OPENSANDBOX_MERGED_CA` environment variable to track the merged bundle.
Fixed certificate verification failures for Python workloads routed through the proxy.

New Features

Added `REQUESTS_CA_BUNDLE` and merged CA bundle support for Python tools
Added `OPENSANDBOX_MERGED_CA` environment variable

Full Release Notes

## What's New

### 🐛 Bug Fixes
- execd's mitmproxy now exports `REQUESTS_CA_BUNDLE` so Python `requests`-based tools trust the intercepted HTTPS traffic. Previously the CA env var was missing, causing certificate verification failures for Python workloads routed through the proxy (#868)
- `REQUESTS_CA_BUNDLE` and `SSL_CERT_FILE` now contain a **merged** CA bundle (system roots + mitmproxy CA) instead of the mitmproxy CA alone. The previous behavior replaced system trust stores, breaking direct HTTPS connections from Python `requests` and OpenSSL-based clients. The merged bundle is tracked via the new `OPENSANDBOX_MERGED_CA` env var. `NODE_EXTRA_CA_CERTS` is unaffected since Node.js appends rather than replaces (#884)

## 👥 Contributors

Thanks to these contributors ❤️

- @Pangjiping

---
- Docker Hub: opensandbox/execd:v1.0.16
- Aliyun Registry: sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.16