Starstruk Logo MarkStarstruk

v0.4.6

superradcompany/microsandboxv0.4.6May 13, 2026by github-actions[bot]

AI Summary

Release v0.4.6 adds DNS query egress policy enforcement, improved secrets handling for Basic auth, and MSB_HOME environment override for build paths. The release also includes stdin improvements for large payload delivery.

Key Highlights

  • DNS queries subject to egress policy
  • Basic auth secrets handling with bypass detection
  • MSB_HOME env override for isolated state
  • SIGKILL if sandbox replace exceeds grace period
  • Large stdin payload delivery and broken-pipe error surfacing

New Features

  • DNS queries subject to egress policy
  • Basic auth secrets handling
  • MSB_HOME environment override
  • TLS intercept cert refresh before expiry

Full Release Notes

## What's Changed
* fix(ci): make rm in mcp-publish idempotent by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/680
* docs(recipes): add docker-in-sandbox recipe by @appcypher in https://github.com/superradcompany/microsandbox/pull/684
* deps: bump hickory to 0.26.0-alpha.1 and rand to 0.8.6 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/690
* fix(sandbox): SIGKILL if replace exceeds grace period by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/697
* fix(sdk): bun-compatible msb path bridge by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/693
* feat(secrets): handle Basic auth + detect encoded/split bypasses by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/702
* feat(build): honor MSB_HOME in prebuilt download path by @nuri-yoo in https://github.com/superradcompany/microsandbox/pull/704
* chore(sandbox): rename `replace_grace` for clarity by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/710
* chore(release): automate version bumping by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/711
* feat(network/dns): subject dns queries to egress policy by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/694
* fix(stdin): deliver large payloads and surface broken-pipe errors by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/706
* fix(image): validate digest path components by @immanuwell in https://github.com/superradcompany/microsandbox/pull/712
* fix: trust system certs for prebuilt downloads by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/713
* chore(release): bump version to 0.4.6 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/714
* chore(release): bump mcp submodule to 0.4.6 by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/715

## New Contributors
* @nuri-yoo made their first contribution in https://github.com/superradcompany/microsandbox/pull/704
* @immanuwell made their first contribution in https://github.com/superradcompany/microsandbox/pull/712

**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.4.5...v0.4.6