Starstruk Logo MarkStarstruk

v0.5.0

superradcompany/microsandboxv0.5.0May 27, 2026by github-actions[bot]

AI Summary

Release v0.5.0 is a major version upgrade introducing the Go SDK with full API parity, live metrics via shared-memory registry, configurable network pools, SSH client/server support, and rotation-aware log streaming. Multiple breaking changes are included.

Key Highlights

  • Go SDK with full API parity
  • Live metrics via shared-memory registry
  • Configurable IPv4/IPv6 pools and port bind addresses
  • SSH client and server support
  • Rotation-aware log streaming engine

Breaking Changes

  • Consolidated network policy flags around --net-default and *.foo.com suffix
  • Simplified Python sandbox execution API
  • Restructured image crate modules
  • Changed CLI start command to take variadic args

New Features

  • Go SDK with full API parity
  • Live metrics via shared-memory registry
  • Configurable IPv4 and IPv6 pools
  • Configurable port bind addresses
  • SSH client and server support
  • Rotation-aware log streaming engine
  • Cross-SDK raw agent client
  • Per-mount stat-virt and host-perms policies
  • Configurable OCI upper size
  • Raised agent-relay max clients to 128
  • Script --script and --script-raw CLI options

Full Release Notes

## What's Changed
* feat(sdk/go): Go SDK with full API parity (#568) by @khrees in https://github.com/superradcompany/microsandbox/pull/587
* fix(release): restore pre-v0.4.4 lockfile-refresh flow by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/717
* Fix Go SDK build by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/720
* chore(security): revise security policy and reporting guidelines by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/726
* fix(sdk-node): accept link-local in plain-object network policies by @jachris in https://github.com/superradcompany/microsandbox/pull/724
* chore(deps): bump the cargo group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/718
* drop redundant MSB_PATH reads at python + node sdk layers by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/730
* feat(sdk/node-ts): add createWithProgress for image pull events by @Eronmmer in https://github.com/superradcompany/microsandbox/pull/589
* Add Go SDK docs and snapshots by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/719
* ci(release): warm go module proxy after tagging sdk/go by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/735
* docs(readme): add go sdk install instruction by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/736
* feat(net): make ipv4 and ipv6 pool configurable by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/739
* fix(sdk): fix zero uptime reported by AllSandboxMetrics by @cedws in https://github.com/superradcompany/microsandbox/pull/740
* docs(sdk): document blocking/nonblocking nature of exec funcs by @cedws in https://github.com/superradcompany/microsandbox/pull/734
* feat(network): wire ingress policy gate into publisher.rs by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/621
* feat(net): add configurable port bind addresses by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/747
* fix(cli logs): emit JSON Lines in follow mode too by @dijdzv in https://github.com/superradcompany/microsandbox/pull/749
* chore(benchmarks): move suite to superradcompany/sandbox-bench by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/757
* feat(metrics): live metrics via shared-memory registry by @appcypher in https://github.com/superradcompany/microsandbox/pull/753
* feat(cli): make --script ergonomic and add --script-raw by @appcypher in https://github.com/superradcompany/microsandbox/pull/750
* chore(ci): add python sdk integration ci by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/760
* Treat dot paths as local inputs by @qaijuang in https://github.com/superradcompany/microsandbox/pull/764
* fix(sandbox): flush root-fs writes on stop by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/746
* fix(net): install tls ca certs into trust directories by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/767
* feat(cli): change start cmd to take variadic args by @cedws in https://github.com/superradcompany/microsandbox/pull/733
* feat(passthroughfs): add per-mount stat-virt and host-perms policies by @appcypher in https://github.com/superradcompany/microsandbox/pull/751
* feat(sdk): add cross-SDK raw agent client by @appcypher in https://github.com/superradcompany/microsandbox/pull/761
* Refresh cached TLS intercept certs before expiry by @venbrinoDev in https://github.com/superradcompany/microsandbox/pull/763
* feat: rotation-aware log streaming engine + sdk bindings by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/755
* feat(agent-relay): raise max clients to 128 and wire id_range_step by @appcypher in https://github.com/superradcompany/microsandbox/pull/765
* fix(ci): shorten node sdk msb home paths by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/772
* Passthrough secret violation type by @wellsbunk5 in https://github.com/superradcompany/microsandbox/pull/771
* docs(sdk/go): add cpu/memory defaults to docstrings by @cedws in https://github.com/superradcompany/microsandbox/pull/773
* refactor(cli)!: consolidate network policy flags around --net-default and *.foo.com suffix by @appcypher in https://github.com/superradcompany/microsandbox/pull/774
* feat(python-sdk)!: simplify sandbox execution API by @appcypher in https://github.com/superradcompany/microsandbox/pull/776
* feat(ssh): add sandbox SSH client and server support by @appcypher in https://github.com/superradcompany/microsandbox/pull/779
* feat(sandbox): add configurable OCI upper size by @appcypher in https://github.com/superradcompany/microsandbox/pull/781
* Fix published-port stalls by waking smoltcp after host accepts by @billroy in https://github.com/superradcompany/microsandbox/pull/780
* chore(releases): auto-mark rc tags as prereleases by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/786
* fix(net): harden SNI deny-domain policy evaluation by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/782
* fix(network): preserve encoded request bodies during secret substitution by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/768
* fix(python): harden exec options and integration coverage by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/789
* fix(runtime): re-enable split irqchip on x86 Linux by @appcypher in https://github.com/superradcompany/microsandbox/pull/796
* docs(contributing): add agent contribution guide by @appcypher in https://github.com/superradcompany/microsandbox/pull/798
* refactor(image)!: restructure image crate modules by @appcypher in https://github.com/superradcompany/microsandbox/pull/795
* chore(release): bump microsandbox to 0.5.0 by @appcypher in https://github.com/superradcompany/microsandbox/pull/785

## New Contributors
* @khrees made their first contribution in https://github.com/superradcompany/microsandbox/pull/587
* @jachris made their first contribution in https://github.com/superradcompany/microsandbox/pull/724
* @cedws made their first contribution in https://github.com/superradcompany/microsandbox/pull/740
* @venbrinoDev made their first contribution in https://github.com/superradcompany/microsandbox/pull/763
* @billroy made their first contribution in https://github.com/superradcompany/microsandbox/pull/780

**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.4.6...v0.5.0