v0.5.10

superradcompany/microsandboxv0.5.10Jun 24, 2026by github-actions[bot]

AI Summary

This release emphasizes security hardening and performance optimization. It introduces guest-write quotas for filesystem mounts, improves documentation regarding the security model, and refines runtime behaviors to prevent stale heartbeat kills and restore API semantics.

Key Highlights

  • Guest-write quotas for virtiofs mounts
  • Documentation updates for the security model
  • CLI exec --stream for bidirectional streaming
  • Fix for stale heartbeat staleness kill
  • Refactoring of bulky config management

New Features

  • Guest-write quotas for virtiofs mounts
  • exec --stream CLI feature
  • Config fd refactor

Full Release Notes

## What's Changed
* chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/988
* docs(sdk): redesign rust sandbox reference page by @appcypher in https://github.com/superradcompany/microsandbox/pull/1005
* feat(sandbox): move bulky config onto an inherited config fd by @appcypher in https://github.com/superradcompany/microsandbox/pull/1006
* docs(sdk): collapse method examples and refine reference tables by @appcypher in https://github.com/superradcompany/microsandbox/pull/1009
* fix(runtime): drop always-on heartbeat staleness kill by @appcypher in https://github.com/superradcompany/microsandbox/pull/1011
* ci: cap cargo jobs and bound timeouts on self-hosted runners by @appcypher in https://github.com/superradcompany/microsandbox/pull/1012
* feat(cli): add `exec --stream` for non-PTY bidirectional streaming exec by @dijdzv in https://github.com/superradcompany/microsandbox/pull/922
* fix(deps): exact-pin internal crate versions by @appcypher in https://github.com/superradcompany/microsandbox/pull/1008
* chore(release): bump microsandbox to 0.5.9 by @appcypher in https://github.com/superradcompany/microsandbox/pull/1013
* docs(security): add system-wide security model section by @appcypher in https://github.com/superradcompany/microsandbox/pull/1016
* feat(filesystem): add guest-write quotas for virtiofs mounts by @appcypher in https://github.com/superradcompany/microsandbox/pull/1020
* docs(nav): make security its own top-level tab by @appcypher in https://github.com/superradcompany/microsandbox/pull/1023
* fix(sdk): restore live sandbox lifecycle APIs by @appcypher in https://github.com/superradcompany/microsandbox/pull/1024
* fix(runtime): mount named kind=disk volume as virtio-blk by @zhuanyongxigua in https://github.com/superradcompany/microsandbox/pull/1028
* fix(sdk): restore named volume mount semantics by @appcypher in https://github.com/superradcompany/microsandbox/pull/1030
* docs(agents): update change safety guidance by @appcypher in https://github.com/superradcompany/microsandbox/pull/1032
* chore(release): bump microsandbox to 0.5.10 by @appcypher in https://github.com/superradcompany/microsandbox/pull/1031

## New Contributors
* @zhuanyongxigua made their first contribution in https://github.com/superradcompany/microsandbox/pull/1028

**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.5.8...v0.5.10