v0.5.3

superradcompany/microsandboxv0.5.3May 30, 2026by github-actions[bot]

AI Summary

Release v0.5.3 focuses on network and security improvements including DNS UDP response delivery fixes, TLS intercept hardening, and secret handling enhancements. CLI additions include copy and rootfs patch commands plus env-backed secret shorthand.

Key Highlights

  • Fixed DNS UDP response delivery to guests
  • Fixed TLS intercept upstream write flushing
  • Added CLI copy and rootfs patch commands
  • Added env-backed secret shorthand
  • Fixed bind mount ownership mapping for guest users

New Features

  • CLI copy and rootfs patch commands
  • Env-backed secret shorthand
  • DNS UDP response delivery fix
  • TLS intercept hardening
  • Bind mount ownership mapping for guest users
  • Sandbox name byte limit enforcement
  • Guest clock sync with host

Full Release Notes

## What's Changed
* chore: refresh npm lockfile after v0.5.2 by @github-actions[bot] in https://github.com/superradcompany/microsandbox/pull/828
* feat(sandbox): enforce sandbox name byte limit by @appcypher in https://github.com/superradcompany/microsandbox/pull/830
* fix(runtime): sync guest clock with host's by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/833
* fix(network): flush tls intercept upstream writes by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/834
* feat(mounts): harden volume mount options by @appcypher in https://github.com/superradcompany/microsandbox/pull/832
* Fix DNS UDP response delivery to guests by @enricoschaaf in https://github.com/superradcompany/microsandbox/pull/824
* fix(secrets): handle body-continuation chunks across rustls reads by @jachris in https://github.com/superradcompany/microsandbox/pull/784
* feat(cli): add copy and rootfs patch commands by @appcypher in https://github.com/superradcompany/microsandbox/pull/838
* fix(sdk): refresh stale docs and node typings by @appcypher in https://github.com/superradcompany/microsandbox/pull/840
* fix(network): harden secret handling and UDP ports by @appcypher in https://github.com/superradcompany/microsandbox/pull/836
* fix(filesystem): map bind mount ownership for guest users by @appcypher in https://github.com/superradcompany/microsandbox/pull/839
* feat(cli): add env-backed secret shorthand by @appcypher in https://github.com/superradcompany/microsandbox/pull/842
* chore(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 in the cargo group across 1 directory by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/843
* docs: restore changelog and stop releases from dropping mintlify docs by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/848
* docs: reorganize navigation (references tab + consolidate ssh) by @toksdotdev in https://github.com/superradcompany/microsandbox/pull/849
* fix(agentd): set HOME for implicit root execs by @appcypher in https://github.com/superradcompany/microsandbox/pull/846
* chore(deps): bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/superradcompany/microsandbox/pull/847
* chore(release): bump microsandbox to 0.5.3 by @appcypher in https://github.com/superradcompany/microsandbox/pull/835


**Full Changelog**: https://github.com/superradcompany/microsandbox/compare/v0.5.2...v0.5.3