0.16.7 v1.0.2

high risk

vllm-project/vllmSep 10, 2026 → Sep 11, 20260 days between releases

What's New

Upgrading from Ruff linting to Agent Sandbox introduces breaking API changes and namespace migrations

Breaking Changes

  • Sandbox Router Authorizer interface signature changed to accept `authz.AuthorizationTarget` struct.
  • Sandbox Router namespace moved from `default` to `agent-sandbox-system`.

New Features

  • Ed25519 scoped-token v2 verification with multi-key rotation support.
  • Direct in-cluster connectivity options for the Go SDK.
  • Python SDK connection resiliency improvements.
  • Warm pool adoption and OpenHands fleet integration.
  • Controller observability metrics via controller-runtime v0.25.0.

Improvements

  • Performance improvements with parser name lookups.
  • Speed up inherited configuration resolution.
  • Controller observability metrics.

Bug Fixes

  • Fixed `ImportCycleError` on Python 3.15.
  • Fixed `ISC003` unsafe docstring marking.
  • Fixed `TID254` multi-member imports.
  • Corrected `D211` and `D203` rule conflict diagnostics.

Upgrade Notes

Update Go `Authorizer` implementations to inspect `authz.AuthorizationTarget` fields. Update deployment manifests and scripts to use the new `agent-sandbox-system` namespace.

The Two Releases

0.16.7

0.16.7

Sep 10, 2026· 1 month ago

New linting rules, bug fixes, and performance improvements for the Ruff linter.

Full release notes
v1.0.2

v1.0.2

Sep 11, 2026· 1 month ago

This release introduces significant enhancements to the sandbox router, SDKs, and reinforcement learning (RL) framework. Key updates include Ed25519-based scoped-token v2 verification, direct in-cluster connectivity options for the Go SDK, improved connection resiliency for the Python SDK, warm pool adoption and OpenHands integration, and upgraded controller observability metrics.

Full release notes