npm / microsandbox
microsandbox
What changed in microsandbox 0.7, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
1 breaking3 security12 new APIs and options1 performance1 behavior and defaults20 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initmicrosandbox 0.738 changes
Breaking changes 1
Disk restores that would silently drop host mounts are refused.
Security 3
Truncated HPACK blocks are rejected before decoding.
Applies exec limits before switching users.
Prevents secret leaks and corrects adapter behavior.
New APIs and options 12
An opt-in helper provides application certificate trust.
Filesystem state limits can be configured for snapshots.
Secret substitution can be scoped to specific header fields.
The msb restore command accepts --mount-disk.
Detached jobs can be owned by the runtime.
Adds cache cleanup functionality.
Adds controls for command tree depth and display.
Adds DAX support to the filesystem.
Adds an option to disable guest clock synchronization.
Adds support for an HTTP CONNECT outbound proxy.
Makes the filesystem init binary optional.
Adds storage usage reports.
Performance 1
Reduces host CPU usage for paused sandboxes.
Behavior and default changes 1
Published ports support ranges.
Fixes and other changes 20
Cached paths are updated after Windows directory renames.
Disk-only restores from snapshot archives are allowed.
Memory limits and usage now follow live memory resizes.
The relay keeps running if a local client's arena closes mid-route.
SQLite locks are preserved during Linux identity checks.
Storage cleanup and snapshot recovery are repaired.
Windows cleanup and usage accounting are completed.
Keeps earlier DNS answers bound to a domain.
Surfaces guest initialization failures.
Accepts reordered image metadata when importing an archive.
Regenerates the image VMDK descriptor when importing an archive.
Provides a utoipa schema for nat64_prefixes.
Publishes ports without host routes.
Includes the peer's message in rejected operation errors.
Reads restored resource targets while the sandbox is still starting.
Allows removing a sandbox that never started.
Supports secret policy modification options in Python.
Creates SFTP files and directories as the session user.
Reports symlinked bind mount roots at create time.
Drains TCP responses before closing.