pypi / boxlite

boxlite

What changed in boxlite 0.9 to 0.10, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.

6 breaking5 security18 new APIs and options5 behavior and defaults4 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

boxlite 0.1036 changes

Box and proxy APIs now enforce API-key permissions.
0.10.7release notes
A box tunnel now opens its connection on connect(), rather than on tunnel().
0.10.7release notes
Binds to 127.0.0.1 by default and refuses non-loopback addresses unless an API key is set with --api-key or BOXLITE_SERVE_API_KEY.
0.10.6release notes
Removes the include_parent option from copy operations.
0.10.6release notes
The dashboard command palette and its search are removed.
0.10.5release notes
Inbound access now defaults to disabled across SDKs and servers.
0.10.5release notes

Volume attach operations are now authorized.
0.10.7release notes
Persisted MITM CAs are renewed before expiry.
0.10.5release notes
Trust bundle bytes are preserved, and unusable CAs are rejected.
0.10.5release notes

Image handling now exposes explicit aliases and nested registries.
0.10.7release notes
The API now makes the image catalog visible and manageable.
0.10.7release notes
The dashboard can now pin and unpin an image's tags.
0.10.7release notes
Private images can now be pulled using stored registry logins.
0.10.7release notes
The dashboard now guides users through private registry credentials per registry.
0.10.7release notes
The SDK now manages the image catalog through rt.images.
0.10.7release notes
The SDK now manages registry logins through rt.registries.
0.10.7release notes
Boxes can now be started from any public image.
0.10.7release notes
Adds mounts to BoxOptions, but the option is refused until a runtime takes it.
0.10.6release notes
Exposes checked MSR configuration.
0.10.6release notes
Exposes host CPUID configuration.
0.10.6release notes
Exposes configuration for x86 entry registers.
0.10.6release notes
An existing box's inbound access can be changed over REST.
0.10.5release notes
KVM VMs can be created, with guest memory registered, vCPUs run, and device I/O completed.
0.10.5release notes
A local Rust SSH control API is added.
0.10.5release notes
A MountSpec type is added for runtime mounts.
0.10.5release notes
A structured business event logger is added.
0.10.5release notes
User login business events are recorded.
0.10.5release notes

The dashboard now connects boxes to the images they start from.
0.10.7release notes
Image tags can now be moved, and the API records where they pointed.
0.10.7release notes
Private registries are now a tab of Images in the dashboard.
0.10.7release notes
Copy operations accept Docker's SRC/. spelling for copying a directory's contents.
0.10.6release notes
Public tunnel access can be persisted by box port.
0.10.5release notes

Overriding an entrypoint now clears the image CMD.
0.10.7release notes
Visiting a stopped box's preview URL wakes the box instead of returning a bare 502.
0.10.7release notes
Reports a missing main command as InvalidArgument.
0.10.6release notes
Allocates a PTY when the terminal type is empty.
0.10.6release notes

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host
0.9.0security advisory
BoxLite: Permission Bypass Allows Modification of Read-Only Files
0.9.0security advisory