# What changed in boxlite

> 38 changes in boxlite 0.9 to 0.10 from its official release notes, upgrade guides and advisories: 6 breaking, 5 security, 18 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/pypi/boxlite/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## boxlite 0.10

### Breaking changes

- Box and proxy APIs now enforce API-key permissions. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- A box tunnel now opens its connection on connect(), rather than on tunnel(). (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Binds to 127.0.0.1 by default and refuses non-loopback addresses unless an API key is set with --api-key or BOXLITE_SERVE_API_KEY. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Removes the include_parent option from copy operations. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- The dashboard command palette and its search are removed. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- Inbound access now defaults to disabled across SDKs and servers. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)

### Security

- Volume attach operations are now authorized. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Persisted MITM CAs are renewed before expiry. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- Trust bundle bytes are preserved, and unusable CAs are rejected. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)

### New APIs and options

- Image handling now exposes explicit aliases and nested registries. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- The API now makes the image catalog visible and manageable. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- The dashboard can now pin and unpin an image's tags. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Private images can now be pulled using stored registry logins. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- The dashboard now guides users through private registry credentials per registry. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- The SDK now manages the image catalog through rt.images. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- The SDK now manages registry logins through rt.registries. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Boxes can now be started from any public image. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Adds mounts to BoxOptions, but the option is refused until a runtime takes it. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Exposes checked MSR configuration. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Exposes host CPUID configuration. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Exposes configuration for x86 entry registers. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- An existing box's inbound access can be changed over REST. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- KVM VMs can be created, with guest memory registered, vCPUs run, and device I/O completed. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- A local Rust SSH control API is added. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- A MountSpec type is added for runtime mounts. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- A structured business event logger is added. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)
- User login business events are recorded. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)

### Behavior and default changes

- The dashboard now connects boxes to the images they start from. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Image tags can now be moved, and the API records where they pointed. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Private registries are now a tab of Images in the dashboard. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Copy operations accept Docker's SRC/. spelling for copying a directory's contents. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Public tunnel access can be persisted by box port. (0.10.5) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.5)

### Fixes and other changes

- Overriding an entrypoint now clears the image CMD. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Visiting a stopped box's preview URL wakes the box instead of returning a bare 502. (0.10.7) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.7)
- Reports a missing main command as InvalidArgument. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)
- Allocates a PTY when the terminal type is empty. (0.10.6) — [release notes](https://github.com/boxlite-ai/boxlite/releases/tag/v0.10.6)

## boxlite 0.9

### Security

- Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host (0.9.0) — [security advisory](https://github.com/advisories/GHSA-F396-4RP4-7V2J)
- BoxLite: Permission Bypass Allows Modification of Read-Only Files (0.9.0) — [security advisory](https://github.com/advisories/GHSA-G6WW-W5J2-R7X3)