# What changed in openshell

> 46 changes in openshell 0.1 from its official release notes, upgrade guides and advisories: 5 breaking, 2 security, 21 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/pypi/openshell/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## openshell 0.1

### Breaking changes

- SSH connection sharing is disabled for sandbox sessions. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Helm gateway configuration is migrated to gatewayConfig. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Protocol upgrades are refused on JSON-RPC, MCP, and GraphQL endpoints. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Enabling uninspected credentials requires a full binary scope. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Uploads stop when Git filtering fails or selects no files. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)

### Security

- Cached registry images are bound to verified manifest digests. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Preserves external TLS for SSH forwarding. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)

### New APIs and options

- The gateway adds gRPC server reflection. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Adds operator-only retrieval of provider credentials. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Adds CLI support for creating and filtering provider labels. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- The Python SDK exposes sandbox status conditions. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Adds createdAtMs to the TypeScript SandboxRef. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Providers now support stable credential placeholders. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Adds watchLogs with loss-aware resume for the TypeScript SDK. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- The service supports passing through bearer authorization. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Helm can make cluster-scoped RBAC optional. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Docker supports corporate proxy CA bundles. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Gateway capacity metrics are available, with optional HPA support. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Gateway OCSF events can be written to JSONL, with Helm configuration for the output. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- A main restart policy is available for sandboxes. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Providers can add multiple tokens to one request. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- An Oracle Cloud Infrastructure Generative AI provider profile is available. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Sandbox supervisors can export OTLP traces. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- MCP request inspection can use protocol profiles selected by Tower. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- The gateway supports runtime image environment overrides. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Providers can serve sandbox config files on demand. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Detach sandbox sessions with Ctrl-D. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Helm adds values for the sandbox UID and GID. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)

### Behavior and default changes

- The gateway runs as a user service by default when installed as a snap. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Provider environment revisions are stabilized. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Agent output is written to the container log. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)

### Fixes and other changes

- Broker-owned listening sockets are released. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Credential aliases are resolved after revision eviction. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Enforces consistent HTTP framing. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Kubernetes requests time out per request rather than per idle connection. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- The Python client is closed when creating a Sandbox entry fails. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- The TypeScript SDK preserves RPC errors for out-of-range responses. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- The sandbox runtime image is refreshed on start in Kubernetes. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Sandbox uploads now apply backpressure. (0.1.4) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.4)
- Bearer scheme matching is case-insensitive. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- The exec command accepts the sandbox name before --. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Helm GatewayClass overrides are improved. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Podman honors OCI image working directories. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Sandbox host identities are persisted. (0.1.3) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.3)
- Migration overwrites the generated gateway config. (0.1.2) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.2)
- Workload bytes read with a mediated CONNECT header are preserved. (0.1.2) — [release notes](https://github.com/NVIDIA/OpenShell/releases/tag/v0.1.2)