chore(deps): bump @cloudflare/sandbox from 0.7.21 to 0.10.3

[dependabot]

Bumps @cloudflare/sandbox from 0.7.21 to 0.10.3.

Release notes

Sourced from @​cloudflare/sandbox's releases.

@​cloudflare/sandbox@​0.10.3

Patch Changes

• #715 453b577 Thanks @​aron-cf! - Upgrade capnweb to 0.8.0.

• #714 0ec4f42 Thanks @​aron-cf! - Bundle cloudflared into the musl/Alpine images.

• #706 ae5f9a1 Thanks @​scuffi! - Add sessionless execution mode with a configurable default-session policy.

  Set enableDefaultSession: false in SandboxOptions to run implicit top-level operations without a persistent shell — each command gets a fresh process with no shared state. The option is scoped to the sandbox object returned by getSandbox(...); explicit per-call session IDs continue to target that session.

@​cloudflare/sandbox@​0.10.2

Patch Changes

• #695 c6bf7dc Thanks @​aron-cf! - Add sandbox.tunnels namespace with quick-tunnel support. Call sandbox.tunnels.get(port) to obtain a https://<words>.trycloudflare.com URL that proxies to localhost:<port> inside the sandbox. The call is idempotent: repeated calls for the same port return the same record from per-sandbox Durable Object storage. No Cloudflare account or DNS setup required.

  const tunnel = await sandbox.tunnels.get(8080);
  console.log(tunnel.url);
  // → https://random-words-here.trycloudflare.com
  const same = await sandbox.tunnels.get(8080);
  console.log(same.url === tunnel.url); // true
  await sandbox.tunnels.list();
  await sandbox.tunnels.destroy(8080); // or destroy(tunnel)

• #691 3ca24fc Thanks @​scuffi! - Add credential-less R2 bucket mounting via egress interception

• #703 68c8b71 Thanks @​aron-cf! - Fix inconsistencies in the sandbox.desktop interface between RPC and HTTP transports

@​cloudflare/sandbox@​0.10.1

Patch Changes

• #683 718d4e7 Thanks @​aron-cf! - readFile now accepts encoding: 'none' on the rpc transport, returning a result whose content is a ReadableStream<Uint8Array> of raw binary data with no base64 encoding or buffering. Mirrors the existing writeFile support for ReadableStream input.

  // Stream a binary file without buffering or base64 overhead (rpc transport only)
  const { content, size, mimeType } = await sandbox.readFile(
    '/workspace/image.png',
    { encoding: 'none' }
  );

@​cloudflare/sandbox@​0.10.0

Minor Changes

• #659 7c09e87 Thanks @​mvanhorn! - Update the default sandbox image runtime from Node.js 20 to Node.js 24 so published images use the current Node.js LTS release. If your workload needs a different Node.js version, build a custom image with the NODE_VERSION Docker build argument.

... (truncated)

Commits

• 537c037 Update vite-sandbox to use new tunnels API (#712)
• f78d723 Version Packages (#724)
• ae5f9a1 Implement sessionless execution mode (#706)
• a218133 docs: clarify Sandbox workspace boundaries (#723)
• 0ec4f42 Bundle cloudflared with the musl/alpine build (#714)
• 453b577 Update capnweb to 0.8.0 (#715)
• c493a89 Bump qs from 6.15.1 to 6.15.2 (#717)
• 5f1bcb0 Bump uuid in /bridge/examples/workspace-chat/frontend (#719)
• 7759a04 Clarify wording on prefix field on RemoteMountBucketOptions (#716)
• 3b58a22 Version Packages (#699)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)