v0.17.1
Highlights
Automatic container image pruning — The housekeeping thread now prunes dangling and stale airut-prefixed container images each GC cycle, preventing disk usage from growing unbounded on long-running servers. The initial GC delay was also reduced from 24 hours to 60 seconds so servers that restart frequently no longer skip garbage collection entirely. Controlled by the execution.image_prune config option (default true). (#315)
Bug Fixes
- Stale network blocking retry — When a container execution failed mid-run, the orphaned subprocess kept the sandbox network connected, causing the next execution's
start_proxy()to fail. Now the subprocess is killed on error and stale resources are force-cleaned by name before proxy startup. (#314) - Resource leak warnings — Fixed IMAP client and test server SSL socket leaks that produced
ResourceWarningon disconnect. AllResourceWarnings are now treated as test errors. (#313) - pyasn1 security fix — Pinned
pyasn1>=0.6.3in the proxy lockfile to address GHSA-jr27-m4p2-rc6r. (#316) - Flaky message-ID test — Increased nonce from 2 bytes to 4 bytes in
generate_message_id, eliminating birthday-problem collisions in tests. (#312) - Documentation — Replaced version-specific numbers with generic placeholders in sandbox-action workflow docs. (#311)