v0.23.0

v0.23.0 (2026-05-08)

This release is published under the Apache-2.0 License.

Documentation

• Clarify mounted_files are read-only at runtime (d0b6895)

Update docstrings across Sandbox.run(), Session.sandbox(), and @session.function() to document that mounted files are read-only and suggest using write_file() for writable files.

https://claude.ai/code/session_01BrtogWK3Y6KWdcLNsKxxJV

Features

• Remove pickle serialization from remote functions (12056f3)

BREAKING CHANGE: Serialization, FunctionSerializationError, and the serialization= keyword argument on Session.function() and RemoteFunction are removed. JSON is the only serialization mode for remote functions; arguments, closures, captured globals, and return values must be JSON-serializable.

Breaking Changes

• serialization, FunctionSerializationError, and the serialization= keyword argument on Session.function() and RemoteFunction are removed. JSON is the only serialization mode for remote functions; arguments, closures, captured globals, and return values must be JSON-serializable.

---

Detailed Changes: v0.22.0...v0.23.0