v0.5.0

What's Changed

• chore: bump version to 0.4.3.dev0 (post-release) by @cursor[bot] in #1133
• Restore RFC 008 manifest contracts by @burtenshaw in #1110
• Restore RFC 008 validation contracts by @burtenshaw in #1111
• Restore openenv validate skeleton by @burtenshaw in #1112
• RFC 011: ARD-backed catalog discovery for portable environments by @thegovind in #1093
• Adding ThinkingBox to OpenEnv by @TuhinKundu in #1092
• fix: reconnect when the WebSocket was closed by the far end by @sergiopaniego in #1103
• fix(thinkingbox): isolate evaluator failures by @cursor[bot] in #1141
• chore(deps): aggregate openenv-core Dependabot updates by @cursor[bot] in #1130
• chore(deps): apply focused environment security updates by @cursor[bot] in #1136
• fix(cli): align scaffolds and docs with RFC 008 validation by @cursor[bot] in #1137
• fix(client): do not reconnect between WebSocket request and response by @cursor[bot] in #1140
• docs: add Nebius as an OpenEnv supporter by @amrrs in #1128
• chore(deps): bump tornado from 6.5.6 to 6.5.8 in /envs/coding_env by @dependabot[bot] in #1114
• fix(pi): expose pre-baked Node on sandbox PATH by @cursor[bot] in #1142
• fix: textarena nltk compatibility by @dependabot[bot] in #1116
• fix(envs): read reward and done from the step envelope in typed clients by @sergiopaniego in #1017
• feat: versioned metadata-only environment discovery (RFC 011) by @thegovind in #1138
• fix(ci): harden GitHub Actions workflows (#1138) by @hf-security-analysis[bot] in #1161
• fix(client): drop socket on receive timeout (cancel-safe close) by @cursor[bot] in #1162
• Extend check-env-docs for sidebar/catalog gaps (from #1024) by @cursor[bot] in #1165
• docs: Environment Builder client uses .sync() handle (from #1129) by @cursor[bot] in #1166
• fix(envs): declare importable manifest app paths (from #1068) by @cursor[bot] in #1164
• fix(hooks): stop lint.sh from mutating the tree (from #1070) by @cursor[bot] in #1163
• fix(discovery): per-user cache with trusted open/atomic save (from #1011) by @cursor[bot] in #1167
• fix(collect): reject corrupt resume files (from #1154) by @cursor[bot] in #1171
• fix(mcp): production JSON-RPC routing with sync-safe teardown (from #1169) by @cursor[bot] in #1175
• fix: route MCP production mode through JSON-RPC by @mugenkyou in #1169
• tbench2 env server: enable idle-session reaper to reclaim leaked slots by @Shi-Dong in #1000
• Fix Gradio Playground MCP argument parsing by @lakshayxi in #1081
• fix: clear 0.4.3 blockers with cancel-safe teardown by @cursor[bot] in #1172
• revert(tbench2): disable unsafe idle-session reaper by @cursor[bot] in #1185
• Harbor integration: serve Harbor task datasets through OpenEnv as trainable environments by @adithya-s-k in #1036
• chore(deps): aggregate envs Dependabot updates by @cursor[bot] in #1173
• fix(finqa_env): prevent path traversal via agent-supplied company/table names by @OfficialAbhinavSingh in #1008
• fix(core): serve the environment's own State subclass on /schema and /state by @k21993 in #1174
• chore(deps): aggregate envs Dependabot updates by @cursor[bot] in #1192
• fix(harbor): require an admin key on the capture proxy control plane by @burtenshaw in #1193
• fix(validate): respect output flags for runtime validation by @mugenkyou in #1187
• fix(harbor): refuse non-loopback capture CLI without an admin key by @cursor[bot] in #1194
• Release OpenEnv 0.5.0 by @cursor[bot] in #1190

New Contributors

• @TuhinKundu made their first contribution in #1092
• @amrrs made their first contribution in #1128
• @mugenkyou made their first contribution in #1169
• @Shi-Dong made their first contribution in #1000
• @lakshayxi made their first contribution in #1081
• @k21993 made their first contribution in #1174

Full Changelog: v0.4.2...v0.5.0