v0.5.10

What's Changed

• chore(deps): Bump the "dependencies" group with 2 updates across multiple ecosystems by @dependabot[bot] in #988
• docs(sdk): redesign rust sandbox reference page by @appcypher in #1005
• feat(sandbox): move bulky config onto an inherited config fd by @appcypher in #1006
• docs(sdk): collapse method examples and refine reference tables by @appcypher in #1009
• fix(runtime): drop always-on heartbeat staleness kill by @appcypher in #1011
• ci: cap cargo jobs and bound timeouts on self-hosted runners by @appcypher in #1012
• feat(cli): add exec --stream for non-PTY bidirectional streaming exec by @dijdzv in #922
• fix(deps): exact-pin internal crate versions by @appcypher in #1008
• chore(release): bump microsandbox to 0.5.9 by @appcypher in #1013
• docs(security): add system-wide security model section by @appcypher in #1016
• feat(filesystem): add guest-write quotas for virtiofs mounts by @appcypher in #1020
• docs(nav): make security its own top-level tab by @appcypher in #1023
• fix(sdk): restore live sandbox lifecycle APIs by @appcypher in #1024
• fix(runtime): mount named kind=disk volume as virtio-blk by @zhuanyongxigua in #1028
• fix(sdk): restore named volume mount semantics by @appcypher in #1030
• docs(agents): update change safety guidance by @appcypher in #1032
• chore(release): bump microsandbox to 0.5.10 by @appcypher in #1031

New Contributors

• @zhuanyongxigua made their first contribution in #1028

Full Changelog: v0.5.8...v0.5.10