OpenShell v0.0.102

OpenShell v0.0.102

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.102 sh

What's Changed

• fix(e2e): separate Podman Machine loopback listeners by @matthewgrossman in #2622
• fix(policy): prevent implicit authorization inheritance by @shiju-nv in #2499
• fix(gateway-interceptors): apply tls-native-roots for HTTPS interceptor endpoints by @sauagarwa in #2666

Full Changelog: v0.0.101...v0.0.102

OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.101

OpenShell v0.0.101

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.101 sh

What's Changed

• build(bazel): add credential driver targets by @SDAChess in #2649
• feat(bazel): build vm driver and pull runtime from Github by @SDAChess in #2650

Full Changelog: v0.0.100...v0.0.101

OpenShell v0.0.99

OpenShell v0.0.99

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.99 sh

What's Changed

• test: disable tests flaky under parallel stress by @SDAChess in #2611
• feat(build): add system CA root mode by @politerealism in #2324
• test(server): fix race condition in tracing tests by @krishicks in #2604
• docs: add experimental Bazel build commands by @rhuss in #2600
• feat(sandbox): honor OCI image working directories by @matthewgrossman in #2530
• docs(cli): recommend providers for secrets by @krishicks in #2603
• perf(net): set TCP_NODELAY on latency-sensitive TCP hops by @purp in #2220

Full Changelog: v0.0.98...v0.0.99

OpenShell v0.0.98

OpenShell v0.0.98

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.98 sh

What's Changed

• test(podman): gate gateway discovery test on Linux by @krishicks in #2580
• feat(bazel): add rustfmt checks to tests by @SDAChess in #2599
• feat(vm): export driver traces over OTLP by @krishicks in #2564

Full Changelog: v0.0.97...v0.0.98

OpenShell v0.0.97

OpenShell v0.0.97

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.97 sh

What's Changed

• refactor(otel): share OTLP trace provider setup by @krishicks in #2567
• feat(compute): negotiate gateway callback listeners by @elezar in #2492
• fix(server): isolate otel tracing test exporters by @krishicks in #2579
• chore(deps): bump actions/attest from 4.2.0 to 4.2.1 by @dependabot[bot] in #2572
• refactor(network): consolidate proxy egress pipeline by @johntmyers in #2373
• fix(podman): combine sandbox stop and removal by @pimlock in #2570
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #2573
• chore(build): bump sccache to 0.16.0 by @matthewgrossman in #2581
• test(server): stabilize watch span cancellation test by @pimlock in #2582
• fix(supervisor): quote nft log prefix in bypass rules by @gracesmith6504 in #2555
• feat(build): prototype Bazel build system by @SDAChess in #2414
• build(bazel): add OpenTelemetry crate targets by @SDAChess in #2595

Full Changelog: v0.0.96...v0.0.97

OpenShell v0.0.96

OpenShell v0.0.96

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.96 sh

What's Changed

• fix(server): bind gateway listeners before sandbox resume by @elezar in #2495
• fix(proxy): retry with backoff on transient accept errors instead of exiting by @politerealism in #2369
• fix(tasks): scope pre-commit to lint checks by @drew in #2503
• fix(cli): write exec stderr events to stderr in interactive mode by @andrewwhitecdw in #2447
• fix(cli): eliminate flaky subprocess integration tests by @rhuss in #2504
• refactor(cli): extract gateway commands into commands/gateway module by @varshaprasad96 in #2506
• fix(podman): tolerate shutdown transport closes by @elezar in #2498
• fix(sandbox): gate Linux-only ordering import by @elezar in #2513
• fix(server): stabilize flaky delete telemetry unit test by @derekwaynecarr in #2521
• fix(e2e): bound podman stop timeout in tests by @elezar in #2516
• ci: add focused macOS Rust lint by @elezar in #2515
• feat(examples): add supervisor middleware content guard by @pimlock in #2169
• feat(k8s): support configuring workspace PVC storageClassName by @loveRhythm1990 in #2463
• feat(sandbox): use policy-first OCI image identity by @matthewgrossman in #2509
• fix(cli): avoid panic on multi-byte UTF-8 in --since duration by @andrewwhitecdw in #2446
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 by @dependabot[bot] in #2537
• refactor(compute): make sandbox readiness gateway-owned across all drivers by @elezar in #2153
• chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #2536
• fix(cli): isolate subprocess tests from host OPENSHELL_ env vars by @rhuss in #2523
• ci(e2e): probe VM gateway readiness by @elezar in #2544
• fix(cli): bracket IPv6 bind literals in SSH forwards by @russellb in #2552
• test(e2e): add reusable QEMU infrastructure for E2E tests by @drew in #2471
• Wire authorization into workspace model by @derekwaynecarr in #2445
• fix(gator): preserve resolved review feedback by @drew in #2533
• test(e2e): add VM-backed E2E suite runner by @drew in #2473
• refactor(server): isolate gateway listener context by @elezar in #2542
• fix(server): notify watchers after atomic policy commits by @NaveCohenMonday in #2556
• feat(observability): export gateway traces over OTLP by @krishicks in #2534
• docs: document issue lifecycle labels and roadmap sequencing by @krishicks in #2524
• fix(ci): preserve KVM access across udev restarts by @matthewgrossman in #2566
• fix(deps): update russh, DOMPurify, and gateway base by @alangou in #2575

New Contributors

• @politerealism made their first contribution in #2369
• @NaveCohenMonday made their first contribution in #2556

Full Changelog: v0.0.92...v0.0.96

OpenShell v0.0.92

OpenShell v0.0.92

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.92 sh

What's Changed

• fix: eliminate parallel Rust test flakes by @pimlock in #2434
• feat(cli): add --output json/yaml to sandbox get, status, and sandbox create by @rhuss in #1989
• refactor(tui): default create form state by @elezar in #2458
• feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy by @feloy in #2245
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 by @dependabot[bot] in #2440
• refactor(policy): extract shared L7 endpoint validation by @gracesmith6504 in #2389
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in #2488
• fix(router): strip Anthropic beta fields from Vertex rawPredict body by @zanetworker in #2465
• fix: assorted byte-index slicing safety fixes by @andrewwhitecdw in #2452
• fix: assorted arithmetic and indexing robustness fixes by @andrewwhitecdw in #2451
• fix(policy): avoid panic truncating multi-byte UTF-8 paths for display by @andrewwhitecdw in #2448

New Contributors

• @andrewwhitecdw made their first contribution in #2452

Full Changelog: v0.0.91...v0.0.92

OpenShell v0.0.91

OpenShell v0.0.91

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.91 sh

What's Changed

• fix(examples): add missing workspace fields to governance interceptor by @pavelanni in #2436
• fix(auth): report gateway authentication status by @drew in #2435
• refactor(supervisor): pass agent proposal state explicitly by @elezar in #2421

New Contributors

• @pavelanni made their first contribution in #2436

Full Changelog: v0.0.90...v0.0.91

OpenShell v0.0.90

OpenShell v0.0.90

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.90 sh

What's Changed

• fix(e2e): detect gateway workload for health port-forward by @krishicks in #2400
• feat(tui): add config key support to provider create/update forms by @letv1nnn in #2224
• fix(vm): reduce registry rootfs staging pressure by @pimlock in #2425
• fix(driver-k8s): add label selector to sandbox watch stream and list by @rhuss in #2223
• fix(agents): make baked payload readable by @elezar in #2419
• refactor(cli): extract shared helpers into commands/common module by @varshaprasad96 in #2359
• fix(sandbox): skip read-only mounts during recursive chown of /sandbox by @varshaprasad96 in #2341
• fix(mise): initialize Python dependencies in fresh worktrees by @matthewgrossman in #2429
• fix(policy): keep internal allowed IP proposals pending by @alangou in #2416

New Contributors

• @letv1nnn made their first contribution in #2224

Full Changelog: v0.0.89...v0.0.90