Skip to main content
September 24, 2026 · GitHub release · All changes

​
New features

Enforce team settings. A protected managed.json takes priority over user configuration, CLI flags, and SDK options across local and cloud backends. Unix installs reject unsafe file or parent-directory permissions. Managed deployment Simpler snapshot commands. Capture, restore, export, and import now fit under msb snap:
Older forms still work. You can also name snapshots with --name and filter with msb snap ls --group GROUP. Snapshots Wait in scripts. msb wait worker --timeout 5m --format json waits for a sandbox to stop or crash. It does not stop the sandbox or confirm workload success. Command reference

​
Before upgrading

Moving from v0.6? Follow the v0.7 migration guide, targeting v0.7.3 or a later compatible patch release.
  • HTTPS hostname rules need inspection. Strict hostname checking is now on by default. HTTPS allowed only by hostname needs TLS interception or is blocked. IP, CIDR, group, and default allow rules are unaffected. Opt out with --net-strict=false or network.strict: false; Go replaces Strict with DisableStrict. Hostname rules
  • Rust configuration APIs changed. LocalBackend::lazy() and LocalBackendBuilder::build_lazy() return Result. SdkConfig and load_sdk_config() are removed. Migration details
  • Check shared database access. Stop incompatible SDK processes sharing MSB_HOME before upgrading. Running VMs are handled separately. Cloud services need a separate update for older configuration formats.

​
Fixes

  • Preserved v0.6 secret passthrough settings and support for older snapshots and custom filenames. Unsupported settings and incompatible downgrades fail before changes are made.
  • Secret updates enable TLS interception when needed and, by default, report required restarts before saving.
  • Reduced delays for server-first protocols. Binary traffic avoids HTTP secret substitution while retaining blocked-placeholder checks.
  • Fixed firmware lookup through macOS command links, cleanup of unresponsive guests, musl detection, and Linux network builds.

​
New guides

Added corporate networking, offline deployment, and dedicated CLI references for snapshots, registries, and management.