OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.99

OpenShell v0.0.99

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.99 sh

What's Changed

• test: disable tests flaky under parallel stress by @SDAChess in #2611
• feat(build): add system CA root mode by @politerealism in #2324
• test(server): fix race condition in tracing tests by @krishicks in #2604
• docs: add experimental Bazel build commands by @rhuss in #2600
• feat(sandbox): honor OCI image working directories by @matthewgrossman in #2530
• docs(cli): recommend providers for secrets by @krishicks in #2603
• perf(net): set TCP_NODELAY on latency-sensitive TCP hops by @purp in #2220

Full Changelog: v0.0.98...v0.0.99

OpenShell v0.0.98

OpenShell v0.0.98

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.98 sh

What's Changed

• test(podman): gate gateway discovery test on Linux by @krishicks in #2580
• feat(bazel): add rustfmt checks to tests by @SDAChess in #2599
• feat(vm): export driver traces over OTLP by @krishicks in #2564

Full Changelog: v0.0.97...v0.0.98

OpenShell v0.0.97

OpenShell v0.0.97

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.97 sh

What's Changed

• refactor(otel): share OTLP trace provider setup by @krishicks in #2567
• feat(compute): negotiate gateway callback listeners by @elezar in #2492
• fix(server): isolate otel tracing test exporters by @krishicks in #2579
• chore(deps): bump actions/attest from 4.2.0 to 4.2.1 by @dependabot[bot] in #2572
• refactor(network): consolidate proxy egress pipeline by @johntmyers in #2373
• fix(podman): combine sandbox stop and removal by @pimlock in #2570
• chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #2573
• chore(build): bump sccache to 0.16.0 by @matthewgrossman in #2581
• test(server): stabilize watch span cancellation test by @pimlock in #2582
• fix(supervisor): quote nft log prefix in bypass rules by @gracesmith6504 in #2555
• feat(build): prototype Bazel build system by @SDAChess in #2414
• build(bazel): add OpenTelemetry crate targets by @SDAChess in #2595

Full Changelog: v0.0.96...v0.0.97

OpenShell v0.0.96

OpenShell v0.0.96

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.96 sh

What's Changed

• fix(server): bind gateway listeners before sandbox resume by @elezar in #2495
• fix(proxy): retry with backoff on transient accept errors instead of exiting by @politerealism in #2369
• fix(tasks): scope pre-commit to lint checks by @drew in #2503
• fix(cli): write exec stderr events to stderr in interactive mode by @andrewwhitecdw in #2447
• fix(cli): eliminate flaky subprocess integration tests by @rhuss in #2504
• refactor(cli): extract gateway commands into commands/gateway module by @varshaprasad96 in #2506
• fix(podman): tolerate shutdown transport closes by @elezar in #2498
• fix(sandbox): gate Linux-only ordering import by @elezar in #2513
• fix(server): stabilize flaky delete telemetry unit test by @derekwaynecarr in #2521
• fix(e2e): bound podman stop timeout in tests by @elezar in #2516
• ci: add focused macOS Rust lint by @elezar in #2515
• feat(examples): add supervisor middleware content guard by @pimlock in #2169
• feat(k8s): support configuring workspace PVC storageClassName by @loveRhythm1990 in #2463
• feat(sandbox): use policy-first OCI image identity by @matthewgrossman in #2509
• fix(cli): avoid panic on multi-byte UTF-8 in --since duration by @andrewwhitecdw in #2446
• chore(deps): bump docker/login-action from 4.5.1 to 4.5.2 by @dependabot[bot] in #2537
• refactor(compute): make sandbox readiness gateway-owned across all drivers by @elezar in #2153
• chore(deps): bump actions/stale from 10.4.0 to 11.0.0 by @dependabot[bot] in #2536
• fix(cli): isolate subprocess tests from host OPENSHELL_ env vars by @rhuss in #2523
• ci(e2e): probe VM gateway readiness by @elezar in #2544
• fix(cli): bracket IPv6 bind literals in SSH forwards by @russellb in #2552
• test(e2e): add reusable QEMU infrastructure for E2E tests by @drew in #2471
• Wire authorization into workspace model by @derekwaynecarr in #2445
• fix(gator): preserve resolved review feedback by @drew in #2533
• test(e2e): add VM-backed E2E suite runner by @drew in #2473
• refactor(server): isolate gateway listener context by @elezar in #2542
• fix(server): notify watchers after atomic policy commits by @NaveCohenMonday in #2556
• feat(observability): export gateway traces over OTLP by @krishicks in #2534
• docs: document issue lifecycle labels and roadmap sequencing by @krishicks in #2524
• fix(ci): preserve KVM access across udev restarts by @matthewgrossman in #2566
• fix(deps): update russh, DOMPurify, and gateway base by @alangou in #2575

New Contributors

• @politerealism made their first contribution in #2369
• @NaveCohenMonday made their first contribution in #2556

Full Changelog: v0.0.92...v0.0.96

OpenShell v0.0.92

OpenShell v0.0.92

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.92 sh

What's Changed

• fix: eliminate parallel Rust test flakes by @pimlock in #2434
• feat(cli): add --output json/yaml to sandbox get, status, and sandbox create by @rhuss in #1989
• refactor(tui): default create form state by @elezar in #2458
• feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy by @feloy in #2245
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 by @dependabot[bot] in #2440
• refactor(policy): extract shared L7 endpoint validation by @gracesmith6504 in #2389
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.1 by @dependabot[bot] in #2488
• fix(router): strip Anthropic beta fields from Vertex rawPredict body by @zanetworker in #2465
• fix: assorted byte-index slicing safety fixes by @andrewwhitecdw in #2452
• fix: assorted arithmetic and indexing robustness fixes by @andrewwhitecdw in #2451
• fix(policy): avoid panic truncating multi-byte UTF-8 paths for display by @andrewwhitecdw in #2448

New Contributors

• @andrewwhitecdw made their first contribution in #2452

Full Changelog: v0.0.91...v0.0.92

OpenShell v0.0.91

OpenShell v0.0.91

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.91 sh

What's Changed

• fix(examples): add missing workspace fields to governance interceptor by @pavelanni in #2436
• fix(auth): report gateway authentication status by @drew in #2435
• refactor(supervisor): pass agent proposal state explicitly by @elezar in #2421

New Contributors

• @pavelanni made their first contribution in #2436

Full Changelog: v0.0.90...v0.0.91

OpenShell v0.0.90

OpenShell v0.0.90

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.90 sh

What's Changed

• fix(e2e): detect gateway workload for health port-forward by @krishicks in #2400
• feat(tui): add config key support to provider create/update forms by @letv1nnn in #2224
• fix(vm): reduce registry rootfs staging pressure by @pimlock in #2425
• fix(driver-k8s): add label selector to sandbox watch stream and list by @rhuss in #2223
• fix(agents): make baked payload readable by @elezar in #2419
• refactor(cli): extract shared helpers into commands/common module by @varshaprasad96 in #2359
• fix(sandbox): skip read-only mounts during recursive chown of /sandbox by @varshaprasad96 in #2341
• fix(mise): initialize Python dependencies in fresh worktrees by @matthewgrossman in #2429
• fix(policy): keep internal allowed IP proposals pending by @alangou in #2416

New Contributors

• @letv1nnn made their first contribution in #2224

Full Changelog: v0.0.89...v0.0.90

OpenShell v0.0.89

OpenShell v0.0.89

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.89 sh

What's Changed

• docs(agents): keep project skills synchronized by @pimlock in #2349
• fix(proxy): include OPA deny reason in CONNECT 403 response by @zanetworker in #2363
• fix(cli): respect CARGO_TARGET_DIR in openshell wrapper script by @jhjaggars in #2391
• docs(brand): add OpenShell brand assets by @drew in #2398
• fix(dco): Fix mismatched wording that breaks initial DCO checks by @matthewgrossman in #2399
• docs(extensibility): add gateway interceptor guide by @drew in #2397
• docs(docker-compose): replace removed OpenClaw community sandbox with NemoClaw redirect by @Schimuneck in #2405
• docs(prover): correct prove() exit code doc comment by @eviehoward in #2395
• fix(server): prevent unrelated sandbox deletes from blocking deletion events by @pimlock in #2340

New Contributors

• @Schimuneck made their first contribution in #2405
• @eviehoward made their first contribution in #2395

Full Changelog: v0.0.88...v0.0.89

OpenShell v0.0.88

OpenShell v0.0.88

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.88 sh

What's Changed

• ci(e2e): reuse prebuilt CLI and gateway artifacts by @elezar in #2311
• docs: fix broken links and small inconsistencies by @mesutoezdil in #2329
• fix(gateway): honor tty flag for interactive exec by @emonq in #2315
• chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @dependabot[bot] in #2357
• chore(ci): pin pr gate action by @elezar in #2368
• fix(ci): grant E2E permissions to release workflows by @pimlock in #2376
• fix(providers): allow git clone/fetch via default GitHub provider by @russellb in #2317
• fix(build): raise open-file limit for host musl cross-compile on macOS by @purp in #2307
• fix(supervisor-network): warn on unsupported L7 access presets by @lunarwhite in #2177
• feat(workspace): add workspace resource model with scoping, membershi… by @derekwaynecarr in #2243
• fix(supervisor): tailor Landlock rights by inode type by @drew in #2380
• perf(build): share sccache across worktrees by @matthewgrossman in #2379
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2381
• fix(driver-podman): avoid panic when HOME is unset on macOS by @mesutoezdil in #2327
• fix(ci): fix mirror SHA detection in e2e-label-help workflow by @rhuss in #2236

New Contributors

• @emonq made their first contribution in #2315
• @purp made their first contribution in #2307

Full Changelog: v0.0.87...v0.0.88