[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@vercel/sandbox@4.0.0

Major Changes

• Update Undici to version 8, and use it instead of the Node.js' bundled Undici for API requests. (#456)
  This also enables HTTP/2, which reuses connections and improves performance.

  The minimum required Node.js version is now 22.19.0.

Minor Changes

• Add --network-policy-file <FILE> (use - for stdin) to create, run, sh, fork, and config network-policy. It takes the whole network policy as JSON in the SDK's NetworkPolicy shape, so the CLI can express any rule the SDK can, such as a request header limited to GET and HEAD. The SDK exports parseNetworkPolicy, which validates untrusted input with the same rules as Sandbox.create, rejects unknown keys, and never includes values in its errors. @vercel/sandbox-mock re-exports both. (#417)

Patch Changes

• Send API requests to https://api.vercel.com instead of https://vercel.com/api, removing an extra edge hop from every request. (#452)

• Skip the per-request OIDC token check while the current token is more than 5 minutes from expiring, and share one refresh between concurrent requests. (#448)

• Update zod to v4.6.7. (#450)

sandbox@4.12.0

Minor Changes

• Add detached command execution and CLI commands to inspect logs, wait for completion, and stop a running command. (#391)

• Add sandbox read <name> <path> (alias cat) and sandbox write <name> <path> to read a sandbox file to stdout and write stdin to a sandbox file, and sandbox copy --recursive to copy whole directories in either direction. Failed copies now exit with a non-zero code. (#380)

• Add sandbox exec --stdin to pipe local input into a foreground command. Also add detached stdin writes, selected command output, domain lookup, and Linux users and groups. (#392)

• Add sandbox create fx to open fx in the universal image with its default permissions. Print commands to continue the conversation with fx -c or stop the sandbox after exiting. (#413)

• Add --network-policy-file <FILE> (use - for stdin) to create, run, sh, fork, and config network-policy. It takes the whole network policy as JSON in the SDK's NetworkPolicy shape, so the CLI can express any rule the SDK can, such as a request header limited to GET and HEAD. The SDK exports parseNetworkPolicy, which validates untrusted input with the same rules as Sandbox.create, rejects unknown keys, and never includes values in its errors. @vercel/sandbox-mock re-exports both. (#417)

Patch Changes

• Use the login shell of the user for interactive sessions when SHELL is not set. Before, images without SHELL started sh, and on Debian-based images sh has no line editing. (#438)

• Telemetry now records real team and project ids when --scope or --project is given as a slug, keeps the slugs out of the id fields, and records the caller's user id. (#441)

• Update zod to v4.6.7. (#450)

• Updated dependencies [32c74ee8f049ded8e3260d9c3015a500a2fb0f95, 201070d07f19faa89acb9a82015331a3b38db57a, 5ebd5ed396f6f61f1e99cc560db2751d174672f4, 3b6e77aba56553da9677cbefcaaf340f3bb6ebe9, 584633045bdeda5ea013e8af8e0be3bb935e1d20]:

  • @vercel/sandbox@4.0.0

@vercel/sandbox-mock@4.0.0

Minor Changes

• Add --network-policy-file <FILE> (use - for stdin) to create, run, sh, fork, and config network-policy. It takes the whole network policy as JSON in the SDK's NetworkPolicy shape, so the CLI can express any rule the SDK can, such as a request header limited to GET and HEAD. The SDK exports parseNetworkPolicy, which validates untrusted input with the same rules as Sandbox.create, rejects unknown keys, and never includes values in its errors. @vercel/sandbox-mock re-exports both. (#417)

Patch Changes

• Updated dependencies [32c74ee8f049ded8e3260d9c3015a500a2fb0f95, 201070d07f19faa89acb9a82015331a3b38db57a, 5ebd5ed396f6f61f1e99cc560db2751d174672f4, 3b6e77aba56553da9677cbefcaaf340f3bb6ebe9, 584633045bdeda5ea013e8af8e0be3bb935e1d20]:
  • @vercel/sandbox@4.0.0

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
sandbox	Ready	Preview, v0	Nov 9, 2026 7:28pm UTC
sandbox-cli	Ready	Preview	Nov 9, 2026 7:28pm UTC
sandbox-sdk-ai-example	Ready	Preview	Nov 9, 2026 7:28pm UTC
workflow-code-runner	Ready	Preview	Nov 9, 2026 7:28pm UTC

[agadzik]