github-actions · Nov 9, 2026
diff --git a/.changeset/blue-parents-kick.md b/.changeset/blue-parents-kick.md
diff --git a/.changeset/cli-detached-commands.md b/.changeset/cli-detached-commands.md
diff --git a/.changeset/cli-read-write-recursive-copy.md b/.changeset/cli-read-write-recursive-copy.md
diff --git a/.changeset/cli-sdk-parity-followup.md b/.changeset/cli-sdk-parity-followup.md
diff --git a/.changeset/connect-login-shell.md b/.changeset/connect-login-shell.md
diff --git a/.changeset/fx-agent-shortcut.md b/.changeset/fx-agent-shortcut.md
diff --git a/.changeset/network-policy-file.md b/.changeset/network-policy-file.md
diff --git a/.changeset/sdk-api-vercel-com.md b/.changeset/sdk-api-vercel-com.md
diff --git a/.changeset/sdk-cache-oidc-token-expiry.md b/.changeset/sdk-cache-oidc-token-expiry.md
diff --git a/.changeset/telemetry-scope-ids.md b/.changeset/telemetry-scope-ids.md
diff --git a/.changeset/upgrade-zod.md b/.changeset/upgrade-zod.md
diff --git a/packages/sandbox/CHANGELOG.md b/packages/sandbox/CHANGELOG.md
@@ -1,5 +1,30 @@
 # sandbox
 
+## 4.12.0
+
+### Minor Changes
+
+- Add detached command execution and CLI commands to inspect logs, wait for completion, and stop a running command. ([#391](https://github.com/vercel/sandbox/pull/391))
+
+- Add `sandbox read <name> <path>` (alias `cat`) and `sandbox write <name> <path>` to read a sandbox file to stdout and write stdin to a sandbox file, and `sandbox copy --recursive` to copy whole directories in either direction. Failed copies now exit with a non-zero code. ([#380](https://github.com/vercel/sandbox/pull/380))
+
+- Add `sandbox exec --stdin` to pipe local input into a foreground command. Also add detached stdin writes, selected command output, domain lookup, and Linux users and groups. ([#392](https://github.com/vercel/sandbox/pull/392))
+
+- Add `sandbox create fx` to open fx in the universal image with its default permissions. Print commands to continue the conversation with `fx -c` or stop the sandbox after exiting. ([#413](https://github.com/vercel/sandbox/pull/413))
+
+- Add `--network-policy-file <FILE>` (use `-` for stdin) to `create`, `run`, `sh`, `fork`, and `config network-policy`. It takes the whole network policy as JSON in the SDK's `NetworkPolicy` shape, so the CLI can express any rule the SDK can, such as a request header limited to `GET` and `HEAD`. The SDK exports `parseNetworkPolicy`, which validates untrusted input with the same rules as `Sandbox.create`, rejects unknown keys, and never includes values in its errors. `@vercel/sandbox-mock` re-exports both. ([#417](https://github.com/vercel/sandbox/pull/417))
+
+### Patch Changes
+
+- Use the login shell of the user for interactive sessions when `SHELL` is not set. Before, images without `SHELL` started `sh`, and on Debian-based images `sh` has no line editing. ([#438](https://github.com/vercel/sandbox/pull/438))
+
+- Telemetry now records real team and project ids when `--scope` or `--project` is given as a slug, keeps the slugs out of the id fields, and records the caller's user id. ([#441](https://github.com/vercel/sandbox/pull/441))
+
+- Update `zod` to v4.6.7. ([#450](https://github.com/vercel/sandbox/pull/450))
+
+- Updated dependencies [[`32c74ee8f049ded8e3260d9c3015a500a2fb0f95`](https://github.com/vercel/sandbox/commit/32c74ee8f049ded8e3260d9c3015a500a2fb0f95), [`201070d07f19faa89acb9a82015331a3b38db57a`](https://github.com/vercel/sandbox/commit/201070d07f19faa89acb9a82015331a3b38db57a), [`5ebd5ed396f6f61f1e99cc560db2751d174672f4`](https://github.com/vercel/sandbox/commit/5ebd5ed396f6f61f1e99cc560db2751d174672f4), [`3b6e77aba56553da9677cbefcaaf340f3bb6ebe9`](https://github.com/vercel/sandbox/commit/3b6e77aba56553da9677cbefcaaf340f3bb6ebe9), [`584633045bdeda5ea013e8af8e0be3bb935e1d20`](https://github.com/vercel/sandbox/commit/584633045bdeda5ea013e8af8e0be3bb935e1d20)]:
+  - @vercel/sandbox@4.0.0
+
 ## 4.11.1
 
 ### Patch Changes

diff --git a/packages/sandbox/docs/index.md b/packages/sandbox/docs/index.md
@@ -1,7 +1,7 @@
 ## `sandbox --help`
 
 ```
-sandbox 4.11.1
+sandbox 4.12.0
 
 ▲ sandbox [options] <command>
 

diff --git a/packages/sandbox/package.json b/packages/sandbox/package.json
@@ -1,7 +1,7 @@
 {
   "name": "sandbox",
   "description": "Command line interface for Vercel Sandbox",
-  "version": "4.11.1",
+  "version": "4.12.0",
   "scripts": {
     "clean": "rm -rf node_modules dist",
     "sandbox": "tsx ./src/dev-cli.ts",

diff --git a/packages/vercel-sandbox-mock/CHANGELOG.md b/packages/vercel-sandbox-mock/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @vercel/sandbox-mock
 
+## 4.0.0
+
+### Minor Changes
+
+- Add `--network-policy-file <FILE>` (use `-` for stdin) to `create`, `run`, `sh`, `fork`, and `config network-policy`. It takes the whole network policy as JSON in the SDK's `NetworkPolicy` shape, so the CLI can express any rule the SDK can, such as a request header limited to `GET` and `HEAD`. The SDK exports `parseNetworkPolicy`, which validates untrusted input with the same rules as `Sandbox.create`, rejects unknown keys, and never includes values in its errors. `@vercel/sandbox-mock` re-exports both. ([#417](https://github.com/vercel/sandbox/pull/417))
+
+### Patch Changes
+
+- Updated dependencies [[`32c74ee8f049ded8e3260d9c3015a500a2fb0f95`](https://github.com/vercel/sandbox/commit/32c74ee8f049ded8e3260d9c3015a500a2fb0f95), [`201070d07f19faa89acb9a82015331a3b38db57a`](https://github.com/vercel/sandbox/commit/201070d07f19faa89acb9a82015331a3b38db57a), [`5ebd5ed396f6f61f1e99cc560db2751d174672f4`](https://github.com/vercel/sandbox/commit/5ebd5ed396f6f61f1e99cc560db2751d174672f4), [`3b6e77aba56553da9677cbefcaaf340f3bb6ebe9`](https://github.com/vercel/sandbox/commit/3b6e77aba56553da9677cbefcaaf340f3bb6ebe9), [`584633045bdeda5ea013e8af8e0be3bb935e1d20`](https://github.com/vercel/sandbox/commit/584633045bdeda5ea013e8af8e0be3bb935e1d20)]:
+  - @vercel/sandbox@4.0.0
+
 ## 3.9.1
 
 ### Patch Changes

diff --git a/packages/vercel-sandbox-mock/package.json b/packages/vercel-sandbox-mock/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@vercel/sandbox-mock",
-  "version": "3.9.1",
+  "version": "4.0.0",
   "description": "Drop-in mock for @vercel/sandbox backed by just-bash.",
   "type": "module",
   "main": "dist/index.cjs",

diff --git a/packages/vercel-sandbox/CHANGELOG.md b/packages/vercel-sandbox/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @vercel/sandbox
 
+## 4.0.0
+
+### Major Changes
+
+- Update Undici to version 8, and use it instead of the Node.js' bundled Undici for API requests. ([#456](https://github.com/vercel/sandbox/pull/456))
+  This also enables HTTP/2, which reuses connections and improves performance.
+
+  The minimum required Node.js version is now 22.19.0.
+
+### Minor Changes
+
+- Add `--network-policy-file <FILE>` (use `-` for stdin) to `create`, `run`, `sh`, `fork`, and `config network-policy`. It takes the whole network policy as JSON in the SDK's `NetworkPolicy` shape, so the CLI can express any rule the SDK can, such as a request header limited to `GET` and `HEAD`. The SDK exports `parseNetworkPolicy`, which validates untrusted input with the same rules as `Sandbox.create`, rejects unknown keys, and never includes values in its errors. `@vercel/sandbox-mock` re-exports both. ([#417](https://github.com/vercel/sandbox/pull/417))
+
+### Patch Changes
+
+- Send API requests to `https://api.vercel.com` instead of `https://vercel.com/api`, removing an extra edge hop from every request. ([#452](https://github.com/vercel/sandbox/pull/452))
+
+- Skip the per-request OIDC token check while the current token is more than 5 minutes from expiring, and share one refresh between concurrent requests. ([#448](https://github.com/vercel/sandbox/pull/448))
+
+- Update `zod` to v4.6.7. ([#450](https://github.com/vercel/sandbox/pull/450))
+
 ## 3.9.1
 
 ### Patch Changes

diff --git a/packages/vercel-sandbox/package.json b/packages/vercel-sandbox/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@vercel/sandbox",
-  "version": "3.9.1",
+  "version": "4.0.0",
   "description": "Software Development Kit for Vercel Sandbox",
   "type": "module",
   "main": "dist/index.cjs",

diff --git a/packages/vercel-sandbox/src/version.ts b/packages/vercel-sandbox/src/version.ts
@@ -1,2 +1,2 @@
 // Autogenerated by inject-version.ts
-export const VERSION = "3.9.1";
+export const VERSION = "4.0.0";