OpenShell Development Build

This build is automatically published on every commit to main that passes CI.

NOTE: This is a development build, not a tagged release, and may be unstable.

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=dev sh

OpenShell v0.0.89

OpenShell v0.0.89

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.89 sh

What's Changed

• docs(agents): keep project skills synchronized by @pimlock in #2349
• fix(proxy): include OPA deny reason in CONNECT 403 response by @zanetworker in #2363
• fix(cli): respect CARGO_TARGET_DIR in openshell wrapper script by @jhjaggars in #2391
• docs(brand): add OpenShell brand assets by @drew in #2398
• fix(dco): Fix mismatched wording that breaks initial DCO checks by @matthewgrossman in #2399
• docs(extensibility): add gateway interceptor guide by @drew in #2397
• docs(docker-compose): replace removed OpenClaw community sandbox with NemoClaw redirect by @Schimuneck in #2405
• docs(prover): correct prove() exit code doc comment by @eviehoward in #2395
• fix(server): prevent unrelated sandbox deletes from blocking deletion events by @pimlock in #2340

New Contributors

• @Schimuneck made their first contribution in #2405
• @eviehoward made their first contribution in #2395

Full Changelog: v0.0.88...v0.0.89

OpenShell v0.0.88

OpenShell v0.0.88

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.88 sh

What's Changed

• ci(e2e): reuse prebuilt CLI and gateway artifacts by @elezar in #2311
• docs: fix broken links and small inconsistencies by @mesutoezdil in #2329
• fix(gateway): honor tty flag for interactive exec by @emonq in #2315
• chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @dependabot[bot] in #2357
• chore(ci): pin pr gate action by @elezar in #2368
• fix(ci): grant E2E permissions to release workflows by @pimlock in #2376
• fix(providers): allow git clone/fetch via default GitHub provider by @russellb in #2317
• fix(build): raise open-file limit for host musl cross-compile on macOS by @purp in #2307
• fix(supervisor-network): warn on unsupported L7 access presets by @lunarwhite in #2177
• feat(workspace): add workspace resource model with scoping, membershi… by @derekwaynecarr in #2243
• fix(supervisor): tailor Landlock rights by inode type by @drew in #2380
• perf(build): share sccache across worktrees by @matthewgrossman in #2379
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2381
• fix(driver-podman): avoid panic when HOME is unset on macOS by @mesutoezdil in #2327
• fix(ci): fix mirror SHA detection in e2e-label-help workflow by @rhuss in #2236

New Contributors

• @emonq made their first contribution in #2315
• @purp made their first contribution in #2307

Full Changelog: v0.0.87...v0.0.88

OpenShell v0.0.86

OpenShell v0.0.86

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.86 sh

What's Changed

• feat!(openshell-cli): remove openshell policy prove command and z3 de… by @SDAChess in #2318
• fix(server): persist sandbox labels on create by @matthewgrossman in #2306
• fix: remove mentions of bundled-z3 in CI and wheel builds by @SDAChess in #2322
• fix(gateway): probe Docker socket during driver auto-detection by @krishicks in #2303
• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot[bot] in #2289
• chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @dependabot[bot] in #2288
• feat(tui): navigate panels via Up/Down arrow overflow at list boundaries by @varshaprasad96 in #2287
• feat(providers): AWS STS AssumeRole refresh strategy and aws-s3 profile by @russellb in #1782
• rfc-0009: supervisor middleware by @pimlock in #1738
• test(e2e): run VM suite in CI by @drew in #2305
• fix(vm-driver): fixes BYOC sandbox creation failing with ext4-fs writ… by @bornav in #2150
• feat(supervisor-middleware): add network egress middleware by @pimlock in #2027

New Contributors

• @matthewgrossman made their first contribution in #2306
• @varshaprasad96 made their first contribution in #2287
• @bornav made their first contribution in #2150

Full Changelog: v0.0.85...v0.0.86

OpenShell v0.0.85

OpenShell v0.0.85

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.85 sh

What's Changed

• fix(sdk): initialize sandbox annotations by @drew in #2296
• fix(driver-vm): run sandbox supervisor as guest pid 1 by @drew in #2299
• feat(ci): introduce merge queue by @elezar in #2024
• feat(gateway): add elevated gateway info by @elezar in #2202
• fix(ci): prune snap assets from dev release by @pimlock in #2302

Full Changelog: v0.0.84...v0.0.85

OpenShell v0.0.83

OpenShell v0.0.83

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.83 sh

What's Changed

• fix(tui): redraw after sandbox shell exits by @johntmyers in #2230
• fix(agents): add confirmation gate to triage-issue batch mode by @rhuss in #2239
• fix(gator): retry review after draft blocker clears by @johntmyers in #2200
• fix(certgen): stage temp dir inside output dir to fix cross-device rename by @gracesmith6504 in #2241
• refactor(jsonrpc): carry typed inspection errors by @shiju-nv in #2244
• docs(agents): add gator launch skill by @johntmyers in #2203
• chore(python): lower minimum supported Python to 3.11 by @maxdubrinsky in #2247
• fix(policy): keep approved chunk when a mechanistic denial resubmits its endpoint by @laitingsheng in #2242

New Contributors

• @rhuss made their first contribution in #2239
• @gracesmith6504 made their first contribution in #2241

Full Changelog: v0.0.82...v0.0.83

OpenShell v0.0.82

OpenShell v0.0.82

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.82 sh

What's Changed

• fix(tui): route warning logs to status bar instead of stderr by @r3v5 in #2210
• fix(mcp): include tool names in policy logs by @kirit93 in #2189
• chore(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 by @dependabot[bot] in #2206
• docs(openshift): simplify install steps and update Helm README by @ChristianZaccaria in #2125
• docs(issues): require release and duplicate checks by @elezar in #2214
• fix(core): pin supervisor image tag to gateway version for all drivers by @benoitf in #2070
• fix(helm): propagate supervisor image overrides by @TaylorMutch in #2216
• feat(kubernetes): add sidecar supervisor topology by @TaylorMutch in #2076
• feat(kubernetes): support PVC subPath driver config by @mjamiv in #2034
• fix(network): fail closed when credential placeholders cannot be rewritten by @TonyLuo-NV in #2162
• fix(server): allow newlines in exec command arguments by @zanetworker in #1965
• chore(deps): bump actions/stale from 10.3.0 to 10.4.0 by @dependabot[bot] in #2234

New Contributors

• @r3v5 made their first contribution in #2210
• @ChristianZaccaria made their first contribution in #2125
• @TonyLuo-NV made their first contribution in #2162

Full Changelog: v0.0.81...v0.0.82

OpenShell v0.0.80

OpenShell v0.0.80

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.80 sh

What's Changed

• fix(driver-podman): gate Linux-only Path import by @krishicks in #2188
• docs: fix Docker version format from 28.04 to 28.0 by @mesutoezdil in #2136
• docs: update man page date to 2026 by @mesutoezdil in #2135
• fix(sandbox): acknowledge initial policy revision; expose SDK labels/selectors by @KyleZheng1284 in #2170
• chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 by @dependabot[bot] in #2191

New Contributors

• @KyleZheng1284 made their first contribution in #2170

Full Changelog: v0.0.79...v0.0.80

OpenShell v0.0.79

OpenShell v0.0.79

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.79 sh

What's Changed

• docs: fix STYLEGUIDE heading to match filename by @mesutoezdil in #2134
• docs(kubernetes): bump cert-manager to v1.20.3 by @mesutoezdil in #2129
• docs: fix article before OpenShell in sync-files by @mesutoezdil in #2133
• docs: warn to redact credentials from log output before sharing by @elezar in #2124
• fix(podman): deliver sandbox JWTs as secrets by @maxamillion in #2156
• chore: remove deprecated --keep flag from docs, scripts, and e2e tests by @Ygnas in #2126
• chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 by @dependabot[bot] in #2160

New Contributors

• @Ygnas made their first contribution in #2126

Full Changelog: v0.0.77...v0.0.79

OpenShell v0.0.78

OpenShell v0.0.78

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.78 sh

What's Changed

• docs: fix STYLEGUIDE heading to match filename by @mesutoezdil in #2134
• docs(kubernetes): bump cert-manager to v1.20.3 by @mesutoezdil in #2129
• docs: fix article before OpenShell in sync-files by @mesutoezdil in #2133
• docs: warn to redact credentials from log output before sharing by @elezar in #2124
• fix(podman): deliver sandbox JWTs as secrets by @maxamillion in #2156
• chore: remove deprecated --keep flag from docs, scripts, and e2e tests by @Ygnas in #2126

New Contributors

• @Ygnas made their first contribution in #2126

Full Changelog: v0.0.77...v0.0.78