Version Packages (#806)

sandy-bonk[bot] · github-actions[bot] · web-flow · commit 798afcf33ead · 2026-07-03T12:42:00.000+01:00
Co-authored-by: github-actions[bot] &lt;41898282+github-actions[bot]@users.noreply.github.com&gt;
diff --git a/.changeset/clever-sandboxes-label.md b/.changeset/clever-sandboxes-label.md
diff --git a/DOCKER_README.md b/DOCKER_README.md
@@ -18,7 +18,7 @@ All images are published as tags on `cloudflare/sandbox`:
 These images are designed to be used with the [`@cloudflare/sandbox`](https://www.npmjs.com/package/@cloudflare/sandbox) SDK. Reference them in your project's `Dockerfile`:
 
 ```dockerfile
-FROM cloudflare/sandbox:0.12.3-python
+FROM cloudflare/sandbox:0.12.4-python
 ```
 
 Then configure your `wrangler.toml` to use the image:
diff --git a/bridge/worker/Dockerfile b/bridge/worker/Dockerfile
@@ -1,6 +1,6 @@
 # Base image provided by Cloudflare — includes the sandbox control-plane server
 # that listens on port 3000 and handles all SDK API calls.
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Install tooling for UC workspace operations and agent use.
 # The base image is Debian-based and includes sh, ls, rm, mkdir, cp, etc.
diff --git a/bridge/worker/README.md b/bridge/worker/README.md
@@ -57,7 +57,7 @@ The default configuration uses `"lite"` instances with `max_instances: 3`. This
 The bridge worker depends on two versioned artifacts that should be kept in sync:
 
 1. **`@cloudflare/sandbox`** — the SDK package in `package.json`. Bump the version (or use `"*"` to track latest) and run `npm install`.
-2. **`cloudflare/sandbox` Docker image** — the base image tag in `Dockerfile` (e.g. `FROM docker.io/cloudflare/sandbox:0.12.3`). Update the tag to match the SDK version.
+2. **`cloudflare/sandbox` Docker image** — the base image tag in `Dockerfile` (e.g. `FROM docker.io/cloudflare/sandbox:0.12.4`). Update the tag to match the SDK version.
 
 Both versions should match — the SDK and container image are released together. After updating:
 
diff --git a/examples/alpine/Dockerfile b/examples/alpine/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3-musl
+FROM docker.io/cloudflare/sandbox:0.12.4-musl
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/authentication/Dockerfile b/examples/authentication/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/claude-code/Dockerfile b/examples/claude-code/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 RUN npm install -g @anthropic-ai/claude-code
 ENV COMMAND_TIMEOUT_MS=300000
 EXPOSE 3000
diff --git a/examples/code-interpreter/Dockerfile b/examples/code-interpreter/Dockerfile
@@ -1 +1 @@
-FROM docker.io/cloudflare/sandbox:0.12.3-python
+FROM docker.io/cloudflare/sandbox:0.12.4-python
diff --git a/examples/codex-app-server/Dockerfile b/examples/codex-app-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Install the Codex CLI globally
 RUN npm install -g @openai/codex
diff --git a/examples/codex-app-server/README.md b/examples/codex-app-server/README.md
@@ -184,7 +184,7 @@ When deployed with `interceptHttps = true`, HTTPS requests to blocked hosts also
 
 ```
 codex-app-server/
-├── Dockerfile               cloudflare/sandbox:0.12.3 + @openai/codex CLI
+├── Dockerfile               cloudflare/sandbox:0.12.4 + @openai/codex CLI
 ├── wrangler.jsonc            Worker + Sandbox Durable Object + container config
 ├── .dev.vars.example         Environment variable template
 ├── src/
diff --git a/examples/codex/Dockerfile b/examples/codex/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 RUN npm install -g @openai/codex
 ENV COMMAND_TIMEOUT_MS=300000
 EXPOSE 3000
diff --git a/examples/collaborative-terminal/Dockerfile b/examples/collaborative-terminal/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/git-repo-per-sandbox/Dockerfile b/examples/git-repo-per-sandbox/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/minimal/Dockerfile b/examples/minimal/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/openai-agents/Dockerfile b/examples/openai-agents/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/opencode/Dockerfile b/examples/opencode/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3-opencode
+FROM docker.io/cloudflare/sandbox:0.12.4-opencode
 
 # Clone sample project for the web UI to work with
 RUN git clone --depth 1 https://github.com/cloudflare/agents.git /home/user/agents
diff --git a/examples/s3-mount/Dockerfile b/examples/s3-mount/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # mount-s3 (mountpoint-s3) — pinned version with SHA-256 verification per architecture
 ARG MOUNT_S3_VERSION=1.22.3
diff --git a/examples/time-machine/Dockerfile b/examples/time-machine/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Documents the ports this application uses (standard Docker convention)
 EXPOSE 8080
diff --git a/examples/typescript-validator/Dockerfile b/examples/typescript-validator/Dockerfile
@@ -1,5 +1,5 @@
 # Use Cloudflare sandbox as base
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 # Install esbuild for TypeScript bundling
 RUN npm install -g esbuild
diff --git a/examples/vite-sandbox/Dockerfile b/examples/vite-sandbox/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 WORKDIR /app
 COPY sandbox-app/package.json ./
diff --git a/examples/websocket-tunnel/Dockerfile b/examples/websocket-tunnel/Dockerfile
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox:0.12.3
+FROM docker.io/cloudflare/sandbox:0.12.4
 
 COPY server.js /app/server.js
 
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/sandbox/CHANGELOG.md b/packages/sandbox/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @cloudflare/sandbox
 
+## 0.12.4
+
+### Patch Changes
+
+- [#798](https://github.com/cloudflare/sandbox-sdk/pull/798) [`33ac27b`](https://github.com/cloudflare/sandbox-sdk/commit/33ac27bbe6698f706bc2aee0435280c869d1465f) Thanks [@aron-cf](https://github.com/aron-cf)! - Add `labels` to `SandboxOptions` so `getSandbox()` can attach Cloudflare Container labels for analytics and observability. Labels are applied on container start; updates while running apply on the next start.
+
 ## 0.12.3
 
 ### Patch Changes
diff --git a/packages/sandbox/package.json b/packages/sandbox/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/cloudflare/sandbox-sdk"
diff --git a/packages/sandbox/src/version.ts b/packages/sandbox/src/version.ts
@@ -3,4 +3,4 @@
  * This file is auto-updated by .github/changeset-version.ts during releases
  * DO NOT EDIT MANUALLY - Changes will be overwritten on the next version bump
  */
-export const SDK_VERSION = '0.12.3';
+export const SDK_VERSION = '0.12.4';
diff --git a/tests/e2e/test-worker/Dockerfile b/tests/e2e/test-worker/Dockerfile
@@ -1,6 +1,6 @@
 # Base image Dockerfile (no Python)
 # Used for testing Python-not-available error handling
-FROM docker.io/cloudflare/sandbox-test:0.12.3
+FROM docker.io/cloudflare/sandbox-test:0.12.4
 
 # Install snapshot tools: squashfs-tools (create), squashfuse (mount), fuse-overlayfs (COW)
 RUN apt-get update && apt-get install -y squashfs-tools squashfuse fuse-overlayfs && rm -rf /var/lib/apt/lists/*
diff --git a/tests/e2e/test-worker/Dockerfile.musl b/tests/e2e/test-worker/Dockerfile.musl
@@ -1,4 +1,4 @@
-FROM docker.io/cloudflare/sandbox-test:0.12.3-musl
+FROM docker.io/cloudflare/sandbox-test:0.12.4-musl
 
 # Install snapshot tools (Alpine uses apk)
 # squashfs-tools: create archives, squashfuse: mount, fuse-overlayfs: COW layer
diff --git a/tests/e2e/test-worker/Dockerfile.opencode b/tests/e2e/test-worker/Dockerfile.opencode
@@ -1,6 +1,6 @@
 # E2E test Dockerfile for OpenCode
 # Uses the -opencode variant for testing the OpenCode integration
-FROM docker.io/cloudflare/sandbox-test:0.12.3-opencode
+FROM docker.io/cloudflare/sandbox-test:0.12.4-opencode
 
 # Install snapshot tools: squashfs-tools (create), squashfuse (mount), fuse-overlayfs (COW)
 RUN apt-get update && apt-get install -y squashfs-tools squashfuse fuse-overlayfs && rm -rf /var/lib/apt/lists/*
diff --git a/tests/e2e/test-worker/Dockerfile.python b/tests/e2e/test-worker/Dockerfile.python
@@ -1,6 +1,6 @@
 # Integration test Dockerfile
 # Uses the -python variant because E2E tests include Python code execution tests
-FROM docker.io/cloudflare/sandbox-test:0.12.3-python
+FROM docker.io/cloudflare/sandbox-test:0.12.4-python
 
 # Install snapshot tools: squashfs-tools (create), squashfuse (mount), fuse-overlayfs (COW)
 RUN apt-get update && apt-get install -y squashfs-tools squashfuse fuse-overlayfs && rm -rf /var/lib/apt/lists/*
diff --git a/tests/e2e/test-worker/Dockerfile.standalone b/tests/e2e/test-worker/Dockerfile.standalone
@@ -1,7 +1,7 @@
 # Test the standalone binary pattern with an arbitrary base image
 # This validates that users can add sandbox capabilities to any Docker image
 
-ARG BASE_IMAGE=cloudflare/sandbox-test:0.12.3
+ARG BASE_IMAGE=cloudflare/sandbox-test:0.12.4
 FROM ${BASE_IMAGE} AS sandbox-source
 
 FROM node:24-slim

Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-FROM docker.io/cloudflare/sandbox:0.12.3-python`
	`1`	`+FROM docker.io/cloudflare/sandbox:0.12.4-python`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM docker.io/cloudflare/sandbox:0.12.3`
	`1`	`+FROM docker.io/cloudflare/sandbox:0.12.4`
`2`	`2`
`3`	`3`	`# Install the Codex CLI globally`
`4`	`4`	`RUN npm install -g @openai/codex`