Network-sandboxed commands now look for a bundled srt-proxy-agent.jar and inject it into Java processes via -javaagent, merged into JAVA_TOOL_OPTIONS, so JVM subprocesses route through the sandbox's HTTP/SOCKS proxy. This applies on both the Linux (bwrap) and macOS (sandbox-exec) sandbox code paths; if the jar isn't found, a warning is logged and the process continues without it.
Sandboxed Java processes get proxy-aware java agent injection
Sandboxed Java processes now automatically route through the sandbox's proxy via an injected agent jar.
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.261,
What probably matters to youSection of the release