OpenHands 1.34.0 stable release notes confirm per-conversation runtimes, sandbox reuse and secret/Markdown hardening.
OpenHands 1.34 isolates each conversation in its own runtime
2026-10-27Verified announcementTRIAL
OpenHands 1.34 adds a per-conversation Docker runtime and lets users start a new conversation in an existing sandbox. It moves the session API key from process arguments to an environment variable, pins automation KV secrets across session-key rotation and blocks untrusted Markdown from choosing arbitrary link targets. The stable release was recovered from the overlap and was absent from the prior manifest.
What this means for you
For teams evaluating self-hosted coding agents, runtime isolation and secret handling directly affect tenant boundaries and recoverability. Sandbox reuse also creates state-leakage risk, so the release needs an isolated multi-session trial.
Evidence & related material
Technical details & scores
| Release | 1.34.0 stable |
|---|---|
| Runtime | per-conversation Docker runtime; new conversation can reuse a selected sandbox |
| Secret Handling | session API key passed through environment rather than argv; automation KV secret survives session-key rotation |
| Content Hardening | untrusted Markdown cannot set rel=opener or arbitrary targets |
| Macos Limit | desktop app remains unsigned and requires clearing Gatekeeper quarantine |
| Time Basis | GitHub release published 2026-10-27T14:35:23Z; inside overlap and absent from the prior manifest |
Technical impact 3
Engineering value 4
Adoption signal 3
Maturity 3
Verification cost 2
Risk 3