0.17.5

Changelog

• be5b810 Revert "fix(direnv): set DEVBOX_SHELL_ENABLED when entering env via shellenv --init-hook" (#2890)

0.0.0-edge.2026-06-25

0.0.0-edge.2026-06-25 edge release

0.17.4

What's Changed

✨ New Features

• DEVBOX_CONFIG environment variable — you can now set the --config flag via the DEVBOX_CONFIG env var, making it easier to point devbox at a config in a non-default location without passing the flag on every command, by @mikeland73 (#2838)

🐛 Bug Fixes

• Shells in paths with spaces now work — quoted the shellrc source guard so a ZDOTDIR containing spaces no longer breaks the shell (#2860), and quoted templated hook paths so plugins work when the project directory contains spaces (#2876), by @mikeland73.
• Skip env vars with invalid names instead of breaking the shell, by @mikeland73 (#2883).
• Node.js Corepack fixes — rewrote `setup-corepack` as an ESM `.mjs` module (#2857) and fixed Corepack setup failing in projects with `"type": "module"` (#2873), by @mikeland73.
• `direnv`: set `DEVBOX_SHELL_ENABLED` when entering the env via `shellenv --init-hook`, by @mikeland73 (#2861).
• `devbox generate` now emits fully-qualified `docker.io` images in generated Dockerfiles, by @mikeland73 (#2847).
• Fix indentation in the default `devbox.json` config, by @humtta (#2851).
• Examples: drop the unused `cowboy` dependency from the Elixir example (#2882), and declare the `csv`/`base64`/`logger` gems in the Jekyll example for Ruby 3.4 (#2881), by @mikeland73.

🧹 Maintenance

• Restore the devbox logo, by @humtta (#2852).
• docs: fix broken jetify.com documentation links in the README, by @mikeland73 (#2850).
• Bump `lastTag` to 0.17.3 and update `flake.lock` (#2858); update `devbox.lock` files (#2879), by @mikeland73.
• CI/release pipeline hardening — guard `cli-post-release` on `cli-release` success for the same tag (#2854), reuse the existing draft release in goreleaser (#2855), fix GitHub API 403 rate-limiting by writing access-tokens to the system `nix.conf` (#2884), upgrade GitHub Actions off the deprecated Node.js 20 runtime (#2886), and replace the unmaintained `github-tag-action` with plain `git tag`/`push` (#2887), by @mikeland73.
• Faster CI tests — shard testscripts across runners to speed up `cli-tests` (#2885), use cached GNU hello instead of process-compose in the flakeref test (#2878), and remove the dead nix-version matrix from the `cli-tests` job (#2880), by @mikeland73.

New Contributors

• @humtta made their first contribution in #2852

Full Changelog: 0.17.3...0.17.4

0.17.3

What's Changed

✨ New Features

• Shell aliases in devbox.json — a new top-level aliases map lets you define shell aliases declaratively instead of hand-writing them in your init_hook. They work both in the interactive devbox shell (injected after the init hook, compatible across bash/zsh/fish) and via devbox run <alias>, which expands the alias even without an interactive shell. Aliases merge across plugins and the parent config, with the parent taking precedence. (#2835)
• Automatic Corepack activation for Node.js — when Corepack is enabled, the nodejs plugin reads the packageManager field from your package.json and runs corepack prepare --activate so the pinned pnpm/yarn/npm version is ready in your shell automatically. Opt out with DEVBOX_DISABLE_NODEJS_PACKAGE_MANAGER_AUTODETECT=1. (#2845)
• use-devbox agent skill — adds a skill so AI coding agents can discover a project's devbox environment and run commands inside it. (#2837)

🐛 Bug Fixes

• Fix devbox update not refreshing locked revisions for flake refs, by @Lagoja (#2825)
• nginx plugin now includes mime.types, so static files are served with the correct Content-Type (#2844)
• Bump process-compose version and fix extra stderr output in services (#2832)

🧹 Maintenance

• Fix tests (#2833)
• Refresh README demo screencast for the current devbox experience (#2842)

Full Changelog: 0.17.2...0.17.3

0.17.2

What's new in this release:

• devbox update <pkg> will now only update and install the specified package, instead of reinstalling all your packages
• Updated devbox to Go 1.26.1

Changelog

• 52670c4 Bump lastTag version to 0.17.2 (#2821)
• e3599e6 Bump Go from 1.24.5 to 1.26.1 (#2819)
• 858d3a3 Fix update installing all packages instead of target (#2816)

0.17.1

What's Changed in This Release

• Fixed an issue where git+https plugins were not properly respecting the filecache
• Fixed an issue where declaring multiple built-in plugins would raise a duplicate plugin error
• Added a success message to devbox init with next steps
• Fixed a bug where the VSCode Extension's Reopen in Devbox Shell would fail on macOS
• Fixed a shell compatibility issue in the Python plugin's shell hook
• Updated dependencies in examples

Full Changelog

• Add filecache to git plugin FileContent with configurable TTL by @Lagoja in #2798
• Fix high-severity Dependabot alerts by @mikeland73 in #2801
• feat(init): print success message and next steps after devbox init by @Lagoja in #2800
• Fix false duplicate detection for multiple declared built-in pluginss by @Lagoja in #2799
• Fix remaining Dependabot security alerts by @mikeland73 in #2803
• Fix remaining Dependabot security alerts by @mikeland73 in #2804
• Fixes #2793 - replace use of [[ conditionals by @timgates42 in https://github.com//pull/2794
• boxcli: fix VS Code binary path resolution on macOS by @joshgodsiff in #2806
• Bump lastTag version to 0.17.1 by @Lagoja in #2807

New Contributors

• @timgates42 made their first contribution in #2794
• @joshgodsiff made their first contribution in #2806

Full Changelog: 0.17.0...0.17.1

0.17.1-dev

What's New in this Pre-release

• Fixed an issue where git+https plugins were not properly respecting the filecache
• Fixed an issue where declaring multiple built-in plugins would raise a duplicate plugin error
• Added a success message to devbox init with next steps
• Updated dependencies in examples

Changelog

• 27a1502 Fix remaining Dependabot security alerts (#2803)
• 540b82c Fix false duplicate detection for multiple declared built-in pluginss (#2799)
• bbe7a31 feat(init): print success message and next steps after devbox init (#2800)
• ab5eba0 Fix high-severity Dependabot alerts (#2801)
• f82a364 Add filecache to git plugin FileContent with configurable TTL (#2798)

0.17.0

Devbox 0.17.0

New Features

• Git Plugin Support — Plugins can now be loaded from any Git repository, not just GitHub. Supports git+ssh, git+http, and git+file transports, as well as targeting specific branches, revisions, or subdirectories. (#2735)

• Nushell Support for Global Packages — devbox global shellenv now works correctly in Nushell. Previously, Nushell users had no equivalent to eval $(devbox global shellenv) — Devbox now generates native Nushell-compatible output automatically. (#2743)

• --envrc-dir flag for devbox generate direnv — A new flag gives independent control over where the .envrc file is written, separate from the --config flag that specifies the devbox.json location. This fixes cases where direnv and devbox configs live in different directories. (#2629)

• Zsh ZDOTDIR Support — Devbox now correctly handles the ZDOTDIR environment variable during Zsh shell initialization, fixing broken Zsh configs that reference ZDOTDIR. (#2712)

• PostgreSQL Plugin: Configurable Port via PGPORT — The PostgreSQL plugin now respects the PGPORT environment variable, making it possible to run multiple PostgreSQL instances in different projects simultaneously. (#2774)

• Process Compose Improvements -- Devbox now lets you view the process-compose port with devbox services pcport (#2784). You can also see the pid, namespace, age, health, and restarts for all your services via devbox services ls (#2782)

Bug Fixes

• Fixed duplicate -f flag error in process-compose — Using --process-compose-file to merge configurations would fail with a "project already specified" error. Devbox now deduplicates flags before passing them to process-compose. (#2701)

• Fixed Elixir plugin on macOS — The Elixir plugin was broken on newer nixpkgs due to the removal of the old darwin.apple_sdk_11_0 SDK pattern. The explicit CoreServices framework dependency has been removed since it is now bundled automatically in the new Darwin stdenv. (#2764)

• NixOS: Fixed .envrc shebang — Generated .envrc files previously used /bin/bash, which does not exist on NixOS. The shebang is now /usr/bin/env bash for portability. (#2747)

• VS Code: Fixed "Reopen in Devbox shell environment" in WSL — The command now works correctly in VS Code WSL windows. (#2729)

• VS Code: Preserve HOME variable in Devbox shell — The HOME variable was previously stripped when opening a VS Code Devbox shell, breaking tools like Git that rely on it to find user configuration. (#2694)

• Fixed broken nixpkgs reference in pre-fetch command (#2689)

Dependency & Runtime Updates

• process-compose bumped to 1.87.0 (from 1.64.1) (#2777)
• Minimum Nix version is now 2.18 — Newer nixpkgs no longer evaluates on older Nix versions. (#2779)
• Built-in Nix installer switched to upstream experimental installer (#2698)

What's Changed

• [compliance] Update dependencies in devbox by @loreto in #2684
• Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in the go_modules group across 1 directory by @dependabot[bot] in #2682
• Bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group across 1 directory by @dependabot[bot] in #2688
• change builtin installer to upstream nix experimental by @Lagoja in #2698
• fix(vscode): Keep HOME variable when starting VSCode by @tm-michael in #2694
• [docs] fix docusaurus due to previous upgrade being incompatible by @savil in #2710
• [gha] clear space to avoid 'No space left on device' error by @savil in #2711
• bump devbox-install-action to v0.14.0 by @savil in #2709
• [devbox] GHA tests: add GITHUB_TOKEN to nix config to fix 403 errors by @savil in #2714
• typo in direnv.md by @combinatorist in #2715
• [devbox] attempt 2: add GITHUB_TOKEN for nix by @savil in #2716
• Remove docs and documentation app by @loreto in #2724
• Added support for ZDOTDIR handling in Zsh shell initialization. by @r00tdaemon in #2712
• docs: fix link in README by @salim-b in #2728
• Fix broken link for 'Installing Devbox' by @ashahba in #2730
• Fix GitHub API rate limiting in cli-tests by @savil in #2731
• [tests] Bump php version test by @mikeland73 in #2734
• Add --envrc-dir flag to allow specifying location of direnv config by @pstephan-geico-external in #2629
• Fix VS Code "Reopen in Devbox shell environment" in WSL by @apgrucza in #2729
• [vscode extension] extension version and readme update to 0.1.8 by @mohsenari in #2736
• fixes reference to nixpkgs in pre fetch command by @t-monaghan in #2689
• [small] Upgraded node version since it was incompatible with vsce by @mohsenari in #2737
• Update go dependencies to latest versions by @loreto in #2741
• [compliance] Update dependencies with vulnerabilities by @loreto in #2749
• [compliance] Update devbox examples with vulnerabilities by @loreto in #2753
• Use portable shebang in .envrc template for NixOS compatibility by @abs in #2747
• Fix elixir plugin for new Darwin SDK pattern by @yasuaki640 in #2764
• [README] Removed translations from README by @mohsenari in #2762
• Update dependencies in pytorch example by @loreto in #2771
• [plugins] Added support for being able to specify PGPORT to postgres plugin by @mohsenari in #2774
• de-duplicate -f <pc.yaml> flags to avoid the issue in #2700 by @jay-aye-see-kay in #2701
• Bump symfony/process from 6.4.26 to 6.4.33 in /examples/stacks/drupal in the composer group across 1 directory by @dependabot[bot] in #2772
• Bump django from 4.2.22 to 4.2.25 in /examples/stacks/django in the pip group across 1 directory by @dependabot[bot] in #2713
• Bump process-compose version to 1.87.0 by @Lagoja in #2777
• Bump minimum Nix version to 2.18 by @Lagoja in #2779
• [devbox] update go to 1.25.5 and disable CGO to workaround clang linker error by @savil in #2723
• Nushell support for Global packages by @omerxx in #2743
• Add git plugin by @plopoyop in #2735
• Add services pcport command by @elliotthilaire-ca in #2784
• Add pid, namespace, age, health, restarts to services ls by @elliotthilaire-ca in #2782
• update flake by @Lagoja in #2789

New Contributors

• @tm-michael made their first contribution in #2694
• @combinatorist made their first contribution in #2715
• @r00tdaemon made their first contribution in #2712
• @salim-b made their first contribution in #2728
• @ashahba made their first contribution in #2730
• @pstephan-geico-external made their first contribution in #2629
• @abs made their first contribution in #2747
• @yasuaki640 made their first contribution in #2764
• @omerxx made their first contribution in #2743
• @plopoyop made their first contribution in #2735
• @elliotthilaire-ca made their first contribution in #2784

Full Changelog: 0.16.0...0.17.0

0.17.0-deva

Devbox 0.17.0 Pre-Release Notes

This pre-release includes all the features in (0.17.0-dev)[https://github.com/jetify-com/devbox/releases/tag/0.17.0-dev], as well as the following improvements:

• You can now view the process-compose port by running devbox services pcport
• devbox services ls shows pid, namespace, age, health, and restarts information for all of your services

What's Changed

• Add services pcport command by @elliotthilaire-ca in #2784
• Add pid, namespace, age, health, restarts to services ls by @elliotthilaire-ca in #2782

New Contributors

• @elliotthilaire-ca made their first contribution in #2784

Full Changelog: 0.17.0-dev...0.17.0-deva

0.17.0-dev

Devbox 0.17.0 Pre-Release Notes

New Features

• Git Plugin Support — Plugins can now be loaded from any Git repository, not just GitHub. Supports git+ssh, git+http, and git+file transports, as well as targeting specific branches, revisions, or subdirectories. (#2735)

• Nushell Support for Global Packages — devbox global shellenv now works correctly in Nushell. Previously, Nushell users had no equivalent to eval $(devbox global shellenv) — Devbox now generates native Nushell-compatible output automatically. (#2743)

• --envrc-dir flag for devbox generate direnv — A new flag gives independent control over where the .envrc file is written, separate from the --config flag that specifies the devbox.json location. This fixes cases where direnv and devbox configs live in different directories. (#2629)

• Zsh ZDOTDIR Support — Devbox now correctly handles the ZDOTDIR environment variable during Zsh shell initialization, fixing broken Zsh configs that reference ZDOTDIR. (#2712)

• PostgreSQL Plugin: Configurable Port via PGPORT — The PostgreSQL plugin now respects the PGPORT environment variable, making it possible to run multiple PostgreSQL instances in different projects simultaneously. (#2774)

Bug Fixes

• Fixed duplicate -f flag error in process-compose — Using --process-compose-file to merge configurations would fail with a "project already specified" error. Devbox now deduplicates flags before passing them to process-compose. (#2701)

• Fixed Elixir plugin on macOS — The Elixir plugin was broken on newer nixpkgs due to the removal of the old darwin.apple_sdk_11_0 SDK pattern. The explicit CoreServices framework dependency has been removed since it is now bundled automatically in the new Darwin stdenv. (#2764)

• NixOS: Fixed .envrc shebang — Generated .envrc files previously used /bin/bash, which does not exist on NixOS. The shebang is now /usr/bin/env bash for portability. (#2747)

• VS Code: Fixed "Reopen in Devbox shell environment" in WSL — The command now works correctly in VS Code WSL windows. (#2729)

• VS Code: Preserve HOME variable in Devbox shell — The HOME variable was previously stripped when opening a VS Code Devbox shell, breaking tools like Git that rely on it to find user configuration. (#2694)

• Fixed broken nixpkgs reference in pre-fetch command (#2689)

Dependency & Runtime Updates

• process-compose bumped to 1.87.0 (from 1.64.1) (#2777)
• Minimum Nix version is now 2.18 — Newer nixpkgs no longer evaluates on older Nix versions. (#2779)
• Built-in Nix installer switched to upstream experimental installer (#2698)

What's Changed

• [compliance] Update dependencies in devbox by @loreto in #2684
• Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in the go_modules group across 1 directory by @dependabot[bot] in #2682
• Bump github.com/ulikunitz/xz from 0.5.13 to 0.5.14 in the go_modules group across 1 directory by @dependabot[bot] in #2688
• change builtin installer to upstream nix experimental by @Lagoja in #2698
• fix(vscode): Keep HOME variable when starting VSCode by @tm-michael in #2694
• [docs] fix docusaurus due to previous upgrade being incompatible by @savil in #2710
• [gha] clear space to avoid 'No space left on device' error by @savil in #2711
• bump devbox-install-action to v0.14.0 by @savil in #2709
• [devbox] GHA tests: add GITHUB_TOKEN to nix config to fix 403 errors by @savil in #2714
• typo in direnv.md by @combinatorist in #2715
• [devbox] attempt 2: add GITHUB_TOKEN for nix by @savil in #2716
• Remove docs and documentation app by @loreto in #2724
• Added support for ZDOTDIR handling in Zsh shell initialization. by @r00tdaemon in #2712
• docs: fix link in README by @salim-b in #2728
• Fix broken link for 'Installing Devbox' by @ashahba in #2730
• Fix GitHub API rate limiting in cli-tests by @savil in #2731
• [tests] Bump php version test by @mikeland73 in #2734
• Add --envrc-dir flag to allow specifying location of direnv config by @pstephan-geico-external in #2629
• Fix VS Code "Reopen in Devbox shell environment" in WSL by @apgrucza in #2729
• [vscode extension] extension version and readme update to 0.1.8 by @mohsenari in #2736
• fixes reference to nixpkgs in pre fetch command by @t-monaghan in #2689
• [small] Upgraded node version since it was incompatible with vsce by @mohsenari in #2737
• Update go dependencies to latest versions by @loreto in #2741
• [compliance] Update dependencies with vulnerabilities by @loreto in #2749
• [compliance] Update devbox examples with vulnerabilities by @loreto in #2753
• Use portable shebang in .envrc template for NixOS compatibility by @abs in #2747
• Fix elixir plugin for new Darwin SDK pattern by @yasuaki640 in #2764
• [README] Removed translations from README by @mohsenari in #2762
• Update dependencies in pytorch example by @loreto in #2771
• [plugins] Added support for being able to specify PGPORT to postgres plugin by @mohsenari in #2774
• de-duplicate -f <pc.yaml> flags to avoid the issue in #2700 by @jay-aye-see-kay in #2701
• Bump symfony/process from 6.4.26 to 6.4.33 in /examples/stacks/drupal in the composer group across 1 directory by @dependabot[bot] in #2772
• Bump django from 4.2.22 to 4.2.25 in /examples/stacks/django in the pip group across 1 directory by @dependabot[bot] in #2713
• Bump process-compose version to 1.87.0 by @Lagoja in #2777
• Bump minimum Nix version to 2.18 by @Lagoja in #2779
• [devbox] update go to 1.25.5 and disable CGO to workaround clang linker error by @savil in #2723
• Nushell support for Global packages by @omerxx in #2743
• Add git plugin by @plopoyop in #2735

New Contributors

• @tm-michael made their first contribution in #2694
• @combinatorist made their first contribution in #2715
• @r00tdaemon made their first contribution in #2712
• @salim-b made their first contribution in #2728
• @ashahba made their first contribution in #2730
• @pstephan-geico-external made their first contribution in #2629
• @abs made their first contribution in #2747
• @yasuaki640 made their first contribution in #2764
• @omerxx made their first contribution in #2743
• @plopoyop made their first contribution in #2735

Full Changelog: 0.16.0...0.17.0-dev