2026.22

What’s Changed

API

Performance

• Wake reservation waiters through Redis pub/sub instead of 20ms polling by @jakubno in #2729

Improvements

• Add kill_reason to sandbox.lifecycle.killed observability events by @rguliyev in #2833
• Enforce blocked teams through allowlist-based flow by @drankou in #2757

---

Dashboard API

Improvements

• Use auth metadata for default team names by @ben-fornefeld in #2775
• Remove Supabase auth sync migrations and billing enable flag by @ben-fornefeld in #2784

---

Authentication & Identity

Improvements

• Allow HTTP OIDC issuers on loopback hosts by @tvi in #2812

---

Orchestrator

Performance

• Deduplicate dirty pages between memory diff and base layer by @bchalios in #2590
• Run dedup page writes asynchronously by @ValentaTomas in #2814
• Run dedup compare asynchronously by @ValentaTomas in #2818
• Allocate NormalizeMappings result slices at exact size by @ValentaTomas in #2822

Improvements

• Improve compression handling by @ValentaTomas in #2803

Bug Fixes

• Remove unnecessary empty Content-Type header from envd PostInit handler by @AdaAibaby in #2800
• Resolve UFFD prefault/close race condition by @kalyazin in #2830

---

Sandbox Runtime

Features

• Freeze user cgroups across pause/resume to keep envd /init responsive by @ValentaTomas in #2688

---

New Contributors

• @AdaAibaby made their first contribution in #2800
• @rguliyev made their first contribution in #2833

---

Full Changelog:
2026.21...2026.22