2026.27

What's Changed

API

Features

• Limit template build names to 128 characters by @mishushakov in #3109
• Gate access token issuance behind a feature flag by @Kraci in #3101
• Soft-delete build layers in the database when a user is deleted by @ValentaTomas in #3121
• Filter snapshots by name by @mishushakov in #3184
• Add per-team TTL support for sandbox_events by @jakubno in #3179

Improvements

• Deprecate access token authentication in the OpenAPI specification by @huv1k in #3084

Bug Fixes

• Use the correct error variable in processCustomErrors by @AdaAibaby in #3135
• Prevent WrapContextAsUserError from misclassifying internal timeouts as user cancellations by @AdaAibaby in #3155

---

Dashboard

Features

• Add a LaunchDarkly-gated ClickHouse read switcher by @rguliyev in #3111
• Flag sandboxes that are past data retention by @huv1k in #3102

Bug Fixes

• Set Ory external_id only after the bootstrap commit by @drankou in #3133

---

Orchestrator

Features

• List slot namespaces by @wj-e2b in #3089
• Add startup resource reclaim package by @wj-e2b in #3090
• Tag envd-init metrics with start_type by @arkamar in #3125
• Run startup reclaim on boot by @wj-e2b in #3123
• Use a single-instance flock during startup by @wj-e2b in #3143
• Add a soft-delete marker label to the check metric by @ValentaTomas in #3144
• Write layer size metadata (logical, mapped, diff) to object metadata by @ValentaTomas in #3122
• Add a LaunchDarkly-gated ClickHouse write fan-out feature flag by @rguliyev in #3152
• Classify envd-init metrics by exit type by @arkamar in #3139
• Report hugepage metrics to the API by @jakubno in #3182

Improvements

• Share sandbox artifact names across components by @wj-e2b in #3117
• Introduce StartType for sandbox start types by @arkamar in #3124
• Add additional storage logging by @jakubno in #3126
• Add OpenTelemetry instrumentation to the AWS S3 storage client by @dobrac in #3172

Bug Fixes

• Sanitize OCI pull errors by @dobrac in #3096
• Log missing egress proxy during startup reclaim instead of silently defaulting by @wj-e2b in #3116
• Scope rootfs hashes to the provision default by @dobrac in #3129
• Start envd.service after systemd-tmpfiles-setup by @dobrac in #3130
• Deschedule a flaky eviction-loop race in tests by @wj-e2b in #3173
• Allow the build-cache threshold flag to exceed its fallback value by @wj-e2b in #3175
• Fix chunk readiness in P2P → compressed transitions by @levb in #3185
• Revert the legacy-ancestor pending diff header change by @levb in #3141
• Fix upload metadata path races by @dobrac in #3115
• Fix runaway blob file_type metric attribute values by @levb in #3150

---

NFS cleanup

Improvements

• Rewrite clean-nfs-cache to reduce memory usage and improve statistics by @levb in #3118

Bug Fixes

• Exclude zombie entries from clean-nfs-cache delete age calculations by @levb in #3191

---

New Contributors

• @Kraci made their first contribution in #3101

---

Full Changelog:
2026.26...2026.27