2026.28

What's Changed

API

Features

• Add per-team sandbox events TTL limits based on tier and addons by @jakubno in #3181
• Discover orchestrators via Nomad services by @wj-e2b in #3176

Improvements

• Add a feature flag to stop accepting E2B access tokens by @tvi in #3240
• Parse multiple SDK user agents during builder checks by @matthewlouisbrockman in #3149

Bug Fixes

• Handle corrupted sandbox stop times by @jakubno in #3203
• Prevent uint64 underflow in node allocated metrics by @jakubno in #3216
• Heal sandboxes missing from the eviction index by @jakubno in #3199

---

Orchestrator

Features

• Add support for compressed uploads to AWS storage by @dobrac in #3113

Improvements

• Add -force-reboot to resume-build for cold-booting memory snapshot builds by @arkamar in #3208
• Introduce a shared compressed upload framework and storage limiter by @dobrac in #3232

Bug Fixes

• Unpack OCI layers in a chroot, matching Docker daemon behavior by @jakubno in #3215
• Fix compressed upload and cache correctness issues by @dobrac in #3231

---

Storage

Improvements

Bug Fixes

Testing

• Add server-backed GCS storage tests using Testcontainers by @dobrac in #3233

---

Sandbox runtime (envd)

Improvements

• Use constant-time comparison for signature validation by @AdaAibaby in #3145

Bug Fixes

• Use WithoutCancel for the CA cleanup goroutine context by @arkamar in #3207
• Stop misleading CA installation cancellation errors during rapid /init calls by @arkamar in #3206

---

Full Changelog:
2026.27...2026.28