2026.29

What’s Changed

API

Features

• Add sandbox fork endpoint by @mishushakov in #3202

Improvements

• Simplify local sandbox routing logic by @jakubno in #3253
• Use standard kid field for key identification by @djeebus in #3234

---

Dashboard

Features

• Map Ory SSO organizations to E2B teams by @ben-fornefeld in #3094

Improvements

• Clean up provisioning and identity packages by @ben-fornefeld in #3189

---

Orchestrator

Features

• Ensure requested free disk space before finalizing template builds by @gm-e2b in #3249
• Add NetworkAssignHook for sandbox lifecycle extensions by @rguliyev in #3290
• Add per-role storage URLs and an environment-independent storage library by @dobrac in #3246

Improvements

• Serialize sandbox updates by @jakubno in #3250
• Trace slow disk resize operations during template builds by @gm-e2b in #3298

Bug Fixes

• Pin TAP device host-side MAC address by @rguliyev in #3271
• Measure ext4 free space from block groups by @gm-e2b in #3282
• Implement Docker COPY merge semantics in template builds by @mishushakov in #3283

---

Sandbox Runtime (envd)

Bug Fixes

• Avoid Start deadlock after request cancellation by @arkamar in #3256
• Never report failed envd command streams as successful by @arkamar in #3281

Improvements

• Make MultiplexedChannel.Fork return a receive-only channel by @arkamar in #3257

---

Full Changelog:
2026.28...2026.29