2026.11

What’s Changed

API

Features

• Add SQL command to connect to builds (copy-build) by @jakubno in #2098
• Label-based sandbox scheduler by @sitole in #2066

Improvements

• Add request context timeout and reorder middleware by @dobrac in #2109
• Move logging middleware before auth check by @matthewlouisbrockman in #2117
• Simplify sandbox removal logic by @jakubno in #2016
• Make DB connection pool size configurable via env vars by @dobrac in #2081
• Optimize list query performance by @dobrac in #2085

---

Orchestrator

Improvements

• Suppress Firecracker FlushMetrics log spam by @dobrac in #2064
• Decrease healthcheck failed log level by @jakubno in #2111
• Move Firecracker version feature flag by @jakubno in #2030

Bug Fixes

• Validate seekable read ranges by @dobrac in #2071
• Fix TOCTOU race in StreamingChunker.getOrCreateSession by @levb in #2083
• Fix error resolving sandbox for source address by @jakubno in #2087

---

Sandbox Runtime (envd)

Features

• Add composite file upload API by @mishushakov in #2043

Bug Fixes

• Handle file-not-found cases in envd by @matthewlouisbrockman in #2062

---

Volumes

Features

• Add depth parameter support by @djeebus in #2102

---

Infrastructure

Improvements

• Add additional 120s for Consul when VM health check passes by @sitole in #2058
• Increase LB backend timeouts by @ValentaTomas in #2072
• Increase DNS wait timeout for start-client from 10s to 60s by @sitole in #2077

---

Full Changelog:
2026.10...2026.11