2026.17

What’s Changed

API

Features

Improvements

• Add descriptive errors for missing template tag or alias by @dobrac in #2479
• Add allow_internet_access to sandbox network endpoint by @levb in #2433

Bug Fixes

• Skip kill after waiting for pause to complete by @jakubno in #2412
• Correct error log message in RemoveSandbox by @jakubno in #2449

---

Orchestrator

Improvements

• Restructure GCS read retries with fresh context per attempt by @arkamar in #2405
• Add build cache observability by @jakubno in #2279
• Re-enable memory.peak per-FD reset (cgroups v2) by @arkamar in #2430
• Replace sandbox state machine with live/network maps by @jakubno in #2453
• Delay network slot return by 3s by @jakubno in #2469

Bug Fixes

• Propagate NBD dispatch errors by @dobrac in #2424
• Resolve StorageDiff hang when init fails by @dobrac in #2408
• Handle UFFD “no such process” errors by @jakubno in #2352
• Prevent send-on-closed-channel panic in network pool by @jakubno in #2480
• Resolve Firecracker version via feature flag in template builder by @jakubno in #2484

---

Sandbox Runtime (envd)

Improvements

• Remount volumes on resume by @djeebus in #2407
• Retry envd service indefinitely via systemd by @arkamar in #2485

Bug Fixes

• Fix temp dir cleanup race by @sitole in #2410

---

Dashboard API

Improvements

• Reduce Supabase connection pool size by @ben-fornefeld in #2422
• Remove user-team provision triggers by @ben-fornefeld in #2421
• Isolate dashboard-only columns from main sqlc package by @dobrac in #2474

Bug Fixes

• Bootstrap users with admin token only by @ben-fornefeld in #2414

---

Infrastructure

Features

• Update base image to Ubuntu 24 by @jakubno in #2427
• Make Redis a required infrastructure component by @djeebus in #2348, #2473

Improvements

• Parameterize ClickHouse disk type and size by @jakubno in #2465
• Tune ClickHouse async-insert profile by @jakubno in #2468
• Add TTL-only drop parts to ClickHouse tables by @jakubno in #2371
• Add AWS/GCP load balancer trace ID propagation by @sitole in #2492

Bug Fixes

• Fix AWS IMDSv2 requirement for metadata access by @chux0519 in #2452
• Always associate public IP for AWS Packer builds by @sitole in #2489
• Fix AWS prefix handling in IaC by @sitole in #2491

Dependencies

• Bump Go version to 1.25.9 by @djeebus in #2438

---

New Contributors

• @chux0519 made their first contribution in #2452

---

Full Changelog:
2026.16...2026.17