v1.840.0

1.840.0 (2026-10-17)

Features

• add a no_network annotation for sandboxed jobs (#11844) (feb7b1a)
• warn at worker startup when WHITELIST_ENVS forwards a secret-shaped variable (#11838) (16c8be2)

Bug Fixes

• keep script and flow deploys off a second pool connection (#11843) (2684156)
• let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows (#11841) (b0c97b3)
• mount python script modules into the nsjail sandbox (#11846) (7a8cb62)
• refuse dot segments in AI proxy paths (#11837) (89f36a7)
• run bun and npm installs under nsjail sandboxing (#11845) (6646c86)
• scope delete_jobs side-table deletes to the request workspace (#11836) (09a5911)
• skip the fork lock when a fork creation has no storage to purge (#11842) (0b54ebc)

Performance Improvements

• clone sqlx test databases from a migrated template (#11848) (4ed6c1a)