New features
Per-role storage URLs for self-hosted deploymentsSelf-hosted deployments can now point templates and the build cache at different storage backends by settingTEMPLATE_STORAGE_URL and BUILD_CACHE_STORAGE_URL to full destination URLs, including s3://, gs://, and file:// schemes. Existing bucket and provider environment variables continue to work unchanged. (#3246)Updates
Compressed uploads for AWS storageSelf-hosted deployments backed by AWS S3 can now upload template layers with the same compressed transfer path already used for other providers, cutting bandwidth on large template builds. (#3232)Bug fixes
- Fixed an issue where a resumed sandbox could silently drop outbound traffic until its network cache re-resolved, causing stalled connections right after resume. (#3271)
- Fixed a rare deadlock in sandbox command execution where cancelling a request while a command was starting could leave the call hung. (#3256)
- Fixed template build failures caused by incorrect compressed uploads and cache handling for template layers. (#3231)
- Fixed an issue where creating a template could fail with a stale lock error when a previous build had exited without cleaning up. (#3217)
- Fixed template builds unpacking OCI image layers so that whiteouts and permissions match the behavior of the Docker daemon. (#3215)
- Fixed an issue where a sandbox could remain accounted for after being removed, keeping it in the paused list until the next reconciliation. (#3199)
- Reliability and security hardening across platform services, including dependency and base image CVE patches.