2026.16

What’s Changed

API

Bug fixes

• Add FK to active builds to prevent leaks by @jakubno in #2376
• Fix stale sandboxes stuck in killing state by @jakubno in #2388

---

Orchestrator

Features

• Add rootfs usage rate limits and observability by @dobrac in #2349
• Add cloud provider awareness to provisioning scripts by @tvi in #2380
• Add CA bundle propagation to sandbox trust store on init by @sitole in #2325
• Add GCS Anywhere Cache support for template bucket by @ValentaTomas in #2382

Improvements

• Simplify build mapping resolution by @ValentaTomas in #2318
• Add retry with exponential backoff for UFFD slice errors by @jakubno in #2389

Performance

• Use value slices instead of pointer slices in BuildMap by @levb in #2319
• Replace sync.Map with atomic bitmap for dirty tracking by @levb in #2235
• Pool NBD dispatch buffer by @ValentaTomas in #2379
• Replace bitset with roaring bitmaps by @ValentaTomas in #2386

Bug Fixes

• Raise kernel I/O timeout above backend fetch timeout to prevent EIO by @jakubno in #2342
• Fix race condition in acquire during snapshotting by @jakubno in #2354
• Extend template cache TTL based on sandbox lifetime by @ValentaTomas in #2358
• Cancel gRPC stream contexts to prevent goroutine leaks by @ValentaTomas in #2362

---

Dashboard API

Features

• Add Supabase auth users sync background runner by @ben-fornefeld in #2247
• Add user/team provisioning handlers by @ben-fornefeld in #2335

Improvements

• Expose created_at in /teams response by @devin-ai-integration in #2357

---

Redis

Improvements

• Use max connection time instead of idle time and reduce idle connections by @jakubno in #2374

---

Sandbox Runtime (envd)

Improvements

• Require updated envd version for NFS support by @djeebus in #2385

---

New Contributors

• @tvi made their first contribution in #2359

---

Full Changelog:
2026.15...2026.16