Features
- sealed (cache_only) mode for air-gapped deployments (#606 part 3) (#623)
- bulk warm endpoint + UI (#606 part 2) (#622)
- operator-overridable version-index sources for binary cache (#606 part 1) (#616)
- clickable Health Issues indicator filters to unhealthy workspaces (#615)
- verify upstream checksums + signatures (cache + runner) (#607) (#611)
Bug Fixes
- close sealed-mode upstream leak paths + air-gap docs (v0.49.0 pre-release) (#624)
Maintenance
- config-channel contract — non-sensitive config via ConfigMap, not env (#617) (#618)
- suppress 4 test-only Semgrep false positives (#621)
- exclude services/ai_eval from code scanning (#613)
Other Changes
- deps(web): bump @types/node 26.0.0→26.0.1 + lucide-react 1.21.0→1.22.0 (#612)
- deps(ci): bump golangci/golangci-lint-action from 8 to 9 (#608)
Full Changelog: v0.48.0...v0.49.0