1.840.0 (2026-10-17)
Features
- add a no_network annotation for sandboxed jobs (#11844) (feb7b1a)
- warn at worker startup when WHITELIST_ENVS forwards a secret-shaped variable (#11838) (16c8be2)
Bug Fixes
- keep script and flow deploys off a second pool connection (#11843) (2684156)
- let ALLOW_PRIVATE_AI_BASE_URLS name the private hosts it allows (#11841) (b0c97b3)
- mount python script modules into the nsjail sandbox (#11846) (7a8cb62)
- refuse dot segments in AI proxy paths (#11837) (89f36a7)
- run bun and npm installs under nsjail sandboxing (#11845) (6646c86)
- scope delete_jobs side-table deletes to the request workspace (#11836) (09a5911)
- skip the fork lock when a fork creation has no storage to purge (#11842) (0b54ebc)