All pull requests

Pull requests

• test(e2e): hold the pod in Pending so the Sandbox Pending phase is observable

  size/S
  #1154·NopeCharon opened Oct 31, 2026·

  ·
  2

  3

• fix(identity): read the root key from a file mount, not a Secret

  size/L
  #1153·AnshulPatil2005 opened Oct 30, 2026Contributor·

  ·
  2

• feat(mountpath): allow deployments to tune protected mount paths

  size/L
  #1152·BH4AWS opened Oct 30, 2026Contributor·

  ·
  2

• feat(identity): mint principal tokens from the existing issuer

  size/XL
  #1151·AnshulPatil2005 opened Oct 30, 2026Contributor·

  ·
  2

• fix(sandbox): stop replaying pod identity labels from templates

  size/L
  #1150·BH4AWS opened Oct 29, 2026Contributor·

  ·
  2

• build(deps): bump github/codeql-action/upload-sarif from 4.38.1 to 4.38.3

  dependenciesgithub_actionssize/XS
  #1148·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• build(deps): bump github/codeql-action/init from 4.37.3 to 4.38.3

  dependenciesgithub_actionssize/XS
  #1147·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• build(deps): bump github/codeql-action/analyze from 4.37.3 to 4.38.3

  dependenciesgithub_actionssize/XS
  #1146·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• build(deps): bump github/codeql-action/autobuild from 4.37.3 to 4.38.3

  dependenciesgithub_actionssize/XS
  #1145·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• build(deps): bump ruby/setup-ruby from 1.323.0 to 1.329.0

  dependenciesgithub_actionssize/XS
  #1144·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• build(deps): bump helm/kind-action from 1.15.0 to 1.15.1

  dependenciesgithub_actionssize/S
  #1143·dependabot[bot] opened Oct 28, 2026Bot·

  ·
  1

• feat(checkpoint): capture volumes and container mounts in BuildPodTemplateDelta function

  size/XL
  #1141·BH4AWS opened Oct 28, 2026Contributor·

  ·
  2

• docs(proposals): add SandboxUpdateOps InstallerUpdate strategy

  size/XXL
  #1140·furykerry opened Oct 28, 2026Member·

  ·
  2

• fix(sandboxset): roll SandboxSet when its referenced SandboxTemplate changes

  size/L
  #1138·Srijan76-code opened Oct 27, 2026·

  ·
  1

  2

• fix(cli): resolve okactl namespace from the kubeconfig context

  size/L
  #1136·abhiiiiiii-21 opened Oct 27, 2026·

  ·
  1

  3

• fix(webhook): reject SandboxSet names that do not fit a label value

  size/L
  #1134·Srijan76-code opened Oct 27, 2026·

  ·
  1

  3

• docs(proposal): revise dynamic env injection for warm-pool semantics

  size/XXL
  #1130·Luckydog691 opened Oct 27, 2026Contributor·

  ·
  7

• feat(sandbox-manager): rename result counters to sandbox<op>total

  size/XXL
  #1128·KeyOfSpectator opened Oct 26, 2026Contributor·

  ·
  5

• feat(api): add SecurityProfile TLS connection action

  size/XL
  #1125·Kuromesi opened Oct 26, 2026Contributor·

  ·
  2

• feat(template): add Kubernetes logical template lifecycle

  size/XXL
  #1121·ywExcellent opened Oct 26, 2026Contributor·

  ·
  2

• fix(e2b): reject network.dnsServers instead of silently ignoring it

  size/L
  #1120·Ishaan400 opened Oct 24, 2026·

  ·
  1

  4

• feat(e2b): support renaming api keys with PATCH

  size/L
  #1119·abhiraj75 opened Oct 24, 2026·

  ·
  1

  3

• feat(identity): add the agent authorization module

  size/XL
  #1118·AnshulPatil2005 opened Oct 24, 2026Contributor·

  ·
  2

• build(deps): bump github.com/redis/go-redis/v9 from 9.20.1 to 9.23.0

  dependenciesgosize/M
  #1108·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1

• build(deps): bump github.com/envoyproxy/envoy from 1.37.3 to 1.39.3

  dependenciesgosize/S
  #1107·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1