Agentic Sandbox v2026.6.5

Agentic Sandbox v2026.6.5

Released: 2026-06-15 Tag: `v2026.6.5` Previous: `v2026.6.4` (2026-06-15) Compare: `v2026.6.4...v2026.6.5`

What this release is

v2026.6.5 is the packaged release pipeline cut with the GHCR latest-tag mirror fix needed for publication from Gitea Actions. It keeps the native package, installer, GHCR, and mutsu release scope from `v2026.6.4`.

Highlights

  • Native Linux packages (#479): tag CI builds `.deb` and `.rpm` assets for

x86_64 Linux with package-managed binaries, env templates, and systemd units.

  • Checksum-verifying installer (#480): `agentic-sandbox-install.sh`

resolves latest or pinned releases, verifies package checksums, supports local package validation, and smoke-checks installed commands.

  • Public GHCR packages (#478): release CI mirrors the runtime image set to

`ghcr.io/${GHCR_OWNER:-jmagly}/agentic-sandbox-*`, including `automation-control`, and stamps `latest` from the same release-tagged source image used for the immutable version tag.

  • Apple Silicon host-direct release path (#481): mutsu SSH builds are

release-blocking and smoke-test the `aarch64-darwin` tarball for `sandboxctl` and `agent-client`.

Operator notes

  • Treat `v2026.6.2`, `v2026.6.3`, and `v2026.6.4` as superseded

release-attempt tags.

  • Use `v2026.6.5` for packaged release assets and GHCR image tags.
  • Production tag releases require both `GHCR_TOKEN` and `MUTSU_SSH_KEY`.

Verification

Local release-prep checks:

git diff --check
cargo pkgid --manifest-path management/Cargo.toml   # ...#2026.6.5
cargo pkgid --manifest-path agent-rs/Cargo.toml     # ...#2026.6.5
cargo pkgid --manifest-path cli/Cargo.toml          # ...#2026.6.5
tests/release/test-ghcr-matrix.sh
tests/package/test-install-script.sh
tests/package/smoke-linux-packages.sh --required

Post-tag publication proof:

scripts/verify-release-assets.sh v2026.6.5
  • #478 closes only after tag CI proves GHCR publication and smoke checks.
  • #479 closes only after tag CI attaches native package assets and checksums.
  • #480 closes only after the installer is verified from a real GitHub mirror

release URL.

  • #481 closes only after tag CI proves the mutsu Apple Silicon host-direct

tarball smoke.

  • #462 closes after the release matrix proof for #478, #479, #480, and #481 is

captured.