Agentic Sandbox v2026.7.1

Released: 2026-07-02 Tag: `v2026.7.1` Previous: `v2026.7.0` Compare: `v2026.7.0...v2026.7.1`

What this release is

v2026.7.1 is a release-publication recovery cut for v2026.7.0. It keeps the July runtime hardening payload unchanged and fixes the tag workflow resource pressure that prevented x86_64 management tarballs and Linux packages from publishing in the v2026.7.0 run.

Highlights

Release artifact recovery: release tarball and Linux package builds now

use lower Cargo parallelism on tag workflows so the shared Gitea/act runner is not saturated while Docker, E2E, and release artifact jobs run together.

Validated July payload: the v2026.7.0 tag run passed prerelease

validation, lint, tests, build, Docker, security scan, and live E2E before artifact publication failed.

Use this tag: v2026.7.1 supersedes v2026.7.0 for July release consumers.

Install / upgrade

curl -fsSL https://github.com/jmagly/agentic-sandbox/releases/download/v2026.7.1/agentic-sandbox-install.sh \
  | bash -s -- --version v2026.7.1

Direct package installs:

sudo apt-get install ./agentic-sandbox_2026.7.1-1_amd64.deb
sudo dnf install ./agentic-sandbox-2026.7.1-1.x86_64.rpm

Verification

After publication, verify the release assets:

scripts/verify-release-assets.sh v2026.7.1 --skip-ghcr

Public container verification should confirm all GHCR images exist without an active `ghcr.io` Docker login:

for image in \
  agentic-sandbox-mgmt \
  agentic-sandbox-agent-client \
  agentic-sandbox-agent \
  agentic-sandbox-claude \
  agentic-sandbox-codex \
  agentic-sandbox-opencode \
  agentic-sandbox-automation-control; do
  docker pull ghcr.io/jmagly/${image}:v2026.7.1
done

Notes

v2026.7.0 was tagged and pushed, but release artifact jobs failed before

release attachment. v2026.7.1 is the roll-forward publication tag.

Runtime and operator changes are otherwise the same as

`v2026.7.0`.