Agentic Sandbox v2026.7.9

Agentic Sandbox v2026.7.9

Released: 2026-07-12 Tag: `v2026.7.9` Previous: `v2026.7.8` Compare: `v2026.7.8...v2026.7.9`

What this release is

v2026.7.9 completes the release pipeline that v2026.7.8 left short. The runtime is identical to v2026.7.7/v2026.7.8 — same #633/#634 VM control-channel fixes, same binaries. This bump re-runs the pipeline with a GPG-signing fix so the release ships `.asc` signatures, cosign image signatures, and the SBOM.

v2026.7.8 published binaries and public GHCR images, but its signing job failed: after importing the passphrase-less release key from OpenBao, gpg fell back to an interactive pinentry in the headless runner ("Screen or window too small"). v2026.7.9 forces gpg loopback/batch mode so the key signs directly.

Highlights

  • Complete, signed release: GPG-signed tarballs (`.asc`), cosign-signed

container images, and the SBOM — the pieces v2026.7.8 was missing.

  • CI secrets fully sourced from OpenBao (#635): registry credentials, GHCR

token, GitHub mirror token, docsite deploy key, mutsu SSH key, and the GPG release-signing key are all fetched from the vault at job time via a least-privilege AppRole. Signing identity unchanged (`FE9272F0BC5781E1DE77FAAA719AB63879E84CE8`).

  • CI runtime fixes (#633/#634), unchanged from v2026.7.7.

Upgrade by audience

AudienceAction
Anyone on v2026.7.7 / v2026.7.8Use v2026.7.9 — identical runtime, complete signed artifacts.
VM-runtime operatorsSame as v2026.7.7: redeploy VM agent binaries; restart the management server for the default-on vsock listener.
Release verifiersSignatures use the same key; verify as usual.

Verification

docker pull ghcr.io/jmagly/agentic-sandbox-mgmt:v2026.7.9
gpg --verify agentic-sandbox-v2026.7.9-x86_64-linux-gnu.tar.gz.asc \
             agentic-sandbox-v2026.7.9-x86_64-linux-gnu.tar.gz

Full notes: `CHANGELOG.md` `[2026.7.9]`.