All pull requests

Pull requests

• fix(install): preserve literal dots in RPM asset fallback

  #5129·vineethsai7 opened Nov 2, 2026·4 of 6 tasks·

  ·
  1

  2

• fix(vm): select sandbox account from the active image layout

  #5128·vineethsai7 opened Nov 2, 2026·4 of 6 tasks·

  ·
  1

  2

• fix(vm): report local image export progress and avoid staging copy

  #5127·vineethsai7 opened Nov 2, 2026·5 of 6 tasks·

  ·
  1

  2

• fix(gateway): keep VM driver alive during Ctrl+C shutdown

  #5126·vineethsai7 opened Nov 2, 2026·5 of 6 tasks·

  ·
  5

• feat(compute)!: bind admitted policy to launch generations

  test:e2e
  #5121·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• feat(policy): admit backend filesystem prerequisites before launch

  test:e2e
  #5120·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• feat(compute)!: distinguish hard limits from sampled budgets

  test:e2e
  #5119·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• fix(supervisor): report bounded backend startup failures

  test:e2e
  #5118·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  3

• fix(compute): preserve protobuf configuration integers

  test:e2e
  #5117·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  1

• feat(compute)!: admit service ports before provisioning

  test:e2e
  #5116·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• fix(forward): reject invalid TCP targets before local bind

  test:e2e
  #5115·shiju-nv opened Nov 2, 2026Collaborator·5 of 6 tasks·

  ·
  1

  1

• fix(gateway): warn in preflight when unauthenticated users are allowed

  #5105·ericcurtin opened Nov 2, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• fix(network): normalize IPv4-mapped transparent TCP destinations

  #5101·FrostGod opened Nov 1, 2026Collaborator·6 tasks done·

  ·
  1

  2

• fix(vm): keep the guest root readable under a private umask

  #5099·ericcurtin opened Nov 1, 2026Contributor·4 of 6 tasks·

  ·
  1

  2

• fix(policy): let host endpoints take precedence over hostless allowed_ips rules

  #5088·purp opened Oct 31, 2026Collaborator·5 of 6 tasks·

  ·
  1

  2

• feat(middleware): define the HTTP hooks API contract

  #5087·pimlock opened Oct 30, 2026Collaborator·4 of 5 tasks·

  ·
  3

• feat(observability): verify OTLP collectors with a configured CA and client certificate

  area:computearea:docsarea:gatewayarea:supervisortopic:observabilitytopic:security
  #5084·krishicks opened Oct 30, 2026Collaborator·4/4·6 of 7 tasks·

  ·
  1

  18

• feat(observability): send configured headers to every OTLP collector

  area:computearea:docsarea:gatewayarea:supervisortopic:observability
  #5083·krishicks opened Oct 30, 2026Collaborator·3/4·6 of 7 tasks·

  ·
  1

  15

• feat(observability): export OTLP over HTTP/protobuf to any collector

  area:computearea:docsarea:gatewayarea:supervisortopic:observability
  #5082·krishicks opened Oct 30, 2026Collaborator·2/4·6 of 7 tasks·

  ·
  12

• fix(sdk/ts): revoke forward tokens on close

  #5079·ericcurtin opened Oct 30, 2026Contributor·4 of 6 tasks·

  ·
  1

  5

• test(e2e): run the testkit conformance suite in the host lanes

  test:e2e
  #5078·matthewgrossman opened Oct 30, 2026Member·4 of 6 tasks·

  ·
  8

• fix(supervisor): stop a pool sandbox whose supervisor is gone past its recovery deadline

  #5076·FrostGod opened Oct 30, 2026Collaborator·6 of 7 tasks·

  ·
  2

• fix(server): budget SSH relays and service forwards separately

  #5063·ericcurtin opened Oct 30, 2026Contributor·5 of 6 tasks·

  ·
  1

  2

• feat(server): keep pool sandbox sessions on their supervisor's gateway

  #5052·FrostGod opened Oct 29, 2026Collaborator·2 tasks done·

  ·
  1

  6

• fix(vm): keep the compute driver socket under sun_path

  #5050·ericcurtin opened Oct 29, 2026Contributor·5 of 6 tasks·

  ·
  1

  2