Merge upstream main into fix/nsjail-no-cgroup-clone - #4

Merged

TomasPalsson merged 43 commits into

fix/nsjail-no-cgroup-clonefrom

chore/sync-upstream-main

Sep 25, 2026

Commits on Sep 11, 2026

fix: fail denied input downloads once per batch (#177)
danny-avila
authored
3142a2f
fix: preserve retries for transient egress ledger conflicts (#179)
danny-avila
authored
794df9e
perf: reuse authorized input versions and make egress accounting atomic (#180)
danny-avila
authored
dead07b

Commits on Sep 12, 2026

🧹 fix: Evict Stale File-Object Index Entries (#182)
danny-avila
authored
a992ec0
perf: enable authorized input reuse by default (#183)
danny-avila
authored
c3fd558
fix: honor requested input destinations (#184)
danny-avila
authored
76129e1
fix: disambiguate legacy dotted object identities (#186)
danny-avila
authored
9d3936f
fix: helm egress deployment getting stuck on install (#176)

Ian321
and
danny-avila
authored
3946ffb
feat: Add Trusted VM Command Policy (#187)
danny-avila
authored
8a90f6d

Commits on Sep 13, 2026

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 18, 2026

ci: Fix Release Version Resolution for Untagged and Resumed Runs (#233)

authored
fd9a4fa

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 23, 2026

feat(code): route trusted VM GitHub App tokens by checkout (#248)
danny-avila
authored
67d75d8

Commits on Sep 24, 2026

Merge upstream main into fix/nsjail-no-cgroup-clone
busla
committed
eae2de7