v2026.10.47

Code steps run in a sealed sandbox

29 Oct 2026 · Cloud · Self-hosted · Embed

Security fixes to the JavaScript engine, and every sandbox process is now sealed by the operating system where it can be.

What changed

When you update

GoRunner’s image is private for now. With Docker, sign in to the registry first. On Kubernetes, sign Helm in and give the cluster its pull Secret. See Update for the whole procedure, or Install with Docker and Install on Kubernetes to install this version anew.

# Check the image first: its Digest must be sha256:7ab2467c796133b3d3c47eaf1d68a5e37e224cecc8094a99d3d9d5db8338f0b9
docker buildx imagetools inspect ghcr.io/ralve-org/gorunner-selfhost:v2026.10.47

# Update
./deploy.sh v2026.10.47

helm upgrade gorunner oci://ghcr.io/ralve-org/charts/gorunner --version 2026.10.47 -f values.yaml

Going back

To go back, run ./deploy.sh v2026.10.46. There is no migration, so no flag is needed.