deploy: bump sandbox-controller image to 4ac1db1

deploy: bump sandbox-mcp-server image to 4ac1db1
deploy(bp-newapi): bump bootstrap-kit pin 1.4.31 -> 1.4.32 (auto, Refs TBD-A6)
2026-05-20 01:57:50 +00:00 · 2026-05-20 01:56:19 +00:00 · 2026-05-20 01:55:41 +00:00
3 changed files with 4 additions and 4 deletions
--- a/clusters/_template/bootstrap-kit/80-newapi.yaml
+++ b/clusters/_template/bootstrap-kit/80-newapi.yaml
@ -167,7 +167,7 @@ spec:
      # bp-sandbox 0.3.2 which mounts SIGNING_KEY as the MCP's
      # `SANDBOX_JWT_SECRET` env (closes auth-gate-stays-in-test-mode
      # silent-breakage).
-      version: 1.4.31
+      version: 1.4.32
      sourceRef:
        kind: HelmRepository
        name: bp-newapi
--- a/platform/newapi/blueprint.yaml
+++ b/platform/newapi/blueprint.yaml
@ -6,7 +6,7 @@ metadata:
    catalyst.openova.io/category: ai-runtime
    catalyst.openova.io/section: pts-4-6-llm-serving
 spec:
-  version: 1.4.31
+  version: 1.4.32
  card:
    title: NewAPI
    summary: |
--- a/platform/sandbox/chart/values.yaml
+++ b/platform/sandbox/chart/values.yaml
@ -12,7 +12,7 @@ fullnameOverride: ""
 replicas: 1
 image:
  repository: ghcr.io/openova-io/openova/sandbox-controller
-  tag: "8d8ce40"
+  tag: "4ac1db1"
  pullPolicy: IfNotPresent
  pullSecrets:
    - name: ghcr-pull
@ -82,7 +82,7 @@ runtime:
  # .github/workflows/build-sandbox-mcp-server.yaml. 1b0e86c is the
  # last pre-#1658 green build; the rebuilt workflow (repo-root context)
  # will land the next real SHA on the next push to main.
-  mcpImage: "ghcr.io/openova-io/openova/sandbox-mcp-server:0ee94cb"
+  mcpImage: "ghcr.io/openova-io/openova/sandbox-mcp-server:4ac1db1"
  # Sovereign LLM gateway endpoint (newapi-proxy-contract.md §1).
  # Bootstrap-kit overlay sets `https://newapi.${SOVEREIGN_FQDN}/v1`.
  newapiURL: ""
Author	SHA1	Message	Date
github-actions[bot]	749519fa12	deploy: bump sandbox-controller image to `4ac1db1` Some checks are pending Vendor-coupling guardrail / Vendor-coupling guardrail (push) Waiting to run Details Cluster bootstrap-kit drift guardrail / Detect bootstrap-kit drift (push) Waiting to run Details Playwright UI smoke (Group L — / Playwright UI smoke (push) Waiting to run Details Test — Bootstrap Kit (kind cluster + Flux) / dependency-graph-audit (push) Waiting to run Details Test — Bootstrap Kit (kind cluster + Flux) / pin-sync-audit (push) Waiting to run Details Test — Bootstrap Kit (kind cluster + Flux) / manifest-validation (push) Blocked by required conditions Details Test — Bootstrap Kit (kind cluster + Flux) / kind-reconciliation (push) Blocked by required conditions Details	2026-05-20 01:57:50 +00:00
github-actions[bot]	c7db557055	deploy: bump sandbox-mcp-server image to `4ac1db1`	2026-05-20 01:56:19 +00:00
hatiyildiz	f19df1410a	deploy(bp-newapi): bump bootstrap-kit pin 1.4.31 -> 1.4.32 (auto, Refs TBD-A6) Also locksteps platform blueprint.yaml spec.version 1.4.31 -> 1.4.32 (Refs TBD-A20, #1856).	2026-05-20 01:55:41 +00:00