chore(main): release envd 0.7.0

[e2b-release-please]

🤖 I have created a release beep boop

0.7.0 (2026-08-01)

Features

• envd: add --no-cgroups flag to disable cgroup management (#2811) (e10814c)
• envd: add optional EntryInfo to watch FilesystemEvent (#2930) (bbbc7c8)
• envd: allow opting into watching network mounts (#2982) (9799dd0)
• envd: split collapse stats into real migrations vs already-huge (#3021) (0d77614)
• envd: support user-defined file metadata via xattrs (#2732) (da8fbe4)
• freeze user cgroup across pause/resume to keep envd /init responsive (#2688) (eceb741)
• orch: collapse envd's heap into 2 MiB hugepages before pause to cut cold-resume faults (#2997) (6677f73)
• orch: distro-aware template base-image provisioning (#3411) (f8c7b5b)

Bug Fixes

• added envd to artifact repository (#3432) (6c4f0e2)
• correct 3 CVES (#3218) (076823b)
• envd: avoid Start deadlock after request cancellation (#3256) (04317f8)
• envd: ignore closed pty read errors (#2769) (6118672)
• envd: replace time.Sleep with ticker in ScanAndBroadcast for prompt shutdown (#3374) (002fd9f)
• envd: stop freezing socat cgroup across pause/resume (#2923) (8b6f2b9)
• envd: stop misleading CA install cancel errors on rapid /init (#3206) (91d09e4)
• envd: tolerate busy tmpfs cleanup in tests (#2938) (a485834)
• envd: use constant-time comparison for signature validation (#3145) (fcf92fa)
• envd: use WithoutCancel for CA cleanup goroutine ctx (#3207) (ee7bf84)

Performance Improvements

• envd: stop logging streamed payload content (#2755) (db3868c)

---

This PR was generated with Release Please. See documentation.

[codecov]

❌ 2 Tests Failed:

Tests completed	Failed	Passed	Skipped
3736	2	3734	9

View the full list of 2 ❄️ flaky test(s)

github.com/e2b-dev/infra/tests/integration/internal/tests/api/templates::TestTemplateBuildDistroFamilies

Flake rate in main: 18.80% (Passed 95 times, Failed 22 times)

Stack Traces | 0s run time

=== RUN   TestTemplateBuildDistroFamilies
=== PAUSE TestTemplateBuildDistroFamilies
=== CONT  TestTemplateBuildDistroFamilies
--- FAIL: TestTemplateBuildDistroFamilies (0.00s)

github.com/e2b-dev/infra/tests/integration/internal/tests/api/templates::TestTemplateBuildDistroFamilies/Arch

Flake rate in main: 17.39% (Passed 95 times, Failed 20 times)

Stack Traces | 300s run time

=== RUN   TestTemplateBuildDistroFamilies/Arch
=== PAUSE TestTemplateBuildDistroFamilies/Arch
=== CONT  TestTemplateBuildDistroFamilies/Arch
    build_template_test.go:159: test-distro-arch: [info] Building template gi1vh0pognps3a16ph5c/45198852-a27b-4782-9169-18f9b83fee4f
    build_template_test.go:159: test-distro-arch: [info] [base] FROM archlinux:base [715034aabba64dcb025b46739c58e97dda26a116731027d92a86dcc0291cfbd7]
    build_template_test.go:159: test-distro-arch: [info] Base Docker image size: 133 MB
    build_template_test.go:159: test-distro-arch: [info] Creating file system and pulling Docker image
    build_template_test.go:159: test-distro-arch: [info] Uncompressing layer sha256:b29eedb0cba68b40ef1c21ad33ace0b0b65e43c800ce9ae3fb885ed388c8ff1f 133 MB
    build_template_test.go:159: test-distro-arch: [info] Uncompressing layer sha256:79c8b8c2b0d09dc3a8ac0a624ff34d637e7d300e2aa444e5daf77dea4d38cdd4 8.7 kB
    build_template_test.go:159: test-distro-arch: [info] Uncompressing layer sha256:486b2cfba2d17f0b3d5430918af50e1e1e0440c658e5e8a175a9167e9b3e7bf4 14 MB
    build_template_test.go:159: test-distro-arch: [info] Uncompressing layer sha256:e216621d8a0a7a4486d6a228759b29bc378eff95e6ea9469854b8624b267dd13 137 B
    build_template_test.go:159: test-distro-arch: [info] Layers extracted
    build_template_test.go:159: test-distro-arch: [info] Root filesystem structure: bin, boot, dev, etc, home, lib, lib64, mnt, opt, proc, root, run, sbin, srv, sys, tmp, usr, var
    build_template_test.go:159: test-distro-arch: [info] Provisioning sandbox template
    build_template_test.go:159: test-distro-arch: [info] Provisioning was successful, cleaning up
    build_template_test.go:159: test-distro-arch: [info] Sandbox template provisioned
    build_template_test.go:159: test-distro-arch: [info] [base] DEFAULT USER user [160a14646197f084356bc50932d931bdd26aa794f1d220052e16f21361a8b928]
    distro_build_test.go:85: 
        	Error Trace:	.../api/templates/build_template_test.go:124
        	            				.../api/templates/distro_build_test.go:85
        	Error:      	Received unexpected error:
        	            	Get "http://localhost:.../builds/45198852-a27b-4782-9169-18f9b83fee4f/status?logsOffset=14&level=info": context deadline exceeded
        	Test:       	TestTemplateBuildDistroFamilies/Arch
--- FAIL: TestTemplateBuildDistroFamilies/Arch (300.16s)

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[claude]

LGTM — this is an automated release-please version bump PR for envd 0.7.0.

What was reviewed: confirmed the three changed files are purely mechanical — .release-please-manifest.json version bump, generated CHANGELOG.md entry, and the matching Version constant in packages/envd/pkg/version.go. All three agree on 0.7.0 and no other files are touched.

Extended reasoning...

Overview

This PR is auto-generated by release-please to cut the envd 0.7.0 release. It touches exactly three files: .release-please-manifest.json (version bump from 0.6.13 to 0.7.0), packages/envd/CHANGELOG.md (new changelog section aggregating already-merged commits), and packages/envd/pkg/version.go (the Version constant, bumped to match, consistent with the CLAUDE.md requirement that this be updated on releases).

Security risks

None. No logic, auth, crypto, or permission-handling code is touched — only version metadata and changelog text.

Level of scrutiny

Minimal scrutiny is appropriate here. This is a mechanical, bot-generated release PR with no hand-written logic changes; the underlying feature/fix commits referenced in the changelog were already reviewed and merged individually.

Other factors

All three modified files are internally consistent (manifest, changelog, and version constant all say 0.7.0). No outstanding review comments exist on this PR, and the bug hunting system found no issues.