chore(deps): bump @cloudflare/sandbox from 0.7.21 to 0.8.9

[dependabot]

Bumps @cloudflare/sandbox from 0.7.21 to 0.8.9.

Release notes

Sourced from @​cloudflare/sandbox's releases.

@​cloudflare/sandbox@​0.8.9

Patch Changes

• #570 8363119 Thanks @​aron-cf! - Fix unmountBucket() silently succeeding when the FUSE filesystem fails to unmount. The method now checks the fusermount exit code and throws BucketUnmountError on failure, cleans up the mount directory after a successful unmount, and the container image includes the /etc/mtab symlink that fusermount requires.

• #573 cc14fc7 Thanks @​whoiskatrin! - Increase the default gitCheckout() clone timeout to 10 minutes so larger repositories and slower Git remotes do not fail after 2 minutes by default. You can now override the git clone subprocess timeout per call with the cloneTimeoutMs option when a checkout needs more time.

@​cloudflare/sandbox@​0.8.8

Patch Changes

• #571 c5db840 Thanks @​whoiskatrin! - Require @cloudflare/containers 0.3.0 so sandbox apps pick up the latest Containers platform updates.

@​cloudflare/sandbox@​0.8.7

Patch Changes

• #565 ffcbd3a Thanks @​whoiskatrin! - Require @cloudflare/containers 0.2.3 or newer.

• #550 1db32ea Thanks @​scuffi! - Setting interceptHttps = true on your Sandbox will now automatically trust the Cloudflare-injected CA certificate at container startup, enabling outbound HTTPS traffic interception.

@​cloudflare/sandbox@​0.8.6

Patch Changes

• #557 f17045b Thanks @​AshishKumar4! - Fix startup deadlock when using WebSocket transport.

  Sandboxes that call exec() or other SDK methods inside onStart() could get stuck in an infinite timeout loop, requiring a restart. This is now handled automatically.

@​cloudflare/sandbox@​0.8.5

Patch Changes

• #559 b42a57f Thanks @​whoiskatrin! - Allow createBackup() and restoreBackup() to target directories under /app. This makes backups work with custom images that keep application files in /app instead of /workspace.

@​cloudflare/sandbox@​0.8.4

Patch Changes

• #542 eb55c28 Thanks @​dependabot! - Upgrade Go toolchain to 1.25 and update dependencies in the desktop container variant, including a security fix for image processing (CVE-2026-33809).

@​cloudflare/sandbox@​0.8.3

Patch Changes

• #515 bf54f69 Thanks @​Muhammad-Bin-Ali! - Fix slow parallel code context creation. Creating multiple contexts concurrently (e.g. 10 at once) no longer scales linearly with each request — wall time drops from ~5s to ~500ms.

• #493 fdd3efa Thanks @​whoiskatrin! - Add checkChanges() for apps that disconnect and reconnect later but still need to know whether files changed in the meantime.

  Use the returned version in a later call to learn whether a path is unchanged, changed, or needs a full resync. Retained change state lasts for the current container lifetime only.

@​cloudflare/sandbox@​0.8.2

... (truncated)

Commits

• a91e292 Version Packages (#574)
• cc14fc7 Fix git clone timeout controls (#573)
• 8363119 Fix unmountBucket ignoring fusermount failures
• cdc4344 Add unmount verification to bucket mounting E2E test
• 3f57230 Version Packages (#572)
• c5db840 Update @​cloudflare/containers to 0.3.0 (#571)
• 1af9e00 Add TTL to performance tests output (#568)
• 37b6805 Version Packages (#566)
• 1db32ea Trust injected CA certificate on sandbox startup (#550)
• e5e99aa Fix Go base image build failures (#563)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)