Update CHANGELOG, DEPLOY, and README for v0.4.0 release

- Added multi-region support, custom sandbox environment variables, and webhook secret rotation.
- Introduced per-job metrics emission and a matrix job example workflow.
- Updated documentation for deployment troubleshooting and enhanced README with new features.

Author: manascb1344

CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to this project will be documented in this file.
 
+## [2026-04-25] - v0.4.0
+
+### Added
+- Multi-region support via `MODAL_REGION` environment variable
+- Custom sandbox environment variables via `SANDBOX_EXTRA_ENV` (JSON string)
+- Webhook secret rotation via `WEBHOOK_SECRET_OLD` fallback
+- Per-job metrics emission (`job_complete` logs with duration, GPU, region, error codes)
+- Matrix job example workflow (`.github/workflows/matrix-example.yml`)
+- `Makefile` for local development (deploy, serve, test, lint, logs)
+- Unit tests for GPU parsing, concurrency limits, network config, and health endpoint
+- Comprehensive `CONTRIBUTING.md` with setup, testing, and commit conventions
+
+### Changed
+- Updated `DEPLOY.md` with troubleshooting section and full environment variable reference
+- Updated `README.md` with badges, quickstart, feature/comparison tables, and GPU docs
+- Optimized runner image with `uv_pip_install` and removed unused packages
+
 ## [2025-04-25] - v0.3.0
 
 ### Added

DEPLOY.md

@@ -133,11 +133,14 @@ GitHub retries webhooks when responses are slow or network issues occur. This is
 |----------|----------|---------|-------------|
 | `GITHUB_TOKEN` | Yes | - | GitHub PAT for runner registration |
 | `WEBHOOK_SECRET` | Yes | - | Secret for webhook signature validation |
+| `WEBHOOK_SECRET_OLD` | No | - | Previous secret for seamless rotation |
 | `ALLOWED_REPOS` | No | (all) | Comma-separated allowlist of `owner/repo` |
 | `RUNNER_VERSION` | No | `2.333.1` | GitHub Actions runner version |
 | `RUNNER_GROUP_ID` | No | `1` | Runner group ID |
 | `MAX_CONCURRENT_PER_REPO` | No | (unlimited) | Max concurrent sandboxes per repo |
 | `ALLOWED_CIDRS` | No | (allow all) | Comma-separated CIDR ranges for outbound |
 | `BLOCK_NETWORK` | No | `false` | Fully isolate sandbox network |
 | `CACHE_VOLUME_NAME` | No | - | Modal Volume name for persistent `/cache` mount |
+| `MODAL_REGION` | No | `us-east-1` | Modal region for sandbox deployment |
+| `SANDBOX_EXTRA_ENV` | No | - | JSON string of extra env vars for sandboxes |
 | `GITHUB_ENTERPRISE_DOMAIN` | No | - | Custom domain for GitHub Enterprise |

README.md

@@ -144,6 +144,8 @@ sequenceDiagram
 | `ALLOWED_CIDRS` | No | (allow all) | Comma-separated CIDR ranges for outbound |
 | `BLOCK_NETWORK` | No | `false` | Fully isolate sandbox network |
 | `CACHE_VOLUME_NAME` | No | | Modal Volume name for persistent `/cache` |
+| `MODAL_REGION` | No | `us-east-1` | Modal region for sandbox deployment |
+| `SANDBOX_EXTRA_ENV` | No | | JSON string of extra env vars for sandboxes |
 | `GITHUB_ENTERPRISE_DOMAIN` | No | | Custom domain for GitHub Enterprise |
 
 ## Limitations