[quickbeard]

Three commits:

chore: bump version to 1.18.4-10 — fork-only revision bump 1.18.4-9 → 1.18.4-10, per Bumping the version. Ran bun bump, which rewrote every workspace manifest in lockstep and regenerated bun.lock. No DIVERGENCES.md entry needed: the version field already defers to upstream on sync.

docs: link every unreleased changelog entry to its PRs — the 78 ## Unreleased entries carried no PR links (every released section already had them). Each entry is now linked to the PR whose commit introduced it, found by pickaxing the entry title through CHANGELOG.md's history, in the existing ([#N](…), [#N](…)) style. Five entries describe work spanning PRs that shipped no entry of their own and are linked to all of them:

• The update feed moved — feat(desktop): let the user decide when CoDev updates itself #265, feat(desktop): mirror each release to a stable bucket prefix #270
• The office skills now work inside a sandbox — fix(sandbox): build the guest image from the office bundle's proven versions #242, fix(sandbox): make the office node modules loadable in every guest #278
• Sandboxes can mount more folders after creation — feat(sandbox): support extra host folder mounts on a sandbox #233, feat(desktop): manage extra sandbox folder mounts from settings #235, feat(sandbox): mount extra virtiofs tags from mounts.json in the guest #236
• Sandboxes can now talk to the model gateway — feat(sandbox): serve the egress broker and inject the gateway config #209, fix(sandbox): resolve the gateway url and buffer broker request bodies #215, fix(sandbox): drop browser-controlled headers when forwarding #217
• Sandboxes (preview) — feat(sandbox): add @codev/sandbox package for sandbox Phase 0 #196, feat(sandbox): add the bubblewrap provider (sandbox Phase 1) #197, feat(sandbox): add the Virtualization.framework provider (sandbox Phase 2) #198, feat(sandbox): add the guest image build and publish pipeline (sandbox Phase 3) #199, feat(sandbox): Windows/WSL backend (sandbox Phase 3) #201, feat(desktop): wire sandboxes into the desktop app #203, feat(desktop): package the signed codev-vmm helper on macOS #204

docs: add the three missing 1.18.4-8 changelog entries — three user-facing PRs shipped in 1.18.4-8 (released 2026-08-17) with no changelog row at all. They go under that release's Desktop / Web UI heading, since that is where they shipped:

• One layout, one theme — feat(app): retire the layout toggle and the theme picker #181
• New session goes to the tab you already have open — feat(app): one New session tab, at the front of the strip #192
• The desktop app can update itself — feat(desktop): auto-update from the CoDev storage bucket #195

Every entry in the file now carries at least one PR link (102 entries, 0 missing); prettier --check CHANGELOG.md passes.

🤖 Generated with Claude Code