Builder Tooling — June 6, 2026

What platform or toolchain do I build and ship on?

5 Jun, 2026

vercel-sandbox
persistent-storage
agent-workspace
private-beta
vercel
skills-api

The read

Ship infrastructure is the layer above commodity models. Sandboxes, deploy surfaces, and CI that agents can drive expand the pie — more builders ship more often when activation energy drops.

What moved

Vercel Sandbox Drives add persistent attachable storage for agent workspaces — Vercel Changelog Vercel Sandbox entered private beta for Drives on June 5, 2026. Drives are persistent storage volumes with a lifecycle independent of any sandbox: create once, mount at a configurable path (e.g. /workspace) when starting a sandbox, and reattach after the sandbox stops. Requires @vercel/sandbox@beta or sandbox@beta CLI. During beta, each drive allows read-write mount by only one sandbox at a time; Vercel advises against production data use. Builder angle: Agent sandboxes can retain cloned repos, dependencies, and build artifacts across disposable runs instead of cold-starting every session.
skills.sh API launches with Vercel OIDC auth for querying 600k+ open-source skills — Vercel Changelog On June 5, 2026, Vercel published the skills.sh REST API. Clients authenticate with a short-lived Vercel OIDC token from getVercelOidcToken() in @vercel/oidc, scoped to team and project with automatic rotation. Endpoints support searching skills, fetching details, and checking security audits across 600,000+ skills. Rate limit is 600 requests per minute per team and project. Builder angle: Deployed apps on Vercel can discover and audit agent skills programmatically without storing long-lived API secrets.
GitHub Actions forces JavaScript actions onto Node.js 24 starting June 2 — GitHub Community GitHub began defaulting JavaScript-based Actions (e.g. actions/checkout@v4) to Node.js 24 on June 2, 2026, deprecating Node.js 20. Workflows showing deprecation warnings should update action versions to Node.js 24-compatible releases. Teams can opt in early with FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true or temporarily opt out via ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION. Node.js 20 is scheduled for full removal from runners in fall 2026. Builder angle: CI pipelines shipping AI apps must bump marketplace action pins or set explicit Node 24 flags before workflows break on deprecated runtimes.