Changelog Update

#9112 feat: add support for read-only bind mounts in the linux sandbox @viyatb-oai