Skip to content

Pin @anthropic-ai/sandbox-runtime version in SRT installation#9037

Merged
Mossaka merged 8 commits intomainfrom
copilot/verify-version-pinning
Jan 6, 2026
Merged

Pin @anthropic-ai/sandbox-runtime version in SRT installation#9037
Mossaka merged 8 commits intomainfrom
copilot/verify-version-pinning

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Jan 5, 2026

The SRT (Sandbox Runtime) package was being installed without version pinning (npm install @anthropic-ai/sandbox-runtime), while AWF binary and Docker containers are already properly pinned.

Changes

  • New constant: DefaultSandboxRuntimeVersion = "0.0.23" in pkg/constants/constants.go
  • Version-pinned install: Updated generateSRTInstallationStep() to use explicit version
// Before
"npm install @anthropic-ai/sandbox-runtime"

// After  
"npm install @anthropic-ai/sandbox-runtime@0.0.23"
  • Tests: Added srt_version_pinning_test.go to verify pinning behavior
  • Version monitoring: Updated .github/workflows/cli-version-checker.md to track @anthropic-ai/sandbox-runtime alongside other agentic CLI tools

Version Pinning Status

Component Binary Docker Containers
AWF (gh-aw-firewall) DefaultFirewallVersion --image-tag flag
SRT (sandbox-runtime) DefaultSandboxRuntimeVersion N/A
Original prompt

Double check if the gh-aw-firewall (awf) and agent-sandbox (art) is version pinned (both the binary the docker containers etc. and note that awf automatically pulls the docker container (agent container and proxy container). make sure all of them are version pinned.


💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

Copilot AI and others added 2 commits January 5, 2026 23:26
- Add DefaultSandboxRuntimeVersion constant (0.0.23) to pkg/constants/constants.go
- Update generateSRTInstallationStep() to use pinned version in npm install command
- Add srt_version_pinning_test.go with tests for version pinning verification
- Add DefaultSandboxRuntimeVersion to constants_test.go test table

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Check for versioned npm install pattern '@anthropic-ai/sandbox-runtime@'
instead of checking for a specific newline pattern that may not match correctly.

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Copilot AI changed the title [WIP] Check version pinning for gh-aw-firewall and agent-sandbox Pin @anthropic-ai/sandbox-runtime version in SRT installation Jan 5, 2026
Copilot AI requested a review from Mossaka January 5, 2026 23:32
@Mossaka Mossaka marked this pull request as ready for review January 5, 2026 23:35
@pelikhan
Copy link
Copy Markdown
Collaborator

pelikhan commented Jan 5, 2026

@copilot update the cli version updater agentic workflow to also track this dependency.

Add @anthropic-ai/sandbox-runtime (SRT) to the list of tracked dependencies
in the CLI version checker agentic workflow. This ensures the SRT version
is monitored and updated alongside other agentic CLI tools.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copy link
Copy Markdown
Contributor Author

Copilot AI commented Jan 5, 2026

@copilot update the cli version updater agentic workflow to also track this dependency.

Updated the cli-version-checker workflow to track @anthropic-ai/sandbox-runtime alongside other agentic CLI tools (430d31c). The workflow now includes SRT in the version sources section, and the install commands for dependency discovery.

Copilot AI requested a review from pelikhan January 5, 2026 23:54
@Mossaka Mossaka merged commit 96fd8cc into main Jan 6, 2026
50 checks passed
@Mossaka Mossaka deleted the copilot/verify-version-pinning branch January 6, 2026 00:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants