From 4c073eef714b303dc0d047e9bf1585332af7315c Mon Sep 17 00:00:00 2001 From: "SREDevOps.org Agent" Date: Fri, 30 Oct 2026 13:11:39 -0300 Subject: [PATCH] chore(deps): bump agent-sandbox to v1.0.9 (#38) Update AGENT_SANDBOX_VERSION from v1.0.8 to v1.0.9, the pin the examples and the CI manifest dry-run consume. Refresh the compatibility matrix in docs/versioning.md and clarify the failedPodPolicy sentence in the hardening doc, which described v1.0.8 as the pin. Reviewed the v1.0.9 release for breaking changes: the new volumeClaimTemplates admission rules accept the named "dsh-home" templates in both examples, and the router NetworkPolicy / Go label-constant changes do not apply to this repository. Co-authored-by: SREDevOpsAgents --- docs/versioning.md | 2 +- examples/dsh-agents-as-a-service/docs/optional-hardening.md | 2 +- versions.env | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/versioning.md b/docs/versioning.md index a316884..68d6ea3 100644 --- a/docs/versioning.md +++ b/docs/versioning.md @@ -63,7 +63,7 @@ Values from [versions.env](../versions.env) at the current identity: | DSH ref | `dsh-v0.2.1-rc.5` | `DSH_VERSION` | | Repository revision | `(empty)` | `RELEASE_REVISION` | | pnpm | `11.28.5` | `PNPM_VERSION` | -| agent-sandbox (CRDs) | `v1.0.8` | `AGENT_SANDBOX_VERSION`, used by the examples and CI dry-run | +| agent-sandbox (CRDs) | `v1.0.9` | `AGENT_SANDBOX_VERSION`, used by the examples and CI dry-run | | Kubernetes Gateway API | `v1.2.1` | `GATEWAY_API_VERSION`, used by the SSO exposure variant | | oauth2-proxy | `quay.io/oauth2-proxy/oauth2-proxy:v7.15.5` | `OAUTH2_PROXY_IMAGE` | | Main image | `ghcr.io/sredevopsorg/deepseek-kubernetes-sandbox` | `GHCR_IMAGE` | diff --git a/examples/dsh-agents-as-a-service/docs/optional-hardening.md b/examples/dsh-agents-as-a-service/docs/optional-hardening.md index 46a38ce..b007f9f 100644 --- a/examples/dsh-agents-as-a-service/docs/optional-hardening.md +++ b/examples/dsh-agents-as-a-service/docs/optional-hardening.md @@ -484,7 +484,7 @@ The Sandbox, its claim and its PVC survive, but nothing runs: the gateway keeps proxying to a dead Pod and every request fails until someone deletes the Pod or the claim. -agent-sandbox v1.0.8 (the pin in [versions.env](../../../versions.env)) adds +agent-sandbox v1.0.8+ (the current pin in [versions.env](../../../versions.env) is newer) adds `spec.failedPodPolicy` to `Sandbox` and to `SandboxTemplate`: | Value | Behavior | diff --git a/versions.env b/versions.env index c7feea8..9746453 100644 --- a/versions.env +++ b/versions.env @@ -16,7 +16,7 @@ PNPM_VERSION=11.28.5 RELEASE_REVISION= # Control-plane versions used by the examples and their manifests. -AGENT_SANDBOX_VERSION=v1.0.8 +AGENT_SANDBOX_VERSION=v1.0.9 GATEWAY_API_VERSION=v1.2.1 OAUTH2_PROXY_IMAGE=quay.io/oauth2-proxy/oauth2-proxy:v7.15.5