Skip to content

chore(tasks): bump sandbox @posthog/agent to 2.4.257 - #114211

Merged
trunk-io[bot] merged 1 commit into
masterfrom
chore/bump-sandbox-agent-version-2.4.257
Oct 8, 2026
Merged

trunk-io[bot] merged 1 commit into
masterfrom
chore/bump-sandbox-agent-version-2.4.257

Conversation

@scheduled-actions-posthog

Copy link
Copy Markdown
Contributor

Problem

The sandbox base image pins @posthog/agent so a published release reaches production sandboxes only through a commit on master. That pin is at 2.4.256; the release published 2.4.257.

Changes

  • Dockerfile.sandbox-base: AGENT_VERSION 2.4.256 to 2.4.257; AGENT_TARBALL_SHA256 set to the digest of the agent-v2.4.257 release tarball.

The sandbox image workflow waits for 2.4.257 to be published, builds this image and smokes it on both architectures. This workflow then runs one Claude turn and one Codex turn with that image through the production Go ai-gateway. When both checks pass, the release app approves this PR and adds it to the merge queue. Close it before the queue lands it to keep 2.4.256. A newer release opens its own PR and closes this one.

What this ships

Agent commits between agent-v2.4.256 and agent-v2.4.257 (compare): 8

Dependency changes

None.

How did you test this code?

The sandbox image CD workflow builds this PR's image on both architectures, checks that the installed @posthog/agent matches the pin, and runs the agent-server entrypoint. That covers packaging and dependency resolution. This workflow then drives one Claude turn and one Codex turn from the image through the US Go ai-gateway, on the default models and efforts, and needs both to read a file with a tool. The agent's own test suite ran before the release was published.

@scheduled-actions-posthog scheduled-actions-posthog Bot added dependencies Pull requests that update a dependency file automated skip-agent-review Save $$$, skip auto agent reviews (Greptile) — use for trivial or chore PRs labels Oct 8, 2026
@trunk-io

trunk-io Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

😎 Merged successfully - details.

@parameterai

parameterai Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Risk: No findings

This PR bumps the sandbox base image's pinned @posthog/agent from 2.4.256 to 2.4.257 and updates its release-tarball digest. I downloaded the actual agent-v2.4.257 release tarball and confirmed the new AGENT_TARBALL_SHA256 matches it exactly; the build-time digest check, pinned-version fallback, and post-install version assertion are all unchanged and fail closed. No security issues found.

Sentinel reviewed 039cba0 · Review settings

@github-actions github-actions Bot added the feature/desktop Feature Tag: Desktop label Oct 8, 2026
@pr-assigner-resolver-posthog
pr-assigner-resolver-posthog Bot requested a review from a team October 8, 2026 22:06
@pr-assigner-resolver-posthog

Copy link
Copy Markdown

👀 Auto-assigned reviewers

These soft owners were skipped because they only have minor changes here. Nothing blocks merge, so self-assign if you'd like a look:

  • @PostHog/team-self-driving (products/tasks/product.yaml)

Soft owners come from each directory's owners.yaml and each product's product.yaml (resolved nearest-file-wins). For a skipped owner, the locator is the file that decided it. Generated files and lockfiles are ignored when deciding ownership.

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

🤖 CI report

⚠️ Trunk lane — backend Python lane

This PR is assigned to the backend Python lane. It runs backend Python tests and may merge in parallel with PRs in other lanes.

@releaser-posthog releaser-posthog Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated approval: the sandbox image built from this commit passed the agent smoke on both architectures and one Claude and one Codex turn on the Go ai-gateway.

@releaser-posthog

Copy link
Copy Markdown

/trunk merge

@trunk-io

trunk-io Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Static Badge   Static Badge   Static Badge

View Full Report ↗︎ ⋅ Docs

@trunk-io
trunk-io Bot merged commit 0f5667f into master Oct 8, 2026
341 checks passed
@trunk-io
trunk-io Bot deleted the chore/bump-sandbox-agent-version-2.4.257 branch October 8, 2026 22:47
@deployment-status-posthog

deployment-status-posthog Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Deploy status

Environment Status Deployed At Workflow
dev ✅ Deployed 2026-10-08 23:12 UTC Run
prod-us ✅ Deployed 2026-10-08 23:22 UTC Run
prod-eu ✅ Deployed 2026-10-08 23:24 UTC Run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated dependencies Pull requests that update a dependency file feature/desktop Feature Tag: Desktop skip-agent-review Save $$$, skip auto agent reviews (Greptile) — use for trivial or chore PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants