You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
chore(tasks): bump sandbox @posthog/agent to 2.4.257 - #114211
The sandbox base image pins @posthog/agent so a published release reaches production sandboxes only through a commit on master. That pin is at 2.4.256; the release published 2.4.257.
Changes
Dockerfile.sandbox-base: AGENT_VERSION2.4.256 to 2.4.257; AGENT_TARBALL_SHA256 set to the digest of the agent-v2.4.257 release tarball.
The sandbox image workflow waits for 2.4.257 to be published, builds this image and smokes it on both architectures. This workflow then runs one Claude turn and one Codex turn with that image through the production Go ai-gateway. When both checks pass, the release app approves this PR and adds it to the merge queue. Close it before the queue lands it to keep 2.4.256. A newer release opens its own PR and closes this one.
What this ships
Agent commits between agent-v2.4.256 and agent-v2.4.257 (compare): 8
The sandbox image CD workflow builds this PR's image on both architectures, checks that the installed @posthog/agent matches the pin, and runs the agent-server entrypoint. That covers packaging and dependency resolution. This workflow then drives one Claude turn and one Codex turn from the image through the US Go ai-gateway, on the default models and efforts, and needs both to read a file with a tool. The agent's own test suite ran before the release was published.
This PR bumps the sandbox base image's pinned @posthog/agent from 2.4.256 to 2.4.257 and updates its release-tarball digest. I downloaded the actual agent-v2.4.257 release tarball and confirmed the new AGENT_TARBALL_SHA256 matches it exactly; the build-time digest check, pinned-version fallback, and post-install version assertion are all unchanged and fail closed. No security issues found.
Soft owners come from each directory's owners.yaml and each product's product.yaml (resolved nearest-file-wins). For a skipped owner, the locator is the file that decided it. Generated files and lockfiles are ignored when deciding ownership.
The reason will be displayed to describe this comment to others. Learn more.
Automated approval: the sandbox image built from this commit passed the agent smoke on both architectures and one Claude and one Codex turn on the Go ai-gateway.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The sandbox base image pins
@posthog/agentso a published release reaches production sandboxes only through a commit onmaster. That pin is at2.4.256; the release published2.4.257.Changes
Dockerfile.sandbox-base:AGENT_VERSION2.4.256to2.4.257;AGENT_TARBALL_SHA256set to the digest of theagent-v2.4.257release tarball.The sandbox image workflow waits for
2.4.257to be published, builds this image and smokes it on both architectures. This workflow then runs one Claude turn and one Codex turn with that image through the production Go ai-gateway. When both checks pass, the release app approves this PR and adds it to the merge queue. Close it before the queue lands it to keep2.4.256. A newer release opens its own PR and closes this one.What this ships
Agent commits between
agent-v2.4.256andagent-v2.4.257(compare): 8Dependency changes
None.
How did you test this code?
The sandbox image CD workflow builds this PR's image on both architectures, checks that the installed
@posthog/agentmatches the pin, and runs theagent-serverentrypoint. That covers packaging and dependency resolution. This workflow then drives one Claude turn and one Codex turn from the image through the US Go ai-gateway, on the default models and efforts, and needs both to read a file with a tool. The agent's own test suite ran before the release was published.