(magpie) branch main updated: chore(agent-isolation): bump pinned socat 1.8.1.3, claude-code 2.1.202 (#790)

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/magpie.git


The following commit(s) were added to refs/heads/main by this push:
     new f638e3b9 chore(agent-isolation): bump pinned socat 1.8.1.3, claude-code 2.1.202 (#790)
f638e3b9 is described below

commit f638e3b92bd8d987b01210bfc54bc7b523586482
Author: Jarek Potiuk <ja...@potiuk.com>
AuthorDate: Wed Jul 8 22:45:55 2026 +0200

    chore(agent-isolation): bump pinned socat 1.8.1.3, claude-code 2.1.202 (#790)
    
    Both aged past their cooldown per check-tool-updates.sh:
    - socat 1.8.1.1 -> 1.8.1.3 (released 2026-06-26, 7-day cooldown).
    - claude-code 2.1.197 -> 2.1.202 (released 2026-07-06, 1-day cooldown).
    
    2.1.204 shipped 2026-07-08 (today) but is within the 1-day cooldown, so the
    pin stays at 2.1.202 to match the tool's validated candidate. Sync the version
    table + install commands in docs/setup/secure-agent-setup.md (the claude-code
    table row was also stale at 2.1.141). bubblewrap unchanged. pinned_at -> 2026-07-08.
---
 docs/setup/secure-agent-setup.md           | 18 +++++++++---------
 tools/agent-isolation/pinned-versions.toml | 20 ++++++++++----------
 2 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/docs/setup/secure-agent-setup.md b/docs/setup/secure-agent-setup.md
index 605de1e0..1a776d0f 100644
--- a/docs/setup/secure-agent-setup.md
+++ b/docs/setup/secure-agent-setup.md
@@ -160,8 +160,8 @@ The same flow, condensed to commands you run yourself:
 #    `tools/agent-isolation/pinned-versions.toml`; canonical
 #    section: "Required tools (pinned versions)" below.
 sudo apt-get install --no-install-recommends \
-    bubblewrap=0.11.2-* socat=1.8.1.1-*
-npm install -g --no-save @anthropic-ai/claude-code@2.1.197
+    bubblewrap=0.11.2-* socat=1.8.1.3-*
+npm install -g --no-save @anthropic-ai/claude-code@2.1.202
 
 # 2. Project-scope `.claude/settings.json`. Copy the framework's
 #    sandbox / permissions.deny / permissions.ask / allowedDomains
@@ -219,8 +219,8 @@ The current pins live in machine-readable form in
 | Tool | Pinned version | Released | Cooldown | Purpose |
 |---|---|---|---|---|
 | `bubblewrap` | 0.11.2 | 2026-04-23 | 7d (default) | Linux user-namespace sandbox (filesystem layer). Required on Linux; macOS uses Seatbelt instead. |
-| `socat` | 1.8.1.1 | 2026-03-13 | 7d (default) | TCP relay for the sandbox network allowlist. Linux only. |
-| `claude-code` | 2.1.141 | 2026-05-13 | 1d (override) | Agent runtime. Pin separately from any system claude install so behavioural changes don't drift the framework's effective security posture without review. |
+| `socat` | 1.8.1.3 | 2026-06-26 | 7d (default) | TCP relay for the sandbox network allowlist. Linux only. |
+| `claude-code` | 2.1.202 | 2026-07-06 | 1d (override) | Agent runtime. Pin separately from any system claude install so behavioural changes don't drift the framework's effective security posture without review. |
 
 The pin date floor (`pinned_at` in the manifest) is the day the
 manifest was last touched; it is the framework's promise that every
@@ -239,7 +239,7 @@ distro. Choose whichever applies to your host.
 sudo apt-get update
 sudo apt-get install --no-install-recommends \
     bubblewrap=0.11.2-* \
-    socat=1.8.1.1-*
+    socat=1.8.1.3-*
 ```
 
 > **Debian stable (bookworm) caveat.** The pinned `bubblewrap 0.11.2`
@@ -257,7 +257,7 @@ sudo apt-get install --no-install-recommends \
 ```bash
 sudo dnf install \
     bubblewrap-0.11.2 \
-    socat-1.8.1.1
+    socat-1.8.1.3
 ```
 
 **macOS**: bubblewrap is not needed (Seatbelt is built in); socat is
@@ -269,12 +269,12 @@ version, no pin enforced — Homebrew rolls forward, so the
 
 ```bash
 # npm distribution (the only stable channel today)
-npm install -g --no-save @anthropic-ai/claude-code@2.1.197
+npm install -g --no-save @anthropic-ai/claude-code@2.1.202
 ```
 
 ### Distro-specific shortcut — Linux Mint 22.x / Ubuntu 24.04 Noble
 
-The pinned versions above (bubblewrap `0.11.2`, socat `1.8.1.1`) are
+The pinned versions above (bubblewrap `0.11.2`, socat `1.8.1.3`) are
 the *upstream* releases that have aged past the framework's 7-day
 cooldown. **They are not in Ubuntu Noble's main repos** — Noble
 ships `bubblewrap 0.9.0` (`0.9.0-1ubuntu0.1`) and
@@ -301,7 +301,7 @@ sandbox flags don't depend on a specific bubblewrap version (the
 `denyRead`/`allowRead` API has been stable since `0.6.x`).
 
 The framework's `tools/agent-isolation/check-tool-updates.sh` will
-still report upstream `0.11.2` / `1.8.1.1` as the pinned versions —
+still report upstream `0.11.2` / `1.8.1.3` as the pinned versions —
 that's the manifest's view of what's *upstream-current*, not what
 your distro shipped. If you want to silence the drift, override the
 manifest locally with a `pinned-versions.local.toml` (gitignored)
diff --git a/tools/agent-isolation/pinned-versions.toml b/tools/agent-isolation/pinned-versions.toml
index abab10da..14f328eb 100644
--- a/tools/agent-isolation/pinned-versions.toml
+++ b/tools/agent-isolation/pinned-versions.toml
@@ -52,7 +52,7 @@
 
 # When this file was last touched. The check script uses this as the
 # minimum age the entries below claim to satisfy.
-pinned_at = "2026-07-01"
+pinned_at = "2026-07-08"
 
 [tools.bubblewrap]
 version = "0.11.2"
@@ -76,8 +76,8 @@ install.brew = "# macOS does not need bubblewrap; it uses Seatbelt."
 install.from_source = "https://github.com/containers/bubblewrap/releases/tag/v0.11.2"
 
 [tools.socat]
-version = "1.8.1.1"
-released = "2026-03-13"
+version = "1.8.1.3"
+released = "2026-06-26"
 purpose = """
 TCP relay used by Claude Code's sandbox network proxy to enforce
 the `sandbox.network.allowedDomains` allowlist. Without socat the
@@ -86,13 +86,13 @@ fine outcome). Linux only; macOS does not need it.
 """
 docs = "http://www.dest-unreach.org/socat/"
 upstream_releases = "http://www.dest-unreach.org/socat/download/"
-install.apt = "apt-get install --no-install-recommends socat=1.8.1.1-*"
-install.dnf = "dnf install socat-1.8.1.1"
-install.from_source = "http://www.dest-unreach.org/socat/download/socat-1.8.1.1.tar.gz"
+install.apt = "apt-get install --no-install-recommends socat=1.8.1.3-*"
+install.dnf = "dnf install socat-1.8.1.3"
+install.from_source = "http://www.dest-unreach.org/socat/download/socat-1.8.1.3.tar.gz"
 
 [tools.claude-code]
-version = "2.1.197"
-released = "2026-06-30"
+version = "2.1.202"
+released = "2026-07-06"
 # Override the framework-wide 7-day default. Claude Code releases
 # cadence is high (multiple releases per week) and any regression
 # that affects the framework's permission-rule semantics, sandbox
@@ -118,5 +118,5 @@ upstream_releases = "https://api.github.com/repos/anthropics/claude-code/release
 # Claude Code is distributed via npm; use `--no-save` so the global
 # install doesn't drift the local lockfile of any project the user
 # installs from.
-install.npm = "npm install -g --no-save @anthropic-ai/claude-code@2.1.197"
-install.brew = "# brew tap anthropics/claude-code; brew install claude-code@2.1.197 (when available)"
+install.npm = "npm install -g --no-save @anthropic-ai/claude-code@2.1.202"
+install.brew = "# brew tap anthropics/claude-code; brew install claude-code@2.1.202 (when available)"