(magpie) branch main updated: chore(agent-isolation): pin bubblewrap 0.13.1 (#1721)

[po...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/magpie.git


The following commit(s) were added to refs/heads/main by this push:
     new 57a3eec1 chore(agent-isolation): pin bubblewrap 0.13.1 (#1721)
57a3eec1 is described below

commit 57a3eec1db5eede23e9a252c68406c55923d064d
Author: Jarek Potiuk <ja...@potiuk.com>
AuthorDate: Tue Oct 20 11:46:41 2026 +0200

    chore(agent-isolation): pin bubblewrap 0.13.1 (#1721)
    
    Bug-fix release: O_PATH for parent directories in the new root, and multiple --sync-fd arguments. Updates the manifest, the install commands, the from-source link and the doc tables.
    
    Generated-by: Claude Code (Opus 5.5)
---
 docs/adapters/gemini.md                                    |  2 +-
 docs/setup/secure-agent-setup.md                           | 14 +++++++-------
 .../skills/setup/setup_preflight/isolated_fingerprint.py   |  2 +-
 tools/agent-isolation/pinned-versions.toml                 | 12 ++++++------
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/docs/adapters/gemini.md b/docs/adapters/gemini.md
index ac5f43f6..4a60a991 100644
--- a/docs/adapters/gemini.md
+++ b/docs/adapters/gemini.md
@@ -364,7 +364,7 @@ Apply the approved cleanup before removing the framework source so no known hook
   Repeat verification after upgrades.
 - **Validation scope:** native API tests cover policy decisions across four approval modes and interactive/headless execution.
   The Linux adopter pilot exercised skill loading, the setup lifecycle, guard behavior, and shell/native-edit approval; interactive Plan Mode and authenticated MCP workflows remain unverified.
-  The pilot and live sandbox probes used bubblewrap 0.6.1, below the framework's 0.13.0 pin, so they do not establish validation with the [pinned primitives](../../tools/agent-isolation/pinned-versions.toml).
+  The pilot and live sandbox probes used bubblewrap 0.6.1, below the framework's 0.13.1 pin, so they do not establish validation with the [pinned primitives](../../tools/agent-isolation/pinned-versions.toml).
 
 ## Developer checks
 
diff --git a/docs/setup/secure-agent-setup.md b/docs/setup/secure-agent-setup.md
index 8d5ced7a..e6828be2 100644
--- a/docs/setup/secure-agent-setup.md
+++ b/docs/setup/secure-agent-setup.md
@@ -207,7 +207,7 @@ The same flow, condensed to commands you run yourself:
 #    section: "Required tools" below. claude-code is unpinned —
 #    always install the latest for the newest security fixes.
 sudo apt-get install --no-install-recommends \
-    bubblewrap=0.13.0-* socat=1.8.1.3-*
+    bubblewrap=0.13.1-* socat=1.8.1.3-*
 npm install -g --no-save @anthropic-ai/claude-code@latest
 
 # 2. Project-scope `.claude/settings.json`. Copy the framework's
@@ -277,7 +277,7 @@ The current pins live in machine-readable form in
 
 | Tool | Pinned version | Released | Cooldown | Purpose |
 |---|---|---|---|---|
-| `bubblewrap` | 0.13.0 | 2026-09-22 | 1d | Linux user-namespace sandbox (filesystem layer). Required on Linux; macOS uses Seatbelt instead. |
+| `bubblewrap` | 0.13.1 | 2026-10-14 | 1d | Linux user-namespace sandbox (filesystem layer). Required on Linux; macOS uses Seatbelt instead. |
 | `socat` | 1.8.1.3 | 2026-06-26 | 7d (default) | TCP relay for the sandbox network allowlist. Linux only. |
 | `claude-code` | *(unpinned — `@latest`)* | — | none | Agent harness. Installed at the latest release so it always carries the newest permission-rule / sandbox / prompt-injection fixes; not in the pin manifest. |
 
@@ -311,15 +311,15 @@ distro. Choose whichever applies to your host.
 ```bash
 sudo apt-get update
 sudo apt-get install --no-install-recommends \
-    bubblewrap=0.13.0-* \
+    bubblewrap=0.13.1-* \
     socat=1.8.1.3-*
 ```
 
-> **Distro packages lag the pin.** The pinned `bubblewrap 0.13.0`
+> **Distro packages lag the pin.** The pinned `bubblewrap 0.13.1`
 > is newer than most distributions package, so the `apt` / `dnf`
 > lines above resolve only once your distribution ships it. Until
 > then, build it from the
-> [release tarball](https://github.com/containers/bubblewrap/releases/tag/v0.13.0)
+> [release tarball](https://github.com/containers/bubblewrap/releases/tag/v0.13.1)
 > (`meson setup _build && meson compile -C _build && sudo meson install -C _build`),
 > or install the distribution's own `bubblewrap` and accept the same
 > LTS trade-off documented in the Ubuntu Noble shortcut below — the
@@ -332,7 +332,7 @@ sudo apt-get install --no-install-recommends \
 
 ```bash
 sudo dnf install \
-    bubblewrap-0.13.0 \
+    bubblewrap-0.13.1 \
     socat-1.8.1.3
 ```
 
@@ -350,7 +350,7 @@ npm install -g --no-save @anthropic-ai/claude-code@latest
 
 ### Distro-specific shortcut — Linux Mint 22.x / Ubuntu 24.04 Noble
 
-The pinned versions above (bubblewrap `0.13.0`, socat `1.8.1.3`) are
+The pinned versions above (bubblewrap `0.13.1`, socat `1.8.1.3`) are
 the *upstream* releases that have aged past the framework's 7-day
 cooldown. **They are not in Ubuntu Noble's main repos** — Noble
 ships `bubblewrap 0.9.0` (`0.9.0-1ubuntu0.3`) and
diff --git a/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py b/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py
index 6f7dff25..0f3fb5a5 100644
--- a/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py
+++ b/plugins/magpie-setup/skills/setup/setup_preflight/isolated_fingerprint.py
@@ -21,4 +21,4 @@ The isolated-setup fingerprint of the framework this package shipped with,
 for installs that do not carry the framework source (see `isolated.py`).
 """
 
-FRAMEWORK_FINGERPRINT = "sha256:eb3583dffd893579"
+FRAMEWORK_FINGERPRINT = "sha256:cf3d31954c3e61b3"
diff --git a/tools/agent-isolation/pinned-versions.toml b/tools/agent-isolation/pinned-versions.toml
index ea5a7483..7845ec5f 100644
--- a/tools/agent-isolation/pinned-versions.toml
+++ b/tools/agent-isolation/pinned-versions.toml
@@ -62,11 +62,11 @@
 
 # When this file was last touched. The check script uses this as the
 # minimum age the entries below claim to satisfy.
-pinned_at = "2026-09-23"
+pinned_at = "2026-10-20"
 
 [tools.bubblewrap]
-version = "0.13.0"
-released = "2026-09-22"
+version = "0.13.1"
+released = "2026-10-14"
 # Shorter than the 7-day default so 0.13.0 could be adopted a day
 # after release; it carries the 0.12.0 sandbox-setup symlink fix
 # (GHSA-pxhw-h44j-8pfx). Raise it back to the default if a later
@@ -85,10 +85,10 @@ upstream_releases = "https://api.github.com/repos/containers/bubblewrap/releases
 # Install commands per distro (use the package manager's syntax for
 # requesting a specific version where supported). See
 # `docs/setup/secure-agent-setup.md` for adopter-facing install steps.
-install.apt = "apt-get install --no-install-recommends bubblewrap=0.13.0-*"
-install.dnf = "dnf install bubblewrap-0.13.0"
+install.apt = "apt-get install --no-install-recommends bubblewrap=0.13.1-*"
+install.dnf = "dnf install bubblewrap-0.13.1"
 install.brew = "# macOS does not need bubblewrap; it uses Seatbelt."
-install.from_source = "https://github.com/containers/bubblewrap/releases/tag/v0.13.0"
+install.from_source = "https://github.com/containers/bubblewrap/releases/tag/v0.13.1"
 
 [tools.socat]
 version = "1.8.1.3"