This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow-steward.git
The following commit(s) were added to refs/heads/main by this push:
new 309d7d4 chore(agent-isolation): bump claude-code 2.1.138 → 2.1.141
(#174)
309d7d4 is described below
commit 309d7d4b14207cfa31451e6aba07a734be913a6a
Author: Jarek Potiuk <[email protected]>
AuthorDate: Sat May 16 00:41:15 2026 +0200
chore(agent-isolation): bump claude-code 2.1.138 → 2.1.141 (#174)
Co-authored-by: Claude Opus 4.7 (1M context) <[email protected]>
---
docs/setup/secure-agent-setup.md | 6 +++---
tools/agent-isolation/pinned-versions.toml | 10 +++++-----
2 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/docs/setup/secure-agent-setup.md b/docs/setup/secure-agent-setup.md
index 7c7d0ee..85066f3 100644
--- a/docs/setup/secure-agent-setup.md
+++ b/docs/setup/secure-agent-setup.md
@@ -138,7 +138,7 @@ The same flow, condensed to commands you run yourself:
# section: "Required tools (pinned versions)" below.
sudo apt-get install --no-install-recommends \
bubblewrap=0.11.2-* socat=1.8.1.1-*
-npm install -g --no-save @anthropic-ai/[email protected]
+npm install -g --no-save @anthropic-ai/[email protected]
# 2. Project-scope `.claude/settings.json`. Copy the framework's
# sandbox / permissions.deny / permissions.ask / allowedDomains
@@ -195,7 +195,7 @@ The current pins live in machine-readable form in
|---|---|---|---|---|
| `bubblewrap` | 0.11.2 | 2026-04-23 | 7d (default) | Linux user-namespace
sandbox (filesystem layer). Required on Linux; macOS uses Seatbelt instead. |
| `socat` | 1.8.1.1 | 2026-03-13 | 7d (default) | TCP relay for the sandbox
network allowlist. Linux only. |
-| `claude-code` | 2.1.138 | 2026-05-09 | 1d (override) | Agent runtime. Pin
separately from any system claude install so behavioural changes don't drift
the framework's effective security posture without review. |
+| `claude-code` | 2.1.141 | 2026-05-13 | 1d (override) | Agent runtime. Pin
separately from any system claude install so behavioural changes don't drift
the framework's effective security posture without review. |
The pin date floor (`pinned_at` in the manifest) is the day the
manifest was last touched; it is the framework's promise that every
@@ -234,7 +234,7 @@ version, no pin enforced — Homebrew rolls forward, so the
```bash
# npm distribution (the only stable channel today)
-npm install -g --no-save @anthropic-ai/[email protected]
+npm install -g --no-save @anthropic-ai/[email protected]
```
### Distro-specific shortcut — Linux Mint 22.x / Ubuntu 24.04 Noble
diff --git a/tools/agent-isolation/pinned-versions.toml
b/tools/agent-isolation/pinned-versions.toml
index d8f99a1..f443c56 100644
--- a/tools/agent-isolation/pinned-versions.toml
+++ b/tools/agent-isolation/pinned-versions.toml
@@ -52,7 +52,7 @@
# When this file was last touched. The check script uses this as the
# minimum age the entries below claim to satisfy.
-pinned_at = "2026-05-10"
+pinned_at = "2026-05-16"
[tools.bubblewrap]
version = "0.11.2"
@@ -91,8 +91,8 @@ install.dnf = "dnf install socat-1.8.1.1"
install.from_source =
"http://www.dest-unreach.org/socat/download/socat-1.8.1.1.tar.gz";
[tools.claude-code]
-version = "2.1.138"
-released = "2026-05-09"
+version = "2.1.141"
+released = "2026-05-13"
# Override the framework-wide 7-day default. Claude Code releases
# cadence is high (multiple releases per week) and any regression
# that affects the framework's permission-rule semantics, sandbox
@@ -118,5 +118,5 @@ upstream_releases =
"https://api.github.com/repos/anthropics/claude-code/release
# Claude Code is distributed via npm; use `--no-save` so the global
# install doesn't drift the local lockfile of any project the user
# installs from.
-install.npm = "npm install -g --no-save @anthropic-ai/[email protected]"
-install.brew = "# brew tap anthropics/claude-code; brew install
[email protected] (when available)"
+install.npm = "npm install -g --no-save @anthropic-ai/[email protected]"
+install.brew = "# brew tap anthropics/claude-code; brew install
[email protected] (when available)"
