Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 #13478

Claude · 2026-02-03T12:42:22Z

Updates default versions for OpenAI Codex CLI and Anthropic Sandbox Runtime to latest releases published on 2026-02-02.

Changes

Version Updates:

DefaultCodexVersion: 0.93.0 → 0.94.0
DefaultSandboxRuntimeVersion: 0.0.32 → 0.0.34

Updated Files:

pkg/constants/constants.go - Version constant definitions
pkg/constants/constants_test.go - Test expectations
11 workflow lock files - Regenerated to use new versions in Codex engine workflows and Sandbox Runtime installations

Impact

Workflows using the codex engine will install version 0.94.0 instead of 0.93.0. Workflows with sandbox-runtime feature enabled will install version 0.0.34 instead of 0.0.32.

- const DefaultCodexVersion Version = "0.93.0"
+ const DefaultCodexVersion Version = "0.94.0"

- const DefaultSandboxRuntimeVersion Version = "0.0.32"
+ const DefaultSandboxRuntimeVersion Version = "0.0.34"

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw l || true && eva-d (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw /home/REDACTED/.nv-d /home/REDACTED/.nvm/package.json base64 -d /home/REDACTED/.nvm/update_test_mocks.sh /home/REDACTED/.nvm/CODE_OF_CONDUCT.md tnet/tools/git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha 5727035/b001/conremote.origin.url base64 $name) { hasDiscussionsEnabled } } (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha ithub/workflows base64 /usr/bin/base64 (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json c601ed17:go.mod ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 01/test1.md cfg ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/download-artifact/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v6 --jq .object.sha --abbrev-ref HEAD /home/REDACTED/go/bin/git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha m (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha home/REDACTED/.nvm/versions/io.js/#versions/iojs/#; s#^/home/REDACTED/.nvm/##; base64 (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8.0.0 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/asm GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/asm env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8.0.0 --jq .object.sha -json GO111MODULE At,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8.0.0 --jq .object.sha -json GO111MODULE At,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 01/test2.md GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/3041bf56c941b39c61721a86cd11f3bb1338122a
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/3041bf56c941b39c61721a86cd11f3bb1338122a --jq .object.sha (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6 --jq .object.sha om 2790143-nd61do.sh && { shopt -u extglob || setopt NO_EXTENDED_GLOB; } 2>/dev/null || true && eva-d /usr/bin/base64 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6 --jq .object.sha 1 (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6 --jq .object.sha /home/REDACTED/.nvm/alias/default or a null string otherwise { printf "%s%s", /usr/bin/base64 (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v6.0.0
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6.0.0 --jq .object.sha 53974699/.github/workflows GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6.0.0 --jq .object.sha 1174440703/.github/workflows GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v6.0.0 --jq .object.sha -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env -json cfg ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 go (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 config /usr/bin/git remote.origin.urgit -goversion /usr/bin/git git conf�� 4134850784 or a null string otherwise { printf "%s%s", /usr/bin/git --show-toplevel /home/REDACTED/worrev-parse /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE tants.test GOINSECURE GOMOD GOMODCACHE tants.test (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 nly es -json GO111MODULE 64/pkg/tool/linu--show-toplevel gh api /ref/tags/v8 --jq (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 --jq /usr/bin/git --show-toplevel ache/go/1.25.0/xrev-parse /usr/bin/git git conf�� user.email test@example.com /usr/bin/git /ref/tags/v8 go /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ole.test GOINSECURE GOMOD GOMODCACHE ole.test (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 nly iptables 16/001/test-frongit GO111MODULE 64/bin/go infocmp -1 REDACTED go /usr/bin/infocmp -json GO111MODULE ache/go/1.25.0/x--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 git /usr/bin/git tags/v6 -pack /usr/bin/git git conf�� --get remote.origin.url /usr/bin/git --show-toplevel go /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 --jq /usr/bin/infocmp -json GO111MODULE At,event,headBra--show-toplevel infocmp -1 1394738683 64/pkg/tool/linux_amd64/vet /usr/bin/infocmp -json GO111MODULE ache/go/1.25.0/x--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 rev-parse /usr/bin/git tup/sh/sanitize_git ache/go/1.25.0/xrev-parse /usr/bin/git git conf�� user.name Test User /usr/lib/git-core/git /ref/tags/v8 go /usr/bin/git /usr/lib/git-core/git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 go (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 git /usr/bin/git tup/sh/sanitize_git ache/go/1.25.0/xrev-parse /usr/bin/git git rev-�� --show-toplevel or a null string otherwise { printf "%s%s", /usr/bin/git --show-toplevel go /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 --jq /usr/bin/infocmp 1174440703/.githgit GO111MODULE 64/pkg/tool/linu--show-toplevel infocmp -1 ithub-script/git/ref/tags/v8 64/pkg/tool/linux_amd64/vet /usr/bin/infocmp -json GO111MODULE ache/go/1.25.0/x64/bin/go infocmp (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 /home/REDACTED/.nvm/CODE_OF_CONDUCT.md /usr/bin/git --show-toplevel -dwarf=false /usr/bin/git git conf�� --get remote.origin.url /usr/bin/git /ref/tags/v8 /tmp/go-build118rev-parse /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 go (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 --jq /usr/bin/git tup/sh/sanitize_git ache/go/1.25.0/xrev-parse /usr/bin/git git conf�� 4134850784 remote.origin.url /usr/bin/git /ref/tags/v8 go /usr/bin/git git (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path SYzFn4U0C GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ortcfg env g/mathutil/mathuGOINSECURE g/mathutil/mathuGOMOD 64/bin/go GOINSECURE GOMOD ode-gyp-bin/nodego build -ldflags "-s -w -X main.version=091b287-dirty" -o gh-aw ./cmd/gh-aw ache/go/1.25.0/xGOPROXY (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/623e612ff6a684e9a8634449508bdda21e2c178c
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/623e612ff6a684e9a8634449508bdda21e2c178c --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/623e612ff6a684e9a8634449508bdda21e2c178c --jq .object.sha se 5067212/b015/vet.cfg (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env o est.go 0/x64/bin/node GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha m/update_test_mocks.sh m/CODE_OF_CONDUCT.md /usr/bin/sed user.email (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go w.md�� -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion -json GO111MODULE 64/pkg/tool/linux_amd64/vet infocmp -1 ithub-script/git/ref/tags/v8 64/pkg/tool/linux_amd64/vet /usr/bin/infocmp -json GO111MODULE ache/go/1.25.0/x--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion /ref/tags/v8.0.0git remote.origin.urinit /usr/bin/git git init�� 64/bin/go git /usr/bin/git /home/REDACTED/worgit rev-parse /usr/bin/git git (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ortcfg env dad15df454799415GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/x%(refname) (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ortcfg env fe68414098bc4b22GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/x091b287b8d18a2ca442a281883347834c601ed17:go.mod (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name v6fKPLKMt GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ortcfg env om/charmbraceletGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ; \ fi (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name /tmp/go-build118240445/b415/_pkg_.a -trimpath /usr/bin/git -p main -lang=go1.25 git conf�� user.email test@example.com /usr/bin/git go1.25.0 -c=4 -nolocalimports git (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name 3990991020 64/pkg/tool/linu--jq /usr/bin/gh _.a GO111MODULE ache/go/1.25.0/x--show-toplevel gh api 5133-53843/test-1353195796/.github/workflows --jq /usr/bin/gh atjTay5oJ 240445/b346/vet.-d /opt/hostedtoolcache/go/1.25.0/x--show-toplevel gh (http block)
https://api.github.com/user
- Triggering command: /usr/bin/gh gh api user --jq .login --abbrev-ref HEAD x_amd64/vet (http block)
- Triggering command: `/usr/bin/gh gh api user --jq .login .json..." t }
  }

The final RT will coHEAD /home/REDACTED/.dotnet/tools/git 20' --output-dirdirname` (http block)

Triggering command: /usr/bin/gh gh api user --jq .login /home/REDACTED/.nv-f /home/REDACTED/.nvowner=github r: $owner, name:-f (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled

Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

This section details on the original issue you should resolve

<issue_title>[ca] CLI Version Updates: Codex 0.94.0, Sandbox Runtime 0.0.34</issue_title>
<issue_description>### Version Check Summary

Version check completed on 2026-02-03. Two CLI tools have updates available.

Status Overview:

✅ Claude Code: 2.1.29 (up to date)
✅ Copilot CLI: 0.0.400 (up to date)
⚠️ Codex: 0.93.0 → 0.94.0 (update available)
✅ GitHub MCP Server: v0.30.2 (up to date)
✅ Playwright MCP: 0.0.62 (up to date)
✅ Playwright Browser: v1.58.1 (up to date)
⚠️ Sandbox Runtime: 0.0.32 → 0.0.34 (update available)
✅ MCP Gateway: v0.0.94 (up to date)

Update: Codex (OpenAI Codex CLI)

Version Change: 0.93.0 → 0.94.0
Release Date: February 2, 2026
Timeline: 2 days after previous version (0.93.0 released January 31, 2026)

Release Information

Version 0.94.0 was published on February 2, 2026 at 18:28 UTC. This is a minor version bump with no breaking changes indicated.

Package Information

NPM Package: https://www.npmjs.com/package/`@openai/codex`
Repository: https://github.com/openai/codex
Installation: npm install -g @openai/codex@0.94.0

View Version History

Versions between 0.93.0 and 0.94.0:

0.93.0 (stable) - January 31, 2026
0.93.0-alpha.13 through 0.93.0-alpha.25 (pre-releases)
0.94.0 (stable) - February 2, 2026

Impact Assessment

Risk Level: Low
Breaking Changes: None detected
Type: Minor version update
Affected Features: General Codex CLI functionality

Recommendations

Update Priority: Medium
Testing Strategy: Run standard integration tests after update
Rollout Plan: Safe to deploy immediately

Update: Sandbox Runtime (Anthropic Sandbox Runtime)

Version Change: 0.0.32 → 0.0.34 (skipping 0.0.33)
Release Dates:

0.0.33: February 2, 2026 at 10:22 UTC
0.0.34: February 2, 2026 at 10:40 UTC (18 minutes later)
Timeline: 10 days after previous version (0.0.32 released January 23, 2026)

Release Information

Two consecutive releases were published on the same day, 18 minutes apart. This pattern suggests a quick hotfix or critical patch in version 0.0.34.

Project Description: Anthropic Sandbox Runtime (ASRT) is "a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container."

Key Features

Network restrictions: Control HTTP/HTTPS domain access
Filesystem restrictions: Manage read/write access
Unix socket restrictions: Regulate local IPC socket access
Violation monitoring: Real-time alerts on macOS

Platform Support

macOS: Uses sandbox-exec with dynamic profiles
Linux: Uses bubblewrap for containerization
Windows: Not yet supported

Package Information

NPM Package: https://www.npmjs.com/package/`@anthropic-ai/sandbox-runtime`
Repository: https://github.com/anthropic-experimental/sandbox-runtime
Installation: npm install -g @anthropic-ai/sandbox-runtime@0.0.34
Status: Beta Research Preview (APIs subject to change)

View Version History

Versions between 0.0.32 and 0.0.34:

0.0.32 - January 23, 2026
0.0.33 - February 2, 2026 at 10:22 UTC
0.0.34 - February 2, 2026 at 10:40 UTC

The rapid succession of 0.0.33 and 0.0.34 (18 minutes apart) suggests a critical fix was needed immediately after 0.0.33 release.

Impact Assessment

Risk Level: Medium (rapid release pattern suggests important fixes)
Breaking Changes: None detected (beta preview, APIs may evolve)
Type: Patch version updates
Affected Features: Claude Code sandboxing, filesystem/network restrictions
Note: This is a Beta Research Preview with evolving APIs

Recommendations

Update Priority: Medium-High (rapid releases suggest important fixes)
Testing Strategy:
- Test sandbox functionality on both macOS and Linux
- Verify filesystem and network restrictions work as expected
- Monitor for any sandbox violation alerts
Rollout Plan: Update to 0.0.34 (skip 0.0.33 due to rapid hotfix pattern)

Changes Applied

Updated pkg/constants/constants.go:

- const DefaultCodexVersion Version = "0.93.0"
+ const DefaultCodexVersion Version = "0.94.0"

- const DefaultSandboxRuntimeVersion Version = "0.0.32"
+ const DefaultSandboxRuntimeVersion Version = "0.0.34"

Next Steps

✅ Constants updated in pkg/constants/constants.go
⚠️ make recompile attempted (failed due to Go proxy network restrictions in sandbox)
⏭️ Manual recompile needed: Run make recompile in a local environment or wait for next workflow run
🧪 Integration testing recommended after deployment

References

Version check cache: /tmp/gh-aw/cache-memory/version-check-2026-02-03.txt
Workflow run:...

Fixes [ca] CLI Version Updates: Codex 0.94.0, Sandbox Runtime 0.0.34 #13472

Changeset

Type: patch
Description: Bump the default Codex CLI to 0.94.0 and the sandbox runtime to 0.0.34 so workflows and agents install the current releases.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-02-03T12:56:42Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-03T12:56:44Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-02-03T12:56:46Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-03T12:56:47Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-03T12:59:18Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	24.13.0
python3	✅	3.13.11
go	✅	1.24.12
java	❌	command not found
dotnet	❌	command not found

Result: 10/12 tools available ⚠️

Missing Tools:

java - Java runtime not installed
dotnet - .NET runtime not installed

Status: PARTIAL - Core tools (bash, sh, git, jq, yq, curl, gh, node, python3, go) are available. Java and .NET runtimes are not installed in this container.

AI generated by Agent Container Smoke Test

github-actions · 2026-02-03T13:00:10Z

Smoke Test Results ✅

PR [WIP] Update changeset.js to use current tag for entry generation #13483: Update changeset.js
PR Remove shared gh-aw import and inline MCP config in agentic workflows #13482: Remove shared workflow
✅ GitHub MCP ✅ Safe Inputs ✅ Serena ✅ Playwright ✅ File I/O ✅ Bash ✅ Discussion ✅ Build ✅ Dispatch

Status: PASS | §21631072653

@pelikhan @Claude

AI generated by Smoke Copilot

github-actions · 2026-02-03T13:00:25Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-03T13:00:40Z

Claude Smoke Test Results

PRs Reviewed:

PR Add workflow: githubnext/agentics/weekly-research #8: Add workflow: githubnext/agentics/weekly-research
PR Remove ai-inference, opencode, genaiscript agentic engines for now #10: Remove ai-inference, opencode, genaiscript agentic engines

Test Results:

✅ GitHub MCP Testing
✅ Safe Inputs GH CLI Testing
✅ Serena MCP Testing
✅ Make Build Testing
✅ Tavily Web Search Testing
✅ File Writing Testing
✅ Bash Tool Testing
✅ Discussion Interaction Testing

Overall Status: PASS ✅

View Full Report

AI generated by Smoke Claude

github-actions · 2026-02-03T13:01:01Z

PR titles: [WIP] Update changeset.js to use current tag for entry generation | [WIP] Remove shared agentic workflow file and update usages
GitHub MCP (last 2 merged PRs) ✅
Safeinputs GH PR list ✅
Serena activate ✅
Playwright GitHub title check ❌
Tavily search ✅
File write ✅
Bash cat ✅
Discussion query + comment ✅
Build ✅ | Overall: FAIL

AI generated by Smoke Codex

Copilot

Pull request overview

This PR updates the default versions for two CLI tools used in the agentic workflow system: OpenAI Codex CLI and Anthropic Sandbox Runtime. The updates are straightforward version bumps with no breaking changes indicated.

Changes:

Codex version bumped from 0.93.0 to 0.94.0 (minor version update)
Sandbox Runtime version bumped from 0.0.32 to 0.0.34 (patch version update)
Test expectations updated to match new versions

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/constants/constants.go	Updated DefaultCodexVersion and DefaultSandboxRuntimeVersion constants
pkg/constants/constants_test.go	Updated test expectations to verify new version values
.github/workflows/smoke-project.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/smoke-codex.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/issue-arborist.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/duplicate-code-detector.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/deep-report.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/daily-performance-summary.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/daily-observability-report.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/daily-issues-report.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/daily-fact.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version
.github/workflows/changeset.lock.yml	Regenerated lock file with new Codex version in npm install and agent_version

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Initial plan

091b287

Claude AI assigned Claude and pelikhan Feb 3, 2026

Claude started work on behalf of pelikhan February 3, 2026 12:42 View session

Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34

733c445

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Claude AI changed the title ~~[WIP] Update Codex and Sandbox Runtime to latest versions~~ Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 Feb 3, 2026

Claude AI requested a review from pelikhan February 3, 2026 12:54

Claude finished work on behalf of pelikhan February 3, 2026 12:54

pelikhan added the smoke label Feb 3, 2026

pelikhan marked this pull request as ready for review February 3, 2026 13:00

Copilot AI review requested due to automatic review settings February 3, 2026 13:00

github-actions bot added smoke-copilot and removed smoke labels Feb 3, 2026

github-actions bot mentioned this pull request Feb 3, 2026

Smoke Test: Copilot - 21631072653 #13484

Closed

Copilot started reviewing on behalf of pelikhan February 3, 2026 13:00 View session

github-actions bot mentioned this pull request Feb 3, 2026

Smoke Test: Claude - 21631072639 #13485

Closed

github-actions bot added the smoke-claude label Feb 3, 2026

Add changeset [skip-ci]

c6c22c3

pelikhan merged commit a35f323 into main Feb 3, 2026

pelikhan deleted the claude/update-codex-sandbox-runtime branch February 3, 2026 13:01

Copilot AI reviewed Feb 3, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 #13478

Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 #13478

Uh oh!

Claude AI commented Feb 3, 2026 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 #13478

Update Codex to 0.94.0 and Sandbox Runtime to 0.0.34 #13478

Uh oh!

Conversation

Claude AI commented Feb 3, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Impact

I tried to connect to the following addresses, but was blocked by firewall rules:

The final RT will coHEAD /home/REDACTED/.dotnet/tools/git 20' --output-dirdirname` (http block)

Update: Codex (OpenAI Codex CLI)

Release Information

Package Information

Impact Assessment

Recommendations

Update: Sandbox Runtime (Anthropic Sandbox Runtime)

Release Information

Key Features

Platform Support

Package Information

Impact Assessment

Recommendations

Changes Applied

Next Steps

References

Changeset

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 3, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Feb 3, 2026

Smoke Test Results ✅

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

github-actions bot commented Feb 3, 2026

Claude Smoke Test Results

Uh oh!

github-actions bot commented Feb 3, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Claude AI commented Feb 3, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading

github-actions bot commented Feb 3, 2026 •

edited

Loading