From 7c73c278205db61c49ba9e4f4af8bea41aec5e0c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 14:20:16 +0000 Subject: [PATCH 1/2] chore(sandbox): upgrade heel to 0.10.0 --- Cargo.lock | 33 ++++++++++++++++-------- patch/third-party-tools.json | 50 ++++++++++++++++++------------------ sandbox/Cargo.toml | 2 +- 3 files changed, 48 insertions(+), 37 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index f9cd7067..ac62037b 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4027,9 +4027,9 @@ checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" [[package]] name = "heel" -version = "0.9.5" +version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "ddad4d8fba11b64ecaf2265fdf4b0330da314c92ac5c249d4ffe33afa3e9d0bf" +checksum = "92b21e0932552edec5f468d427e6209474117e0add549585bdddc5f9051250e3" dependencies = [ "askama 0.12.1", "async-channel", @@ -4042,7 +4042,7 @@ dependencies = [ "errno", "executor-core", "futures-lite", - "http", + "heel-shim", "http-body-util", "humantime", "hyper", @@ -4058,8 +4058,6 @@ dependencies = [ "seccompiler", "serde", "serde_json", - "sha2 0.10.9", - "shell-escape", "smol", "smol-hyper", "thiserror 2.0.21", @@ -4071,6 +4069,25 @@ dependencies = [ "windows", ] +[[package]] +name = "heel-shim" +version = "0.1.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "793cb8255a73dec683141deccacb11fa0f83d768e10736caf3cb7c8dbfbdeac9" +dependencies = [ + "blocking", + "clap", + "futures-lite", + "http", + "humantime", + "interprocess", + "rmp-serde", + "serde", + "serde_json", + "sha2 0.10.9", + "thiserror 2.0.21", +] + [[package]] name = "hermit-abi" version = "0.5.3" @@ -8127,12 +8144,6 @@ dependencies = [ "lazy_static", ] -[[package]] -name = "shell-escape" -version = "0.1.5" -source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "45bb67a18fa91266cc7807181f62f9178a6873bfad7dc788c42e6430db40184f" - [[package]] name = "shell-words" version = "1.1.1" diff --git a/patch/third-party-tools.json b/patch/third-party-tools.json index 2f1e78b5..56bf6930 100644 --- a/patch/third-party-tools.json +++ b/patch/third-party-tools.json @@ -452,78 +452,78 @@ }, { "tool": "heel", - "version": "0.9.5", + "version": "0.10.0", "target": { "os": "linux", "arch": "aarch64" }, - "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.9.5/heel-aarch64-unknown-linux-gnu", - "sha256": "c8661a86a34fa0e33b31b8f30681b9be0b6be8d9ab94ad12423519b0ed14fd8c", - "size": 3745192, + "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.10.0/heel-aarch64-unknown-linux-gnu", + "sha256": "c570c123a4938ae352064811cd03ee352611cbc13713cc53f8d39819a52d03f1", + "size": 4596960, "encoding": { "format": "executable" }, - "executable_sha256": "c8661a86a34fa0e33b31b8f30681b9be0b6be8d9ab94ad12423519b0ed14fd8c" + "executable_sha256": "c570c123a4938ae352064811cd03ee352611cbc13713cc53f8d39819a52d03f1" }, { "tool": "heel", - "version": "0.9.5", + "version": "0.10.0", "target": { "os": "linux", "arch": "x86_64" }, - "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.9.5/heel-x86_64-unknown-linux-gnu", - "sha256": "61b0c13cd56e93d9fb05383751fa8cdaec53a68d9f695234188d127d8675fc91", - "size": 4274152, + "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.10.0/heel-x86_64-unknown-linux-gnu", + "sha256": "0bc9a8bca5002c98b8ba8d08d23156ca1c04e61a65419232a93fd1f8a6f43d89", + "size": 5132184, "encoding": { "format": "executable" }, - "executable_sha256": "61b0c13cd56e93d9fb05383751fa8cdaec53a68d9f695234188d127d8675fc91" + "executable_sha256": "0bc9a8bca5002c98b8ba8d08d23156ca1c04e61a65419232a93fd1f8a6f43d89" }, { "tool": "heel", - "version": "0.9.5", + "version": "0.10.0", "target": { "os": "macos", "arch": "aarch64" }, - "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.9.5/heel-aarch64-apple-darwin", - "sha256": "8ce8ae1ea23ce33c6334a54dccc4998c636631d0ca09a6038a892804bc60005d", - "size": 3388256, + "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.10.0/heel-aarch64-apple-darwin", + "sha256": "59805477c62b499c143fb8a8cd1d8ddbffaf71efc35aa296553b2d18cbfc8582", + "size": 4130928, "encoding": { "format": "executable" }, - "executable_sha256": "8ce8ae1ea23ce33c6334a54dccc4998c636631d0ca09a6038a892804bc60005d" + "executable_sha256": "59805477c62b499c143fb8a8cd1d8ddbffaf71efc35aa296553b2d18cbfc8582" }, { "tool": "heel", - "version": "0.9.5", + "version": "0.10.0", "target": { "os": "windows", "arch": "aarch64" }, - "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.9.5/heel-aarch64-pc-windows-msvc.exe", - "sha256": "dcbc49231762af33b0fd5ca7c774c2081d61976c3573c930f0eef98f4a10a2b4", - "size": 4050944, + "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.10.0/heel-aarch64-pc-windows-msvc.exe", + "sha256": "cf7370f86f7d1b91556197a4b47b5a77d8ec6480b9223bc9b273c51f995ffcf5", + "size": 4672000, "encoding": { "format": "executable" }, - "executable_sha256": "dcbc49231762af33b0fd5ca7c774c2081d61976c3573c930f0eef98f4a10a2b4" + "executable_sha256": "cf7370f86f7d1b91556197a4b47b5a77d8ec6480b9223bc9b273c51f995ffcf5" }, { "tool": "heel", - "version": "0.9.5", + "version": "0.10.0", "target": { "os": "windows", "arch": "x86_64" }, - "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.9.5/heel-x86_64-pc-windows-msvc.exe", - "sha256": "454163dc2fa82953b8f8a56c1ac851e783102fc8d1120427d1bcbf94f21ae52e", - "size": 4865536, + "url": "https://github.com/May-Agent/heel/releases/download/heel-v0.10.0/heel-x86_64-pc-windows-msvc.exe", + "sha256": "48f66a0ecfeab2d2415d81265e6f176cd9208e212b3f3fe4b80783189513e502", + "size": 5570048, "encoding": { "format": "executable" }, - "executable_sha256": "454163dc2fa82953b8f8a56c1ac851e783102fc8d1120427d1bcbf94f21ae52e" + "executable_sha256": "48f66a0ecfeab2d2415d81265e6f176cd9208e212b3f3fe4b80783189513e502" } ], "python": [ diff --git a/sandbox/Cargo.toml b/sandbox/Cargo.toml index ba979ba4..3f4b3704 100644 --- a/sandbox/Cargo.toml +++ b/sandbox/Cargo.toml @@ -20,7 +20,7 @@ arc-swap.workspace = true aither-core.workspace = true # Sandboxing -heel = "0.9.5" +heel = "0.10.0" # Executor for tokio integration executor-core = { version = "0.7", features = ["tokio"] } From 4caea3b40f551bd7761a58874d58e0784f738991 Mon Sep 17 00:00:00 2001 From: Lexo Liu Date: Wed, 11 Nov 2026 09:22:36 -0500 Subject: [PATCH 2/2] ci(update-heel): approve the held CI runs of the pull request it opens --- .github/workflows/update-heel.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/workflows/update-heel.yml b/.github/workflows/update-heel.yml index cf10d9ad..e7cbaf23 100644 --- a/.github/workflows/update-heel.yml +++ b/.github/workflows/update-heel.yml @@ -15,6 +15,7 @@ on: permissions: contents: write pull-requests: write + actions: write jobs: update-heel: @@ -70,6 +71,7 @@ jobs: run: cargo test --locked -p aither-sandbox --lib -- --exact terminal::builder::tests::the_shell_is_built_on_the_sandboxs_directory_and_live_grants - name: Create pull request + id: pr if: steps.release.outputs.version uses: peter-evans/create-pull-request@v8 with: @@ -85,3 +87,10 @@ jobs: sandbox/Cargo.toml Cargo.lock patch/third-party-tools.json + + # GitHub holds the pull request runs of a pull request the Actions bot + # opened or pushed until they are approved, and the required + # `CI result` reports on the pull request only from those runs. + - name: Approve the pull request's CI + if: steps.pr.outputs.pull-request-number + run: bash .github/scripts/approve-held-runs.sh "${{ steps.pr.outputs.pull-request-number }}"