chore(agent): upgrade runtime deps — Node 24, Claude SDK 0.2.82, pin all Python deps#103
Open
scottschreckengaust wants to merge 6 commits into
Open
chore(agent): upgrade runtime deps — Node 24, Claude SDK 0.2.82, pin all Python deps#103scottschreckengaust wants to merge 6 commits into
scottschreckengaust wants to merge 6 commits into
Conversation
- Node.js 20 reached end of active LTS; upgrade to 24 LTS (https://nodejs.org/en/about/previous-releases) - Claude Code bumped from 2.1.139 to 2.1.142 Verified: image builds, node v24.15.0, claude 2.1.142 confirmed. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
5 tasks
Replace ghcr.io/astral-sh/uv:latest with pinned 0.11.14. Using :latest is a reproducibility and security risk — any broken or vulnerable uv release would break all builds with no rollback without a code change. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
scottschreckengaust
changed the title
krokoko
reviewed
May 15, 2026
Aligns the Python SDK with the Dockerfile's Claude Code CLI pin (2.1.142). The SDK bundles the CLI binary, so these must stay in sync. Release: https://github.com/anthropics/claude-agent-sdk-python/releases/tag/v0.2.82 Bundled CLI: 2.1.142 Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- boto3 1.43.6 → 1.43.9 (+ botocore transitive) - requests 2.34.0 → 2.34.2 - uvicorn 0.46.0 → 0.47.0 - cedarpy >=4.8.1 → ==4.8.3 (pinned; ships cp314 native wheels) fastapi (0.136.1), aws-opentelemetry-distro (0.17.0), and mcp (1.27.1) are already at their latest versions. All verified Python 3.14 compatible for upcoming #105 upgrade. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Change ~=0.17.0 (compatible release) to ==0.17.0 (exact pin) to match all other dependencies. No version change — just specifier tightening. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
scottschreckengaust
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Comprehensive upgrade of all agent runtime dependencies in the Dockerfile and pyproject.toml for security, reproducibility, and Python 3.14 readiness.
Dockerfile changes
:latest(unpinned):latestbreaks builds without warningpyproject.toml changes
Key coupling: claude-agent-sdk ↔ Claude Code CLI
The
claude-agent-sdkPython package bundles the Claude Code CLI binary. The Dockerfile also installs the CLI via npm. Both must stay in sync:pyproject.toml:claude-agent-sdk==0.2.82→ bundles CLI 2.1.142Dockerfile:@anthropic-ai/claude-code@2.1.142All deps pinned with
==Previously
cedarpyused>=andaws-opentelemetry-distroused~=. All dependencies now use exact==pins for reproducibility, withuv.lockas the authoritative lockfile.Python 3.14 readiness
All 8 dependencies verified compatible with Python 3.14 (see issue #105 comment). Zero blockers for the upcoming Python 3.14 upgrade.
Related
Test plan
uv lockresolves cleanly (127 packages)🤖 Generated with Claude Code