Skip to content

fix(sandbox): upgrade isolated-vm to 6.2.0 - #7125

Merged
icecrasher321 merged 1 commit into
stagingfrom
codex/fix-isolated-vm-6-2-0
Aug 26, 2026
Merged

fix(sandbox): upgrade isolated-vm to 6.2.0#7125
icecrasher321 merged 1 commit into
stagingfrom
codex/fix-isolated-vm-6-2-0

Conversation

@icecrasher321

Copy link
Copy Markdown
Collaborator

Summary

  • Upgrade isolated-vm from 6.1.2 to the patched 6.2.0 release
  • Refresh the lockfile integrity entry for the sandbox escape fix

Type of Change

  • Bug fix

Testing

  • Compiled isolated-vm 6.2.0 against Node.js 24
  • Verified function and task worker execution, Reference-backed timers, broker calls, and binary finalization
  • bunx vitest run lib/execution/isolated-vm-worker-hardening.test.ts lib/execution/isolated-vm.test.ts (15 tests)
  • bun run lint
  • bun run apps/sim/scripts/check-block-registry.ts origin/staging
  • bun run check:audits (33 audits)

Checklist

  • Code follows project style guidelines
  • Self-reviewed my changes
  • Tests added/updated and passing
  • No new warnings introduced
  • I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

@icecrasher321
icecrasher321 requested a review from a team as a code owner August 26, 2026 20:54
@vercel

vercel Bot commented Aug 26, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs Ready Ready Preview Aug 26, 2026 8:59pm

Request Review

@greptile-apps

greptile-apps Bot commented Aug 26, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

Updates the sandbox runtime from isolated-vm 6.1.2 to the patched 6.2.0 release.

  • Updates the application dependency pin.
  • Refreshes the lockfile resolution and integrity metadata.
  • Preserves the native module’s existing dependency and build configuration.

Confidence Score: 5/5

The PR appears safe to merge with no actionable correctness, compatibility, or security regressions identified.

The dependency declaration and lockfile resolve consistently to isolated-vm 6.2.0, while the production image and application CI use the compatible Node 24 runtime and existing sandbox API usage remains aligned with the patched release.

Important Files Changed

Filename Overview
apps/sim/package.json Pins isolated-vm 6.2.0 for the sandbox worker, consistent with the repository’s Node 24 runtime.
bun.lock Consistently updates the importer, resolved package version, dependency metadata, and integrity hash to isolated-vm 6.2.0.

Reviews (1): Last reviewed commit: "fix(sandbox): upgrade isolated-vm to 6.2..." | Re-trigger Greptile

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

Confidence score: 5/5

  • Automated review surfaced no issues in the provided summaries.
  • No files require special attention.

Re-trigger cubic

@icecrasher321
icecrasher321 merged commit 1b597b0 into staging Aug 26, 2026
27 checks passed
@icecrasher321
icecrasher321 deleted the codex/fix-isolated-vm-6-2-0 branch August 26, 2026 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant