Skip to content

sbx/v0.34#25456

Open
dvdksn wants to merge 2 commits into
docker:mainfrom
dvdksn:sbx/v0.34
Open

sbx/v0.34#25456
dvdksn wants to merge 2 commits into
docker:mainfrom
dvdksn:sbx/v0.34

Conversation

@dvdksn

@dvdksn dvdksn commented Jun 29, 2026

Copy link
Copy Markdown
Contributor
  • sbx: vendor v0.34.0 cli reference
  • sbx: regen release notes - v0.34.0

@netlify

netlify Bot commented Jun 29, 2026

Copy link
Copy Markdown

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit e053004
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a427e910d7eb70008abdd49
😎 Deploy Preview https://deploy-preview-25456--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@dvdksn dvdksn requested a review from a team June 29, 2026 14:16
@dvdksn dvdksn added this to the sbx/v0.34.0 milestone Jun 29, 2026
dvdksn added 2 commits June 29, 2026 16:17
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

This PR vendors the sbx v0.34.0 CLI reference YAML data and regenerates the sandboxes release notes. The changes are well-structured and technically sound.

What was checked:

  • data/sbx_cli/*.yaml — Vendored/generated CLI reference data (auto-generated from upstream; correctly not manually edited per project conventions)
  • content/manuals/ai/sandboxes/release-notes.md — Regenerated release notes for v0.34.0

No high or medium severity issues found. The vendored YAML files are generated content updated via the standard vendor workflow, which is the expected and correct pattern.

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟡 NEEDS ATTENTION

Comment thread content/manuals/ai/sandboxes/release-notes.md
Comment thread content/manuals/ai/sandboxes/release-notes.md
- Add OCI v2 kit artifact streaming that decompresses the layer once to a cache directory and uses seek-based random access, so file content is not held in memory between reads.
- Restrict kit installs to an allowlist of sources, defaulting to Docker Hub (`docker.io/`) only.

**Breaking:** installing a kit from another registry or a Git URL fails until you add its prefix with `sbx settings set kit.allowedSources`. See [Docs: Restrict kit sources](https://docs.docker.com/ai/sandboxes/customize/kits#restrict-kit-sources) for details.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[MEDIUM] Bold used for a callout label, not a UI element

**Breaking:** uses bold as a label/prefix, which the style guide reserves for UI elements only. The established Docker docs pattern for breaking changes or warnings is a callout block:

> [!IMPORTANT]
> Installing a kit from another registry or a Git URL fails until you add its prefix with `sbx settings set kit.allowedSources`. See [Restrict kit sources](https://docs.docker.com/ai/sandboxes/customize/kits#restrict-kit-sources) for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants