Skip to content

chore(deps): bump @microsoft/agent-governance-sdk from 4.0.0 to 5.0.0 in /agent-governance-copilot-cli - #67

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent-governance-copilot-cli/microsoft/agent-governance-sdk-5.0.0
Open

chore(deps): bump @microsoft/agent-governance-sdk from 4.0.0 to 5.0.0 in /agent-governance-copilot-cli#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/agent-governance-copilot-cli/microsoft/agent-governance-sdk-5.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps @microsoft/agent-governance-sdk from 4.0.0 to 5.0.0.

Release notes

Sourced from @​microsoft/agent-governance-sdk's releases.

v4.1.0

What's New in v4.1.0

Agent OS (Nexus)

  • Ed25519 signature verification for agent registration and deregistration
  • Escrow signing support in ProofOfOutcome
  • Crewai adapter fixes

Policy Engine

  • Dynamic policy conditions with time-based and cost-aware rules
  • Updated Cedar policy versions
  • agt-policies 5.0.0

All Packages

See CHANGELOG for full details.

Changelog

Sourced from @​microsoft/agent-governance-sdk's changelog.

[5.0.0] - 2026-06-25

Changed

  • BREAKING: Monorepo-wide v5 alignment. Bumped all first-party Python, TypeScript, .NET, and Rust packages from 4.1.0 to 5.0.0 (plus the top-level VERSION file, the docs/ARCHITECTURE.md banner, and the Claude Code plugin/marketplace manifests), and widened internal cross-package version caps from <5.0 to <6.0. This aligns the released version line with the documentation, which already describes Agent Control Specification (ACS) as the AGT 5.0 policy layer (ACS landed in #2747). Third-party dependency caps, the independently-versioned policy-engine/ ACS engine (0.3.1-beta), and the separately-tagged Go module are unchanged; lockfiles regenerate at publish time.

Added

  • Agent sandbox nono provider — added NonoSandboxProvider to agt-sandbox, a Linux/macOS kernel-enforced sandbox backend via the nono-py bindings (Landlock / Seatbelt) with filtered egress, native runtime gating, and AST pre-scan; install with pip install "agt-sandbox[nono]".
  • Command denylist enforcement in RingEnforcer — added check_command() method to RingEnforcer that validates subprocess commands against a global DENIED_COMMANDS list with case-insensitive matching and shell metacharacter stripping (;, &, |) to prevent injection bypasses. Includes comprehensive test coverage in tests/unit/test_command_denylist.py.

Fixed

  • agent-os policy evaluator - folder-scoped backend decisions now include policy, backend, evaluation_ms, context_snapshot, and timestamp fields in audit_entry, matching the flat evaluation path and eliminating the parity gap when an external backend (OPA / Cedar) returns a decision under folder-scoped evaluation (#2861).
Commits
  • dbf6d2a chore(deps-dev): Bump postcss (#3424)
  • 049c2b0 chore(deps): Bump axios in /agent-governance-typescript/agent-os-vscode (#3372)
  • f731dc5 chore(deps-dev): Bump eslint in /agent-governance-typescript (#3218)
  • 63a2b81 chore(deps-dev): bump @​types/node in /agent-governance-typescript (#3270)
  • c159b54 chore(deps-dev): bump @​typescript-eslint/parser (#3275)
  • f27a41d chore(deps): bump js-yaml in /agent-governance-typescript (#3277)
  • 8b9a074 chore(deps): bump js-yaml in /agent-governance-typescript (#3223)
  • 1133147 chore(deps-dev): bump @​typescript-eslint/parser (#3215)
  • c89b742 chore(deps-dev): bump @​types/node in /agent-governance-typescript (#3211)
  • e5693cb chore: bump monorepo version 4.1.0 -> 5.0.0 (#3191)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@microsoft/agent-governance-sdk](https://github.com/microsoft/agent-governance-toolkit/tree/HEAD/agent-governance-typescript) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/microsoft/agent-governance-toolkit/releases)
- [Changelog](https://github.com/microsoft/agent-governance-toolkit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/microsoft/agent-governance-toolkit/commits/v5.0.0/agent-governance-typescript)

---
updated-dependencies:
- dependency-name: "@microsoft/agent-governance-sdk"
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

PR Review Summary

Check Status Details
🔍 Code Review ⚠️ Missing No current-run comment
🛡️ Security Scan ⚠️ Missing No current-run comment
🔄 Breaking Changes ⚠️ Missing No current-run comment
📝 Docs Sync ⚠️ Missing No current-run comment
🧪 Test Coverage ⚠️ Missing No current-run comment

Verdict: ⚠️ AI review incomplete; ready for human review

AI review comments are untrusted advisory output. The summary reports workflow-generated completion status only, not model-authored pass/fail claims.

@github-actions

Copy link
Copy Markdown

📦 Dependency diff (SBOM)

Comparing maindependabot/npm_and_yarn/agent-governance-copilot-cli/microsoft/agent-governance-sdk-5.0.0.

Summary: ➕ 0 added · ➖ 0 removed · 🔄 2 bumped

🔄 Bumped

cargo (1)

Package From To
base64 0.23.1 0.23.0

npm (1)

Package From To
%40microsoft/agent-governance-copilot-cli 4.0.0 5.0.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants