fix(security): remediate managed image dependencies

[senthilr-nv]

Summary

Updates the existing Hermes and Deep Agents Code managed base images to dependency versions that contain public security fixes. Hermes now pins Node.js 24.18.1, uv 0.11.33, MCP 1.28.1, and Tornado 6.5.7; Deep Agents Code retains its integration-compatible 0.1.34 release with hash-locked fixed transitive dependencies.

Changes

• Checksum-pins the official Node.js 24.18.1 archives for amd64 and arm64, and updates the bundled npm remediation contract for npm 11.16.0.
• Applies an exact-source Hermes metadata and frozen-lock update for MCP 1.28.1 and Tornado 6.5.7, with dependency consistency and installed-version assertions.
• Keeps the current Deep Agents Code 0.1.34 integration contract while pinning uv 0.11.33, MCP 1.28.1, Pillow 12.3.0, and pyasn1 0.6.4 with hashes. Moving to Deep Agents Code 0.1.45 or later requires a separately validated hooks migration; the image contract test protects this temporary compatibility requirement.
• Updates the Hermes and Deep Agents Code dependency review records.

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Quality Gates

• Tests added or updated for changed behavior
• Existing tests cover changed behavior — justification:
• Tests not applicable — justification:
• Docs updated for user-facing behavior changes
• Docs not applicable — justification:
• Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
• Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: Security checklist passed for the exact PR diff; archive checksums, lock hashes, public dependency audits, installed-version assertions, gitleaks, and hadolint passed.
• Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Documentation Writer Review

• Documentation writer subagent reviewed the completed changes
• Result: docs-updated
• Evidence: docs/security/hermes-0.19.0-dependency-review.md; agents/langchain-deepagents-code/dependency-review.md
• Agent: Codex Desktop

DGX Station Hardware Evidence

• Tested on DGX Station
• Tested commit:
• Station profile/scenario:
• Result:
• Supporting evidence:

Verification

• PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
• Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run validate:pr passed after refreshing origin/main when hooks were skipped or unavailable
• Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: Focused Hermes, Deep Agents Code image, bundled npm, and patch tests passed (50 tests); affected subsets passed again after final edits (24 tests and 7 tests).
• Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result:
• Quality Gates section completed with required justifications or waivers
• No secrets, API keys, or credentials committed
• npm run docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

---

Signed-off-by: Senthil Ravichandran senthilr@nvidia.com

Summary by CodeRabbit

• Security

  • Updated dependency versions to address reported vulnerabilities.
  • Added stricter package and runtime version verification.

• Reliability

  • Pinned Node.js 24.18.1 and uv 0.11.33 with checksum and version checks.
  • Improved reproducibility of Hermes and Deep Agents Code environments.

• Documentation

  • Refreshed dependency reviews, audit records, compatibility details, and security notes.

• Tests

  • Expanded validation for dependency pins, runtime versions, and npm upgrade scenarios.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 9eb91473-6363-481e-9945-a37df496af97

📥 Commits

Reviewing files that changed from the base of the PR and between 45d7e1a and 4eb2caf.

⛔ Files ignored due to path filters (1)

• agents/langchain-deepagents-code/requirements.lock is excluded by !**/*.lock

📒 Files selected for processing (11)

• agents/hermes/Dockerfile.base
• agents/hermes/security-dependencies.patch
• agents/langchain-deepagents-code/Dockerfile.base
• agents/langchain-deepagents-code/dependency-review.md
• agents/langchain-deepagents-code/requirements.in
• docs/security/hermes-0.19.0-dependency-review.md
• scripts/upgrade-bundled-npm.mts
• test/hermes-dependency-review.test.ts
• test/langchain-deepagents-code-image.test.ts
• test/patch-bundled-npm-tar.test.ts
• test/upgrade-bundled-npm.test.ts

---

📝 Walkthrough

Walkthrough

Hermes and Deep Agents Code dependency pins, lockfiles, container tooling versions, npm upgrade compatibility, build-time assertions, audit records, and related tests are updated.

Changes

Dependency and runtime alignment

Layer / File(s)	Summary
Dependency pins and lockfiles agents/hermes/security-dependencies.patch, agents/langchain-deepagents-code/requirements.in	Updated Python security pins, extras, lockfile resolutions, and Deep Agents Code constraints for cryptography, mcp, Pillow, pyasn1, starlette, tornado, uv, and related packages.
Runtime tooling and npm compatibility agents/hermes/Dockerfile.base, agents/langchain-deepagents-code/Dockerfile.base, scripts/upgrade-bundled-npm.mts, test/patch-bundled-npm-tar.test.ts, test/upgrade-bundled-npm.test.ts	Added checksum-verified Node.js 24.18.1 installation, exact uv validation, expanded Python version checks, and npm 11.16.0 upgrade and tar remediation coverage.
Audit records and validation coverage docs/security/hermes-0.19.0-dependency-review.md, agents/langchain-deepagents-code/dependency-review.md, test/hermes-dependency-review.test.ts, test/langchain-deepagents-code-image.test.ts	Updated dependency review records and tests for the revised pins, audit results, runtime tooling assertions, and documented remediation details.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Suggested labels: dependencies, integration: hermes, integration: dcode, platform: container

Suggested reviewers: cv, brandonpelfrey

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the security-focused dependency remediation across managed images.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/security-managed-image-cve-closure

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-code-quality]

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage in commit 4eb2caf in the codex/security-manag... branch remains at 96%, unchanged from commit 45d7e1a in the main branch.

TypeScript / code-coverage/cli

The overall coverage in commit 4eb2caf in the codex/security-manag... branch remains at 81%, unchanged from commit 45d7e1a in the main branch.

Show a code coverage summary of the most impacted files.

File	main 45d7e1a	codex/security-manag... 4eb2caf	+/-
src/lib/onboard/docker-cdi.ts	80%	70%	-10%
src/lib/actions...-add-restart.ts	19%	10%	-9%
src/lib/actions...lution-probe.ts	95%	88%	-7%
src/lib/actions...x/mcp-bridge.ts	41%	35%	-6%
src/lib/onboard...shboard-port.ts	96%	90%	-6%
src/lib/actions...e-validation.ts	84%	81%	-3%
src/lib/onboard/preflight.ts	80%	80%	0%
src/lib/actions...confirmation.ts	69%	79%	+10%
src/lib/actions...ocker-health.ts	65%	82%	+17%
src/lib/onboard...box-prebuild.ts	74%	92%	+18%

---

_{Updated July 30, 2026 14:38 UTC}

[github-actions]

🌿 Preview your docs: https://nvidia-preview-pr-7908.docs.buildwithfern.com/nemoclaw

[github-actions]

PR Review Advisor — No blocking findings reported

Advisor assessment: No blocking advisor findings reported
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions

Model lanes

• GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
• Model comparison: normalized findings match; normalized E2E selections differ; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: cloud-inference, cloud-onboard, full-e2e, hermes-e2e, security-posture, state-backup-restore, upgrade-stale-sandbox, ubuntu-repo-cloud-langchain-deepagents-code

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

[apurvvkumaria]

Approved on exact head 4eb2caf. I found no critical blocking issue in the dependency, image-build, lockfile, or runtime-security changes. The checksum-pinned Node archives match the official release manifest, the new PyPI package hashes match official release metadata, and the fail-closed version assertions cover the installed image state. Exact-head CI, CodeQL, amd64/arm64 image builds, and E2E are green; independent targeted validation passed 39/39 tests.

Non-blocking fast follow-ups:

• Migrate deepagents-code from 0.1.34 to 0.1.45 or newer after validating the changed hooks boundary, then remove the temporary direct mcp and pyasn1 constraints.
• Remove the manual Node overlay when the pinned node:24-trixie-slim digest carries Node 24.18.1 or newer.
• Refresh the branch from current main before merge only if the repository requires it; the sole intervening main change is docs-only and does not overlap this PR.