chore(deps): update dependency nvidia/openshell to v0.0.94

[renovate-fullsend]

This PR contains the following updates:

Package	Update	Change
NVIDIA/OpenShell	patch	0.0.83 → 0.0.94

---

Release Notes

NVIDIA/OpenShell (NVIDIA/OpenShell)

v0.0.94

Compare Source

v0.0.93

Compare Source

v0.0.92: OpenShell v0.0.92

Compare Source

OpenShell v0.0.92

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.92 sh

What's Changed

• fix: eliminate parallel Rust test flakes by @​pimlock in #​2434
• feat(cli): add --output json/yaml to sandbox get, status, and sandbox create by @​rhuss in #​1989
• refactor(tui): default create form state by @​elezar in #​2458
• feat(sandbox,gateway): route sandbox egress through corporate HTTP proxy by @​feloy in #​2245
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 by @​dependabot[bot] in #​2440
• refactor(policy): extract shared L7 endpoint validation by @​gracesmith6504 in #​2389
• chore(deps): bump docker/login-action from 4.4.0 to 4.5.1 by @​dependabot[bot] in #​2488
• fix(router): strip Anthropic beta fields from Vertex rawPredict body by @​zanetworker in #​2465
• fix: assorted byte-index slicing safety fixes by @​andrewwhitecdw in #​2452
• fix: assorted arithmetic and indexing robustness fixes by @​andrewwhitecdw in #​2451
• fix(policy): avoid panic truncating multi-byte UTF-8 paths for display by @​andrewwhitecdw in #​2448

New Contributors

• @​andrewwhitecdw made their first contribution in #​2452

Full Changelog: NVIDIA/OpenShell@v0.0.91...v0.0.92

v0.0.91: OpenShell v0.0.91

Compare Source

OpenShell v0.0.91

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.91 sh

What's Changed

• fix(examples): add missing workspace fields to governance interceptor by @​pavelanni in #​2436
• fix(auth): report gateway authentication status by @​drew in #​2435
• refactor(supervisor): pass agent proposal state explicitly by @​elezar in #​2421

New Contributors

• @​pavelanni made their first contribution in #​2436

Full Changelog: NVIDIA/OpenShell@v0.0.90...v0.0.91

v0.0.90: OpenShell v0.0.90

Compare Source

OpenShell v0.0.90

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.90 sh

What's Changed

• fix(e2e): detect gateway workload for health port-forward by @​krishicks in #​2400
• feat(tui): add config key support to provider create/update forms by @​letv1nnn in #​2224
• fix(vm): reduce registry rootfs staging pressure by @​pimlock in #​2425
• fix(driver-k8s): add label selector to sandbox watch stream and list by @​rhuss in #​2223
• fix(agents): make baked payload readable by @​elezar in #​2419
• refactor(cli): extract shared helpers into commands/common module by @​varshaprasad96 in #​2359
• fix(sandbox): skip read-only mounts during recursive chown of /sandbox by @​varshaprasad96 in #​2341
• fix(mise): initialize Python dependencies in fresh worktrees by @​matthewgrossman in #​2429
• fix(policy): keep internal allowed IP proposals pending by @​alangou in #​2416

New Contributors

• @​letv1nnn made their first contribution in #​2224

Full Changelog: NVIDIA/OpenShell@v0.0.89...v0.0.90

v0.0.89: OpenShell v0.0.89

Compare Source

OpenShell v0.0.89

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.89 sh

What's Changed

• docs(agents): keep project skills synchronized by @​pimlock in #​2349
• fix(proxy): include OPA deny reason in CONNECT 403 response by @​zanetworker in #​2363
• fix(cli): respect CARGO_TARGET_DIR in openshell wrapper script by @​jhjaggars in #​2391
• docs(brand): add OpenShell brand assets by @​drew in #​2398
• fix(dco): Fix mismatched wording that breaks initial DCO checks by @​matthewgrossman in #​2399
• docs(extensibility): add gateway interceptor guide by @​drew in #​2397
• docs(docker-compose): replace removed OpenClaw community sandbox with NemoClaw redirect by @​Schimuneck in #​2405
• docs(prover): correct prove() exit code doc comment by @​eviehoward in #​2395
• fix(server): prevent unrelated sandbox deletes from blocking deletion events by @​pimlock in #​2340

New Contributors

• @​Schimuneck made their first contribution in #​2405
• @​eviehoward made their first contribution in #​2395

Full Changelog: NVIDIA/OpenShell@v0.0.88...v0.0.89

v0.0.88: OpenShell v0.0.88

Compare Source

OpenShell v0.0.88

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.88 sh

What's Changed

• ci(e2e): reuse prebuilt CLI and gateway artifacts by @​elezar in #​2311
• docs: fix broken links and small inconsistencies by @​mesutoezdil in #​2329
• fix(gateway): honor tty flag for interactive exec by @​emonq in #​2315
• chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @​dependabot[bot] in #​2357
• chore(ci): pin pr gate action by @​elezar in #​2368
• fix(ci): grant E2E permissions to release workflows by @​pimlock in #​2376
• fix(providers): allow git clone/fetch via default GitHub provider by @​russellb in #​2317
• fix(build): raise open-file limit for host musl cross-compile on macOS by @​purp in #​2307
• fix(supervisor-network): warn on unsupported L7 access presets by @​lunarwhite in #​2177
• feat(workspace): add workspace resource model with scoping, membershi… by @​derekwaynecarr in #​2243
• fix(supervisor): tailor Landlock rights by inode type by @​drew in #​2380
• perf(build): share sccache across worktrees by @​matthewgrossman in #​2379
• chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​2381
• fix(driver-podman): avoid panic when HOME is unset on macOS by @​mesutoezdil in #​2327
• fix(ci): fix mirror SHA detection in e2e-label-help workflow by @​rhuss in #​2236

New Contributors

• @​emonq made their first contribution in #​2315
• @​purp made their first contribution in #​2307

Full Changelog: NVIDIA/OpenShell@v0.0.87...v0.0.88

v0.0.87

Compare Source

v0.0.86: OpenShell v0.0.86

Compare Source

OpenShell v0.0.86

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.86 sh

What's Changed

• feat!(openshell-cli): remove openshell policy prove command and z3 de… by @​SDAChess in #​2318
• fix(server): persist sandbox labels on create by @​matthewgrossman in #​2306
• fix: remove mentions of bundled-z3 in CI and wheel builds by @​SDAChess in #​2322
• fix(gateway): probe Docker socket during driver auto-detection by @​krishicks in #​2303
• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​2289
• chore(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 by @​dependabot[bot] in #​2288
• feat(tui): navigate panels via Up/Down arrow overflow at list boundaries by @​varshaprasad96 in #​2287
• feat(providers): AWS STS AssumeRole refresh strategy and aws-s3 profile by @​russellb in #​1782
• rfc-0009: supervisor middleware by @​pimlock in #​1738
• test(e2e): run VM suite in CI by @​drew in #​2305
• fix(vm-driver): fixes BYOC sandbox creation failing with ext4-fs writ… by @​bornav in #​2150
• feat(supervisor-middleware): add network egress middleware by @​pimlock in #​2027

New Contributors

• @​matthewgrossman made their first contribution in #​2306
• @​varshaprasad96 made their first contribution in #​2287
• @​bornav made their first contribution in #​2150

Full Changelog: NVIDIA/OpenShell@v0.0.85...v0.0.86

v0.0.85: OpenShell v0.0.85

Compare Source

OpenShell v0.0.85

Quick install

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.85 sh

What's Changed

• fix(sdk): initialize sandbox annotations by @​drew in #​2296
• fix(driver-vm): run sandbox supervisor as guest pid 1 by @​drew in #​2299
• feat(ci): introduce merge queue by @​elezar in #​2024
• feat(gateway): add elevated gateway info by @​elezar in #​2202
• fix(ci): prune snap assets from dev release by @​pimlock in #​2302

Full Changelog: NVIDIA/OpenShell@v0.0.84...v0.0.85

v0.0.84

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Site preview

Preview: https://214af404-site.fullsend-ai.workers.dev

Commit: 27db72422e0d6b564e89a776c1b3235e735cefe4

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[fullsend-ai-retro]

🤖 Finished Retro · ✅ Success · Started 6:59 AM UTC · Completed 7:16 AM UTC
Commit: 505bc2b · View workflow run →

[fullsend-ai-retro]

Retro: PR #5597 — Renovate OpenShell v0.0.94 update (closed without merge)

What happened

Renovate opened PR #5597 on July 25 to update NVIDIA/OpenShell from v0.0.83 to v0.0.94 in .github/scripts/openshell-version.sh. CI immediately failed: Runner Image, Functional Tests, and E2E Tests all returned 404 errors downloading the v0.0.94 binary and checksums from GitHub Releases. The root cause was that v0.0.94 exists as a git tag but has no corresponding GitHub Release — the latest published release is v0.0.92.

The PR sat open for 5 days (July 25–30) with persistent CI failures across 4+ rebase cycles. Renovate kept rebasing against main, re-triggering the same failures each time. No fullsend agents were dispatched during this period — the is_event_actor_authorized permission check in dispatch rejected renovate-fullsend[bot] on every synchronize event. On July 30, a human (rh-hemartin) manually closed the PR, which triggered a retro dispatch.

Root cause

The renovate.json custom manager had "datasourceTemplate": "github-tags", causing Renovate to track all git tags — including tags without published releases. The inline comment in openshell-version.sh correctly declared datasource=github-releases, but the custom manager config took precedence.

All findings map to existing issues — no new proposals needed

• #5731 (closed today): Directly fixes the root cause by changing the datasource from github-tags to github-releases. This PR is the exact scenario that prompted the fix.
• #4076: Proposes minimumReleaseAge: "2 days" for OpenShell as a defense-in-depth against yanked releases. This PR provides additional evidence — even with the datasource fix, upstream could still yank releases within hours of publication (as happened previously with v0.0.81 on PR chore(deps): update dependency nvidia/openshell to v0.0.81 #3967).
• #2863: Proposes stale bot PR detection to auto-close PRs with prolonged CI failure and no human engagement. This PR is a textbook case: 5 days of consistent 404 failures with zero human interaction before manual close.
• #5706: Proposes adding a [bot]$ carve-out to the review dispatch path, which would have allowed review dispatch for this PR. Currently the code/fix stages have this carve-out but review does not.
• #4006, #5295, #1411: Cover skipping retro dispatch for bot-authored PRs with no agent involvement — exactly what happened here (retro dispatched on close despite zero agent activity during the PR's lifecycle).

Workflow quality

This was a low-complexity, zero-agent-involvement workflow. The only fullsend activity was the retro dispatch on PR close. The workflow behaved as designed — Renovate bot PRs are excluded from review dispatch, and the retro fires unconditionally on close. The improvements needed are all tracked in existing issues.