Repository navigation
Python: Lower Hyperlight dependency floors for 1.26 release - #10313
Conversation
GitHub Actions
Active
GitHub Actions
Active
GitHub Actions
Active
Eduard van Valkenburg (eavanvalkenburg)
added
the
python
agent-framework-automation
Bot
added
the
documentation
There was a problem hiding this comment.
🟡 Changes recommended
The lowered SDK minimum admits versions lacking Sandbox.interrupt_handle(), which execution calls unconditionally during warm-up, causing even trivial guest execution to fail.
1 open issue
What changed in this PR
This PR lowers Hyperlight installation dependency floors for the Python 1.26.0 release without changing runtime execution code.
Changes:
- Lower three Hyperlight dependency minimums from
0.9.0to0.8.0, preserving upper bounds and platform markers. - Synchronize lockfile requirement metadata while retaining existing
0.9.0resolutions. - Clarify that guest execution still requires
Sandbox.interrupt_handle().
| File | Description |
|---|---|
python/uv.lock |
Aligns dependency requirement metadata with the lowered floors. |
python/packages/hyperlight/README.md |
Distinguishes installation bounds from execution API requirements. |
python/packages/hyperlight/pyproject.toml |
Lowers the three Hyperlight dependency minimums to 0.8.0. |
Review effort: Balanced
GitHub Actions
Active
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
MAF Automated Review — Iteration 1
Result: No findings
Scope: full PR (2 commit(s)): 20cf660a446d, 8571cad7cebd
Model: gpt-5.6-sol
Overview
The PR lowers the Hyperlight dependency metadata to 0.8 while retaining 0.9 lockfile resolutions and explicitly documenting the narrower execution API requirement. The declared constraints are synchronized between the package manifest and lockfile metadata, and existing native tests exercise the locked 0.9 runtime behavior. No additional publishable concern remained after evidence reconciliation and deduplication against supplied feedback.
Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.
Motivation & Context
Restore the Hyperlight installation lower bounds to 0.8.0 for the Python 1.26.0 release, allowing dependency resolution to select either 0.8 or 0.9 packages rather than requiring 0.9.
Description & Review Guide
hyperlight-sandbox,hyperlight-sandbox-backend-wasm, andhyperlight-sandbox-python-guestfrom0.9.0to0.8.0. Update the workspace lockfile requirement metadata and clarify the execution API requirement in the package README.<0.10upper bounds, platform markers, package versions, release manifest, and existing 0.9.0 lockfile resolutions remain unchanged. No runtime behavior is changed.Sandbox.interrupt_handle(), documented for Hyperlight SDK 0.9.0 or later. An installed SDK must provide that API to execute guest code; lowering the dependency floor does not add a fallback for older SDKs.Related Issue
N/A - trivial change. Maintainer-requested dependency-floor correction for the pending Python 1.26.0 release.
AI Assistance
AI assistance details: Copilot assisted with the dependency metadata, README clarification, and PR description.
Contribution Checklist
breaking changelabel (or add "[BREAKING]" to the title prefix, before or after any language prefix) — a workflow keeps the label and title prefix in sync automatically.Local builds, tests, and other checks were not run at the maintainer's request. GitHub Actions will provide validation.