Skip to content

Enable network access in sandbox configuration#24055

Merged
galz10 merged 2 commits intomainfrom
galzahavi/fix/network-config-default
Mar 27, 2026
Merged

Enable network access in sandbox configuration#24055
galz10 merged 2 commits intomainfrom
galzahavi/fix/network-config-default

Conversation

@galz10
Copy link
Copy Markdown
Collaborator

@galz10 galz10 commented Mar 27, 2026

Summary

Details

Related Issues

How to Validate

Pre-Merge Checklist

  • Updated relevant documentation and README (if needed)
  • Added/updated tests (if needed)
  • Noted breaking changes (if any)
  • Validated on required platforms/methods:
    • MacOS
      • npm run
      • npx
      • Docker
      • Podman
      • Seatbelt
    • Windows
      • npm run
      • npx
      • Docker
    • Linux
      • npm run
      • npx
      • Docker

@galz10 galz10 requested a review from a team as a code owner March 27, 2026 20:58
@gemini-code-assist
Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request modifies the sandbox configuration to enable network access by default. This change ensures that sandbox environments have connectivity enabled unless explicitly restricted, improving compatibility for processes requiring network resources.

Highlights

  • Default Network Access: Changed the default value for network access in the sandbox configuration from false to true.
  • Configuration Fallback: Updated the configuration logic to default to true if network access is not explicitly defined in the sandbox options.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the default sandbox configuration to enable network access by default. Specifically, the networkAccess variable and its fallback value in loadSandboxConfig have been changed from false to true. I have no feedback to provide.

@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 27, 2026

Size Change: -6 B (0%)

Total Size: 26.4 MB

Filename Size Change
./bundle/chunk-GAN45U4A.js 0 B -3.77 MB (removed) 🏆
./bundle/chunk-YEGFWEIZ.js 0 B -14.7 MB (removed) 🏆
./bundle/core-OUIW3TRL.js 0 B -44.1 kB (removed) 🏆
./bundle/devtoolsService-SFFP3G7U.js 0 B -27.7 kB (removed) 🏆
./bundle/interactiveCli-HDGIVHCY.js 0 B -1.63 MB (removed) 🏆
./bundle/oauth2-provider-KHIYYN7Z.js 0 B -9.16 kB (removed) 🏆
./bundle/chunk-EBZLEQVI.js 14.7 MB +14.7 MB (new file) 🆕
./bundle/chunk-EL2ZOM3V.js 3.77 MB +3.77 MB (new file) 🆕
./bundle/core-6GXRAZPQ.js 44.1 kB +44.1 kB (new file) 🆕
./bundle/devtoolsService-XFTGVM2E.js 27.7 kB +27.7 kB (new file) 🆕
./bundle/interactiveCli-D7K45HGT.js 1.63 MB +1.63 MB (new file) 🆕
./bundle/oauth2-provider-TKEJAP3T.js 9.16 kB +9.16 kB (new file) 🆕
ℹ️ View Unchanged
Filename Size Change
./bundle/chunk-34MYV7JD.js 2.45 kB 0 B
./bundle/chunk-5AUYMPVF.js 858 B 0 B
./bundle/chunk-664ZODQF.js 124 kB 0 B
./bundle/chunk-DAHVX5MI.js 206 kB 0 B
./bundle/chunk-IUUIT4SU.js 56.5 kB 0 B
./bundle/chunk-K7ASY5QY.js 1.96 MB 0 B
./bundle/chunk-RJTRUG2J.js 39.8 kB 0 B
./bundle/devtools-36NN55EP.js 696 kB 0 B
./bundle/dist-T73EYRDX.js 356 B 0 B
./bundle/gemini.js 532 kB -2 B (0%)
./bundle/getMachineId-bsd-TXG52NKR.js 1.55 kB 0 B
./bundle/getMachineId-darwin-7OE4DDZ6.js 1.55 kB 0 B
./bundle/getMachineId-linux-SHIFKOOX.js 1.34 kB 0 B
./bundle/getMachineId-unsupported-5U5DOEYY.js 1.06 kB 0 B
./bundle/getMachineId-win-6KLLGOI4.js 1.72 kB 0 B
./bundle/memoryDiscovery-3DVAQSAI.js 922 B 0 B
./bundle/multipart-parser-KPBZEGQU.js 11.7 kB 0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/client/main.js 221 kB 0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/_client-assets.js 227 kB 0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/index.js 11.5 kB 0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/types.js 132 B 0 B
./bundle/sandbox-macos-permissive-open.sb 890 B 0 B
./bundle/sandbox-macos-permissive-proxied.sb 1.31 kB 0 B
./bundle/sandbox-macos-restrictive-open.sb 3.36 kB 0 B
./bundle/sandbox-macos-restrictive-proxied.sb 3.56 kB 0 B
./bundle/sandbox-macos-strict-open.sb 4.82 kB 0 B
./bundle/sandbox-macos-strict-proxied.sb 5.02 kB 0 B
./bundle/src-QVCVGIUX.js 47 kB 0 B
./bundle/tree-sitter-7U6MW5PS.js 274 kB 0 B
./bundle/tree-sitter-bash-34ZGLXVX.js 1.84 MB 0 B

compressed-size-action

@galz10 galz10 enabled auto-merge March 27, 2026 21:16
@gemini-cli gemini-cli bot added the priority/p1 Important and should be addressed in the near term. label Mar 27, 2026
@galz10 galz10 added this pull request to the merge queue Mar 27, 2026
Merged via the queue into main with commit 765fb67 Mar 27, 2026
27 checks passed
@galz10 galz10 deleted the galzahavi/fix/network-config-default branch March 27, 2026 21:44
@galz10
Copy link
Copy Markdown
Collaborator Author

galz10 commented Mar 27, 2026

/patch both

@github-actions
Copy link
Copy Markdown

🚀 [Step 1/4] Patch workflow(s) waiting for approval!

📋 Details:

  • Channels: stable,preview
  • Commit: 765fb67011c291284dc8e1bcf27603c6845feaf1
  • Workflows Created: 2

⏳ Status: The patch creation workflow has been triggered and is waiting for deployment approval. Please visit the specific workflow links below and approve the runs.

🔗 Track Progress:

@github-actions
Copy link
Copy Markdown

🚀 [Step 2/4] Patch PR Created!

📋 Patch Details:

📝 Next Steps:

  1. Review and approve the hotfix PR: #24061
  2. Once merged, the patch release will automatically trigger
  3. You'll receive updates here when the release completes

🔗 Track Progress:

github-actions bot pushed a commit that referenced this pull request Mar 27, 2026
# Conflicts:
#	packages/cli/src/config/sandboxConfig.test.ts
@github-actions
Copy link
Copy Markdown

🚀 [Step 2/4] Patch PR Created!

📋 Patch Details:

📝 Next Steps:

  1. ⚠️ Resolve conflicts in the hotfix PR first: #24063
  2. Test your changes after resolving conflicts
  3. Once merged, the patch release will automatically trigger
  4. You'll receive updates here when the release completes

🔗 Track Progress:

galz10 added a commit that referenced this pull request Mar 27, 2026
Resolves the merge conflicts introduced in sandboxConfig.test.ts when cherry-picking #24055 (Enable network access in sandbox configuration).
@github-actions
Copy link
Copy Markdown

🚀 [Step 3/4] Patch Release Waiting for Approval!

📋 Release Details:

  • Environment: prod
  • Channel: stable → publishing to npm tag latest
  • Version: v0.35.2
  • Hotfix PR: Merged ✅
  • Release Branch: release/v0.35.2-pr-24055

⏳ Status: The patch release has been triggered and is waiting for deployment approval. Please visit the specific workflow run link below and approve the deployment. You'll receive another update when it completes.

🔗 Track Progress:

@github-actions
Copy link
Copy Markdown

🚀 [Step 3/4] Patch Release Waiting for Approval!

📋 Release Details:

  • Environment: prod
  • Channel: preview → publishing to npm tag preview
  • Version: v0.36.0-preview.5
  • Hotfix PR: Merged ✅
  • Release Branch: release/v0.36.0-preview.5-pr-24055

⏳ Status: The patch release has been triggered and is waiting for deployment approval. Please visit the specific workflow run link below and approve the deployment. You'll receive another update when it completes.

🔗 Track Progress:

@github-actions
Copy link
Copy Markdown

[Step 4/4] Patch Release Complete!

📦 Release Details:

🎉 Status: Your patch has been successfully released and published to npm!

📝 What's Available:

🔗 Links:

@github-actions
Copy link
Copy Markdown

[Step 4/4] Patch Release Complete!

📦 Release Details:

  • Version: 0.35.3
  • NPM Tag: latest
  • Channel: stable
  • Dry Run: false

🎉 Status: Your patch has been successfully released and published to npm!

📝 What's Available:

🔗 Links:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

priority/p1 Important and should be addressed in the near term.

Projects

None yet

2 participants