Bump SDK packages to v1.23.0#747
Conversation
Automated version bump after PyPI release. Co-authored-by: openhands <openhands@all-hands.dev>
all-hands-bot
left a comment
all-hands-bot
left a comment
There was a problem hiding this comment.
🟢 Good taste - SDK version bump is correctly implemented.
[SUPPLY CHAIN SECURITY HOLD]
Both target versions were published less than 7 days ago:
openhands-sdk==1.23.0: published 2026-05-20T23:52:49Z (~2 minutes ago)openhands-tools==1.23.0: published 2026-05-20T23:52:54Z (~2 minutes ago)
Per the 7-day supply chain security policy, this PR cannot be approved yet. Please wait until 2026-05-27 before merging to allow time for community security review of the upstream releases.
Note: While these are first-party OpenHands packages (lower risk than third-party dependencies), the waiting period still applies to catch any immediate issues discovered in the wild.
[RISK ASSESSMENT]
- [Overall PR]
⚠️ Risk Assessment: 🟢 LOW
The changes themselves are correct and low-risk. The hold is purely procedural for supply chain security.
VERDICT:
⏳ On hold: Approved pending 7-day waiting period
KEY INSIGHT:
Valid dependency bump blocked only by time-based security policy.
Was this automated review useful? React with 👍 or 👎 to this review to help us measure review quality.
Workflow run: https://github.com/OpenHands/OpenHands-CLI/actions/runs/26196816808
1 participant
Automated Version Bump
This PR updates the following packages to version 1.23.0:
openhands-sdkopenhands-toolsTriggered by: Release of software-agent-sdk v1.23.0
This PR was automatically created by the version-bump-prs workflow.
🚀 Try this PR