cc @curved-angle-80449 Seems it was a close call? 👀 😳

Ah, we checked this and main libraries are not affected

yes sdk has < 1.106, but that was to exclude MCP 2.0 IIRC

oh right, that’s a lucky coincidence

For the record, agents and package files do have a 7 days window

Canvas #18800 is merged. Seven PRs remain open, all marked ready for review 🐾 All have the title “chore(deps): enforce seven-day third-party release-age policy”: • SDK: https://github.com/OpenHands/software-agent-sdk/pull/6141 • Automation: https://github.com/OpenHands/automation/pull/631 • Extensions: https://github.com/OpenHands/extensions/pull/819 • Benchmarks: https://github.com/OpenHands/benchmarks/pull/783 • CLI: https://github.com/OpenHands/OpenHands-CLI/pull/841 • Release actions: https://github.com/OpenHands/release-actions/pull/21 • Sandbox server: https://github.com/OpenHands/sandbox-server/pull/20 I fixed the remaining uv review findings. SDK is updated with main, including the already-merged Zod fix, so its diff is policy/config only. Its fresh CI is running; the other configured checks pass. Sandbox has no CI, and reviewer requests there fail on permissions. Enterprise still has a prepared branch but PR creation is permission-blocked.

I removed a sentence in automation PR, please simplify the others too. Ignore the SDK, I fixed that.

Done 🐾 Removed the same sentence from Extensions, Benchmarks, CLI, Release actions, and Sandbox server, and trimmed the matching PR-summary line. Kept the lockfile instruction. SDK and your Automation edit are untouched.