[ca] Update Claude Code to 2.1.14 and Sandbox Runtime to 0.0.29

[github-actions]

This PR updates two Anthropic tools to their latest versions.

Summary of Updates

Two tools have been updated:

• Claude Code: 2.1.12 → 2.1.14 (skipped 2.1.13)
• Sandbox Runtime: 0.0.28 → 0.0.29

Update Details

Claude Code: 2.1.12 → 2.1.14

Version: 2.1.12 → 2.1.14
Release Timeline:

• 2.1.12: Released 2026-01-17 15:40:35 UTC
• 2.1.13: Skipped (no release)
• 2.1.14: Released 2026-01-20 22:37:25 UTC
  Release Frequency: 2 versions over 3 days

Breaking Changes: None detected

New Features:

• Added --file <specs...> flag for downloading file resources at startup
  • Format: file_id:relative_path (e.g., --file file_abc:doc.txt file_def:img.png)
  • Allows specifying multiple files to be downloaded when Claude Code starts

Bug Fixes: Not documented (no public release notes or repository available)

Security: No CVEs or security patches documented

CLI Discovery: New --file flag added for file resource management

Impact: Risk Low

• New optional flag that doesn't affect existing functionality
• No breaking changes to existing commands or flags
• All existing workflows will continue to work without modification

Migration: No migration required

• The new --file flag is optional
• Existing code paths remain unchanged

Package Links

• NPM Package: https://www.npmjs.com/package/@anthropic-ai/claude-code
• Repository: Not publicly available
• Release Notes: No public release notes available

---

Sandbox Runtime: 0.0.28 → 0.0.29

Version: 0.0.28 → 0.0.29
Release Timeline:

• 0.0.28: Released 2026-01-15 03:21:45 UTC
• 0.0.29: Released 2026-01-21 06:43:24 UTC
  Release Frequency: 1 version over 6 days

Breaking Changes: None detected

New Features: Not documented (library package, no CLI or public changelog)

Bug Fixes: Not documented (no public release notes or repository available)

Security: No CVEs or security patches documented

CLI Discovery: Not applicable (library package, not a CLI tool)

Impact: Risk Low

• Sandbox Runtime is a library package used internally
• No API breaking changes detected from NPM metadata
• Description unchanged: "Anthropic Sandbox Runtime (ASRT) - A general-purpose tool for wrapping security boundaries around arbitrary processes"

Migration: No migration required

• Minor version bump suggests backward compatibility
• Used internally by Claude Code for sandboxing

Package Links

• NPM Package: https://www.npmjs.com/package/@anthropic-ai/sandbox-runtime
• Repository: https://github.com/anthropic-experimental/sandbox-runtime
• Release Notes: No public release notes available

---

Changes Made

1. Updated pkg/constants/constants.go:

   • DefaultClaudeCodeVersion: "2.1.12" → "2.1.14"
   • DefaultSandboxRuntimeVersion: "0.0.28" → "0.0.29"

2. Cached help outputs:

   • Saved Claude Code 2.1.14 help output to /tmp/gh-aw/cache-memory/claude-code-2.1.14-help.txt
   • Updated version check cache with latest versions

Testing Recommendations

• Verify Claude Code 2.1.14 works with existing workflows
• Test new --file flag functionality if needed in future workflows
• Confirm Sandbox Runtime 0.0.29 doesn't introduce any sandboxing issues

Overall Risk Assessment

Risk Level: Low

Both updates are minor version bumps with no breaking changes. Claude Code adds a new optional feature, and Sandbox Runtime appears to be a maintenance release. All existing functionality remains intact.

AI generated by CLI Version Checker