Paras Sondhi 51b73850e1 feat: make sandbox Dockerfile mirrors optional with ARG (#14553) ...

### What problem does this PR solve?

Resolves #14447. *(Note: This supersedes stalled PR #14448 and
implements the requested CodeRabbitAI fixes).*

Currently, the Dockerfiles inside `agent/sandbox/sandbox_base_image`
(both Python and Node.js) have hardcoded Chinese package mirrors. This
forces the mirrors on all users globally, which causes build network
timeouts for contributors outside of China.

This PR introduces an enhancement to fix the issue by:
1. Implementing the `NEED_MIRROR` build argument in the sandbox
Dockerfiles.
2. Replacing static `ENV` instructions with conditional shell logic
inside `RUN` blocks to dynamically set the package registries.
3. Allowing the build to cleanly fall back to default global registries
(`pypi.org` and `npmjs.org`) when `--build-arg NEED_MIRROR=0` is passed.

### Type of change

- [x] New Feature (non-breaking change which adds functionality)
- [x] Refactoring

---------

Co-authored-by: Jin Hai <haijin.chn@gmail.com>

2026-05-11 11:01:43 +08:00

..

Dockerfile

feat: make sandbox Dockerfile mirrors optional with ARG (#14553)

2026-05-11 11:01:43 +08:00

package-lock.json

fix: update axios to 1.13.5+ to remediate CVE-2026-25639 DoS vulnerability (#13380)

2026-03-05 17:26:04 +08:00

package.json

feat: Implement pluggable multi-provider sandbox architecture (#12820)

2026-01-28 13:28:21 +08:00