Please ship cloudflare/sandbox with stable Python ≥3.12

[jsj]

Summary

cloudflare/sandbox:0.4.x still bundles /usr/bin/python3 as Python 3.11.0rc1, so every import and venv inherits the
RC interpreter.

Proof

docker run --rm cloudflare/sandbox:0.4.12 python3 --version
# Python 3.11.0rc1

Impact

OpenAI’s Agents SDK (and other typing-heavy libs) trip over that RC build. For reference, openai/openai-agents-python#891
(openai/openai-agents-python#891) reproduces a KeyError: ~TContext on Python 3.11.0/rc1 but
disappears on 3.12+. We’re forced to add the Deadsnakes PPA and apt-install 3.12 in every Docker build just to stay stable,
which slows CI/CD and widens the failure surface.

Ask

Ship a new sandbox tag with a stable Python ≥3.12 baked in so downstream users can drop the workaround.

[anthonywu]

Might as well go out with 3.13 at this point, with Sandbox in Beta all programs depending on it are net-new anyways so it's fair to expect platform users to adapt to the runtime.

Anyone can still bring in their own python boomer versions via custom Dockerfiles anyways.

[whoiskatrin]

Summary

cloudflare/sandbox:0.4.x still bundles /usr/bin/python3 as Python 3.11.0rc1, so every import and venv inherits the
RC interpreter.

Proof

docker run --rm cloudflare/sandbox:0.4.12 python3 --version
# Python 3.11.0rc1

Impact

OpenAI’s Agents SDK (and other typing-heavy libs) trip over that RC build. For reference, openai/openai-agents-python#891
(openai/openai-agents-python#891) reproduces a KeyError: ~TContext on Python 3.11.0/rc1 but
disappears on 3.12+. We’re forced to add the Deadsnakes PPA and apt-install 3.12 in every Docker build just to stay stable,
which slows CI/CD and widens the failure surface.

Ask

Ship a new sandbox tag with a stable Python ≥3.12 baked in so downstream users can drop the workaround.

Yes, sounds reasonable. We will take a look at this ASAP.

[whoiskatrin]

@jsj hey James, so it seems like the issue you've references is not happening on any version after 3.11.11, so we've added 3.11.14.

You can test it using docker file and package from this PR #183

would that solve your concern? thanks!

[jsj]

Yes left a note that does the trick