@@ -37,7 +37,7 @@ dependencies = [
     "huggingface_hub>=1.0",  # agent-env run hf:// resolves and downloads a Hub bundle; checked on 1.0, 1.33 and 2.4
     "idna>=3.0",  # a browser tab step matches a URL's host as Chromium spells it, by UTS 46
     "jsonschema>=4.20",  # checks an app's settings against its Settings' schema before a deploy
-    "litellm>=1.96.0,<1.97",
+    "litellm>=1.96.0,<1.109",
     "mcp>=1.25,<2",  # same floor as env/gateway/requirements.txt and agentenv-protocol; 2.0.0 removed mcp.server.fastmcp, imported at module scope by env/gateway
     "packaging>=22",  # parses a bundle.toml's requires; evaluates a plugin's requirement markers with no extra
     "a2a-sdk==0.3.26",
@@ -48,7 +48,7 @@ dependencies = [
     "starlette>=0.40",  # the local grant server
     "uvicorn>=0.47",  # 0.47 adds ssl_context_factory, how the local grant server gets its TLS context
     "modal>=1.5.2.dev22",  # dev22 adds _experimental_create(tags=); dev2 added VM-mode V2 (vm_runtime)
-    "e2b~=2.46.4",  # AsyncSandbox/AsyncTemplate APIs validated against the 2.46 line
+    "e2b>=2.46.4,<2.64.0",  # AsyncSandbox/AsyncTemplate APIs validated against the 2.46 line
     "fastapi>=0.110",  # the explorer, agent-env up
     "tzdata>=2024.1",  # sync_env_clock reads a task's timezone on a worker image with no system zone files
 ]
@@ -119,12 +119,12 @@ gcp = [
 ]
 # The sail_vm sandbox provider (Sail Research Sailboxes), selected with --sandbox sail_vm.
 sail = [
-    "sail~=0.12.8",  # Sailbox exec/fs/listener/egress APIs validated against the 0.12 line
+    "sail>=0.12.8,<0.18.0",  # Sailbox exec/fs/listener/egress APIs validated against the 0.12 line
 ]
 vercel = [
     "anyio>=4,<5",
     "httpx2>=2.13.1,<3",
-    "vercel-sandbox>=0.7.0,<0.8",  # provides the vercel.sandbox namespace without the full vercel bundle
+    "vercel-sandbox>=0.7.0,<0.12",  # provides the vercel.sandbox namespace without the full vercel bundle
 ]
 # The Tensorlake sandbox provider, selected as the built-in `tensorlake` backend.
 tensorlake = [
@@ -136,11 +136,11 @@ tenki = [
 ]
 # The boxd machine provider, selected as the built-in `boxd` backend.
 boxd = [
-    "boxd~=0.2.17",  # AsyncBoxd machines, exec, proxies, egress allowlist and delete-after validated against 0.2.17
+    "boxd>=0.2.17,<0.4.0",  # AsyncBoxd machines, exec, proxies, egress allowlist and delete-after validated against 0.2.17
 ]
 # The Daytona sandbox provider, selected as the built-in `daytona` backend.
 daytona = [
-    "daytona~=0.224.0",  # AsyncDaytona sandboxes, sessions, file API, preview links and egress lists validated against 0.224
+    "daytona>=0.224,<0.231",  # AsyncDaytona sandboxes, sessions, file API, preview links and egress lists validated against 0.224
 ]
 # The boat.dev sandbox provider, selected as the built-in `boat` backend.
 boat = [
@@ -156,7 +156,7 @@ dev = [
     "fastmcp>=3.4,<4",  # the standalone-fastmcp mount path of the protocol; <4 keeps mcp 1.x
     "Pillow>=10.4",  # the protocol's computer extra, whose tests the unit tier runs
     "av>=17",  # the protocol's computer extra, whose tests the unit tier runs and which the recording tests decode with
-    "griffelib==2.3.0",  # the plugin API check; exact, since what it reports as a break changes between releases
+    "griffelib==2.4.1",  # the plugin API check; exact, since what it reports as a break changes between releases
     "tomli-w==1.2.0",  # the Codex agent's config writer, which only its image installs; its tests import it
     "hypothesis>=6.100",  # the property tests of the judge score parse
     "moto>=5.0.0",
@@ -168,7 +168,7 @@ dev = [
     "pytest-socket>=0.7.0",
     "pytest-timeout>=2.3.0",
     "pytest-xdist>=3.0.0",
-    "ruff==0.16.10",  # the lint gate; exact, since what it reports changes between releases
+    "ruff==0.17.4",  # the lint gate; exact, since what it reports changes between releases
 ]
 smol = [
     "smolmachines>=1.27.0",