plugin-catalog: bubblewrap 1.3.0 (file tools run inside the sandbox)

plugin-catalog/bubblewrap.yaml

@@ -1,6 +1,6 @@
 name: bubblewrap
 repo: https://github.com/NousResearch/hermes-official-plugins
-sha: da8d32406253f1028f587912764bce5a9a416949
+sha: a50b0fea59d10f9a51b488206f587d9cb6ca6163
 subdir: bubblewrap
 description: 'Bubblewrap terminal backend for Linux: every terminal and execute_code command runs in its own bwrap
   sandbox on this machine at the host''s own paths, with a read-only root, a writable working directory (per
@@ -9,14 +9,14 @@ description: 'Bubblewrap terminal backend for Linux: every terminal and execute_
   memory, CPU and process limits (`hermes config set terminal.backend bubblewrap`). Disclosure — no Python dependencies and no network calls of its
   own: it runs your commands through the `bwrap` and `prlimit` binaries you install (bubblewrap, util-linux), and
   under the default `network` profile those commands share the host network. It reads no credentials. File tools
-  (read_file, write_file, patch, search_files) still run on the host and are not confined, and because the working
-  directory is a real host directory Hermes keeps its dangerous-command prompts, as for the local backend.'
+  (read_file, write_file, patch, search_files) run inside the sandbox too, and because the working directory is a
+  real host directory Hermes keeps its dangerous-command prompts, as for the local backend.'
 maintainer: NousResearch
 tier: official
 category: tools
-requires_hermes: ">=0.22.2"
-version: "1.2.1"
-image: https://raw.githubusercontent.com/NousResearch/hermes-official-plugins/da8d32406253f1028f587912764bce5a9a416949/assets/bubblewrap.jpg
+requires_hermes: ">=0.22.6"
+version: "1.3.0"
+image: https://raw.githubusercontent.com/NousResearch/hermes-official-plugins/a50b0fea59d10f9a51b488206f587d9cb6ca6163/assets/bubblewrap.jpg
 docs_url: https://github.com/NousResearch/hermes-official-plugins/tree/main/bubblewrap
 platforms:
   - linux