@cloudflare/sandbox 0.13.0-next.816.1 → 0.13.0-next.818.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Dockerfile +7 -3
- package/package.json +1 -1
package/Dockerfile
CHANGED
|
@@ -4,7 +4,7 @@ ARG BUN_VERSION=1.3.14
|
|
|
4
4
|
ARG NODE_VERSION=24
|
|
5
5
|
# cloudflared release — shared across glibc and musl image variants.
|
|
6
6
|
# Bump this together with the architecture-specific checksums below.
|
|
7
|
-
ARG CLOUDFLARED_VERSION=2026.
|
|
7
|
+
ARG CLOUDFLARED_VERSION=2026.10.2
|
|
8
8
|
# fuse-overlayfs release — backs the copy-on-write layer of restored backups.
|
|
9
9
|
# Pinned upstream because Ubuntu 22.04 ships 1.7.1, which returns EEXIST when
|
|
10
10
|
# a restored directory is deleted, recreated and listed before files are
|
|
@@ -42,8 +42,8 @@ FROM release-downloader AS cloudflared-binary
|
|
|
42
42
|
|
|
43
43
|
ARG TARGETARCH
|
|
44
44
|
ARG CLOUDFLARED_VERSION
|
|
45
|
-
ARG CLOUDFLARED_SHA256_AMD64=
|
|
46
|
-
ARG CLOUDFLARED_SHA256_ARM64=
|
|
45
|
+
ARG CLOUDFLARED_SHA256_AMD64=35fbdd2beb378436c7da377d7358cea8e33f9c94a6705d1d8036bf9b0d6d8005
|
|
46
|
+
ARG CLOUDFLARED_SHA256_ARM64=b7e55b4d9702c2ab5f8348f780bb1db044527fc555367714c78e0595750a4665
|
|
47
47
|
|
|
48
48
|
RUN set -eux; \
|
|
49
49
|
arch="${TARGETARCH:-}"; \
|
|
@@ -286,7 +286,11 @@ RUN update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python
|
|
|
286
286
|
# Install Python packages for data science and the code interpreter extension.
|
|
287
287
|
# The interpreter runtime itself is provisioned by the @cloudflare/sandbox/interpreter
|
|
288
288
|
# extension; this image only provides the Python toolchain it relies on.
|
|
289
|
+
# pip trusts its vendored certifi bundle on top of the system store, so the pip
|
|
290
|
+
# that ships with python-build-standalone is upgraded first. 26.2.2 is the
|
|
291
|
+
# first release whose bundle rejects the compromised eMudhra intermediates.
|
|
289
292
|
RUN --mount=type=cache,target=/root/.cache/pip \
|
|
293
|
+
pip3 install --no-cache-dir --upgrade 'pip>=26.2.2' && \
|
|
290
294
|
pip3 install --no-cache-dir matplotlib numpy pandas ipython
|
|
291
295
|
|
|
292
296
|
# Pre-warm pool sizes consumed by the interpreter extension sidecar
|