code-sandboxes 1.9.5__tar.gz → 1.9.6__tar.gz

{code_sandboxes-1.9.5 → code_sandboxes-1.9.6}/CHANGELOG.md

@@ -8,6 +8,14 @@
 
 ## Unreleased
 
+## 1.9.6
+
+- **`datalayer/python-cpu`'s `2026.09` channel points at the patched base**
+  (`environments.bases`; PLAN_ENV.md E1-05, E1-08). `jupyter-python` 0.2.2
+  upgrades the Ubuntu security packages and conda's own OpenSSL, and drops
+  JupyterLab's staging `yarn.lock` — the 31 fixable-critical findings that
+  blocked every build from the prior digest under the default scan policy.
+
 ## 1.9.5
 
 - **Attest waits for a just-pushed image's scan to exist**

{code_sandboxes-1.9.5 → code_sandboxes-1.9.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code_sandboxes
-Version: 1.9.5
+Version: 1.9.6
 Project-URL: Home, https://github.com/datalayer/code-sandboxes
 Author-email: Datalayer <info@datalayer.io>
 License: BSD 3-Clause License

{code_sandboxes-1.9.5 → code_sandboxes-1.9.6}/code_sandboxes/__version__.py

@@ -3,4 +3,4 @@
 
 """Code Sandboxes."""
 
-__version__ = "1.9.5"
+__version__ = "1.9.6"

{code_sandboxes-1.9.5 → code_sandboxes-1.9.6}/code_sandboxes/environments/bases.py

@@ -108,9 +108,15 @@ class ApprovedBase(BaseModel):
 APPROVED_BASES: dict[str, ApprovedBase] = {
     base.ref: base
     for base in (
-        # E1-05: jupyter-python:0.2.1 (the restored fork) plus the contract layer,
-        # released 2026-09-12 to environments/base/python-cpu. One image, so every
-        # variant pins the same digest until a variant needs a base of its own.
+        # E1-05: jupyter-python:0.2.2 (Ubuntu security packages and conda's own
+        # OpenSSL upgraded, JupyterLab's staging yarn.lock dropped) plus the
+        # contract layer, released 2026-09-14 to environments/base/python-cpu.
+        # One image, so every variant pins the same digest until a variant
+        # needs a base of its own. The prior digest, jupyter-python:0.2.1,
+        # carried 31 fixable-critical findings the scan (E1-08) blocks every
+        # build on; this one carries none the default policy does not already
+        # name (`policy.py`'s own `_BASE_CHANNEL_ALLOWED`, five ESM-locked
+        # ffmpeg/libcjson1 advisories, reviewed the same day).
         ApprovedBase(
             ref="datalayer/python-cpu",
             python_versions=("3.13",),
@@ -119,7 +125,7 @@ APPROVED_BASES: dict[str, ApprovedBase] = {
                     # `.spec.VARIANTS`, spelled out: `spec` imports from this
                     # module, so importing it back here would be circular.
                     ("datalayer", "e2b", "daytona", "modal"),
-                    "sha256:cd09308a0c5e5adeec7fb5d8d29cf7455e78ba86f5c6c095a79068a280e1254f",
+                    "sha256:334adf6c2714c8919ef60beeca1db12e3531a391c9dde41932c782f81c432b36",
                 )
             },
             snapshots={"2026.09": "20260914T150000Z"},

{code_sandboxes-1.9.5 → code_sandboxes-1.9.6}/tests/test_environment_bases.py

@@ -52,9 +52,10 @@ def test_the_2026_09_channel_of_python_cuda_has_no_digest_until_it_is_pushed(
 def test_the_2026_09_channel_of_python_cpu_resolves_the_digest_its_release_pushed(
     variant: str,
 ) -> None:
-    """PLAN_ENV.md, E1-05: released 2026-09-12, same digest for every variant."""
+    """PLAN_ENV.md, E1-05: released 2026-09-14 (jupyter-python 0.2.2, E1-08's
+    scan fix), same digest for every variant."""
     ref = "datalayer/python-cpu"
-    digest = "sha256:cd09308a0c5e5adeec7fb5d8d29cf7455e78ba86f5c6c095a79068a280e1254f"
+    digest = "sha256:334adf6c2714c8919ef60beeca1db12e3531a391c9dde41932c782f81c432b36"
     assert APPROVED_BASES[ref].channels == {"2026.09": dict.fromkeys(VARIANTS, digest)}
     assert resolve_base(ref, "2026.09", variant) == digest