code-sandboxes 1.9.5__tar.gz → 1.9.7__tar.gz

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/CHANGELOG.md

@@ -8,6 +8,25 @@
 
 ## Unreleased
 
+## 1.9.7
+
+- **cosign signs again under `--use-signing-config=false`** (`environments
+  .attest`; PLAN_ENV.md E1-09). cosign 3.1.3 defaults `--use-signing-config`
+  to `true`: a TUF-provided signing config now names the service URLs,
+  including a transparency log, and `--tlog-upload=false` alone no longer
+  overrides that — cosign refused the combination outright (found live on
+  r1, 2026-09-14, the first real signature this pipeline ever attempted).
+  Turning the signing config off restores the plain, flag-driven behavior
+  `--tlog-upload=false` already asks for.
+
+## 1.9.6
+
+- **`datalayer/python-cpu`'s `2026.09` channel points at the patched base**
+  (`environments.bases`; PLAN_ENV.md E1-05, E1-08). `jupyter-python` 0.2.2
+  upgrades the Ubuntu security packages and conda's own OpenSSL, and drops
+  JupyterLab's staging `yarn.lock` — the 31 fixable-critical findings that
+  blocked every build from the prior digest under the default scan policy.
+
 ## 1.9.5
 
 - **Attest waits for a just-pushed image's scan to exist**

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: code_sandboxes
-Version: 1.9.5
+Version: 1.9.7
 Project-URL: Home, https://github.com/datalayer/code-sandboxes
 Author-email: Datalayer <info@datalayer.io>
 License: BSD 3-Clause License

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/code_sandboxes/__version__.py

@@ -3,4 +3,4 @@
 
 """Code Sandboxes."""
 
-__version__ = "1.9.5"
+__version__ = "1.9.7"

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/code_sandboxes/environments/attest.py

@@ -380,6 +380,17 @@ class Attestor:
             # even answer. The matching verify-side omission is fixed in
             # `datalayer_operator.services.environment_signatures`.
             "--tlog-upload=false",
+            # cosign 3.1.3 defaults `--use-signing-config` to `true`: a
+            # TUF-provided signing config now names the service URLs,
+            # including a transparency log, and `--tlog-upload=false` alone
+            # no longer overrides that — cosign refuses the combination
+            # outright, "not supported with --signing-config or
+            # --use-signing-config" (found live, 2026-09-14, the first real
+            # sign this worker's own pinned cosign ever ran). Turning the
+            # signing config off restores the plain, flag-driven behavior
+            # `--tlog-upload=false` already asks for, and needs no network
+            # call of its own to fetch one.
+            "--use-signing-config=false",
             "--key",
             self._key,
             reference,

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/code_sandboxes/environments/bases.py

@@ -108,9 +108,15 @@ class ApprovedBase(BaseModel):
 APPROVED_BASES: dict[str, ApprovedBase] = {
     base.ref: base
     for base in (
-        # E1-05: jupyter-python:0.2.1 (the restored fork) plus the contract layer,
-        # released 2026-09-12 to environments/base/python-cpu. One image, so every
-        # variant pins the same digest until a variant needs a base of its own.
+        # E1-05: jupyter-python:0.2.2 (Ubuntu security packages and conda's own
+        # OpenSSL upgraded, JupyterLab's staging yarn.lock dropped) plus the
+        # contract layer, released 2026-09-14 to environments/base/python-cpu.
+        # One image, so every variant pins the same digest until a variant
+        # needs a base of its own. The prior digest, jupyter-python:0.2.1,
+        # carried 31 fixable-critical findings the scan (E1-08) blocks every
+        # build on; this one carries none the default policy does not already
+        # name (`policy.py`'s own `_BASE_CHANNEL_ALLOWED`, five ESM-locked
+        # ffmpeg/libcjson1 advisories, reviewed the same day).
         ApprovedBase(
             ref="datalayer/python-cpu",
             python_versions=("3.13",),
@@ -119,7 +125,7 @@ APPROVED_BASES: dict[str, ApprovedBase] = {
                     # `.spec.VARIANTS`, spelled out: `spec` imports from this
                     # module, so importing it back here would be circular.
                     ("datalayer", "e2b", "daytona", "modal"),
-                    "sha256:cd09308a0c5e5adeec7fb5d8d29cf7455e78ba86f5c6c095a79068a280e1254f",
+                    "sha256:334adf6c2714c8919ef60beeca1db12e3531a391c9dde41932c782f81c432b36",
                 )
             },
             snapshots={"2026.09": "20260914T150000Z"},

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/tests/test_environment_attest.py

@@ -418,6 +418,10 @@ class TestTheSignature:
             # default and prompts for consent to publish an immutable
             # record — the wrong default for a private environment.
             "--tlog-upload=false",
+            # cosign 3.1.3 defaults to a TUF-provided signing config that
+            # `--tlog-upload=false` alone can no longer override (found live
+            # 2026-09-14): turned off so the plain flag is honored again.
+            "--use-signing-config=false",
             "--key",
             KEY,
             f"{REGISTRY}/{REPOSITORY}@{DIGEST}",

{code_sandboxes-1.9.5 → code_sandboxes-1.9.7}/tests/test_environment_bases.py

@@ -52,9 +52,10 @@ def test_the_2026_09_channel_of_python_cuda_has_no_digest_until_it_is_pushed(
 def test_the_2026_09_channel_of_python_cpu_resolves_the_digest_its_release_pushed(
     variant: str,
 ) -> None:
-    """PLAN_ENV.md, E1-05: released 2026-09-12, same digest for every variant."""
+    """PLAN_ENV.md, E1-05: released 2026-09-14 (jupyter-python 0.2.2, E1-08's
+    scan fix), same digest for every variant."""
     ref = "datalayer/python-cpu"
-    digest = "sha256:cd09308a0c5e5adeec7fb5d8d29cf7455e78ba86f5c6c095a79068a280e1254f"
+    digest = "sha256:334adf6c2714c8919ef60beeca1db12e3531a391c9dde41932c782f81c432b36"
     assert APPROVED_BASES[ref].channels == {"2026.09": dict.fromkeys(VARIANTS, digest)}
     assert resolve_base(ref, "2026.09", variant) == digest