modal 1.6.3.dev12__tar.gz → 1.6.4.dev0__tar.gz

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.3.dev12
+Version: 1.6.4.dev0
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/_image.py

@@ -40,6 +40,7 @@ from ._utils.blob_utils import MAX_OBJECT_SIZE_BYTES
 from ._utils.docker_utils import (
     extract_copy_command_patterns,
     find_dockerignore_file,
+    is_multi_stage_dockerfile,
     splittable_from_line_index,
 )
 from ._utils.function_utils import FunctionSourceInfo, parse_gpu_config
@@ -70,8 +71,8 @@ if typing.TYPE_CHECKING:
     import modal.client
 
 # This is used for both type checking and runtime validation
-ImageBuilderVersion = Literal["2023.12", "2024.04", "2024.10", "2025.06", "PREVIEW"]
-LATEST_IMAGE_BUILDER_VERSION: ImageBuilderVersion = "2025.06"
+ImageBuilderVersion = Literal["2023.12", "2024.04", "2024.10", "2025.06", "2026.10", "PREVIEW"]
+LATEST_IMAGE_BUILDER_VERSION: ImageBuilderVersion = "2026.10"
 
 # Note: we also define supported Python versions via logic at the top of the package __init__.py
 # so that we fail fast / clearly in unsupported containers. Additionally, we enumerate the supported
@@ -79,6 +80,7 @@ LATEST_IMAGE_BUILDER_VERSION: ImageBuilderVersion = "2025.06"
 # Consider consolidating these multiple sources of truth?
 SUPPORTED_PYTHON_SERIES: dict[ImageBuilderVersion, list[str]] = {
     "PREVIEW": ["3.11", "3.12", "3.13", "3.14", "3.14t", "3.15", "3.15t"],
+    "2026.10": ["3.11", "3.12", "3.13", "3.14", "3.14t", "3.15", "3.15t"],
     "2025.06": ["3.10", "3.11", "3.12", "3.13", "3.14", "3.14t", "3.15", "3.15t"],
     "2024.10": ["3.10", "3.11", "3.12", "3.13"],
     "2024.04": ["3.10", "3.11", "3.12"],
@@ -2405,7 +2407,11 @@ class _Image(_Object, type_prefix="im"):
         add_python: str | None = None,
         **kwargs,
     ) -> "_Image":
-        """Build a Modal image from a private image in Google Cloud Platform (GCP) Artifact Registry.
+        """mdmd:hidden
+        Build a Modal image from a private image in Google Cloud Platform (GCP) Artifact Registry.
+
+        **Note:** This constructor is superseded by `Image.from_registry()`, which can also authenticate
+        to private repositories when provided with the appropriate keys in a `modal.Secret`.
 
         You will need to pass a `modal.Secret` containing [your GCP service account key data](https://cloud.google.com/iam/docs/keys-create-delete#creating)
         as `SERVICE_ACCOUNT_JSON`. This can be done from the [Secrets](https://modal.com/secrets) page.
@@ -2466,11 +2472,15 @@ class _Image(_Object, type_prefix="im"):
         add_python: str | None = None,
         **kwargs,
     ) -> "_Image":
-        """Build a Modal image from a private image in AWS Elastic Container Registry (ECR).
+        """mdmd:hidden
+        Build a Modal image from a private image in AWS Elastic Container Registry (ECR).
 
         You will need to pass a `modal.Secret` containing either IAM user credentials or OIDC
         configuration to access the target ECR registry.
 
+        **Note:** This constructor is superseded by `Image.from_registry()`, which can also authenticate
+        to private repositories when provided with the appropriate keys in a `modal.Secret`.
+
         For IAM user authentication, set `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, and `AWS_REGION`.
 
         For OIDC authentication, set `AWS_ROLE_ARN` and `AWS_REGION`.
@@ -2523,28 +2533,33 @@ class _Image(_Object, type_prefix="im"):
         *,
         force_build: bool = False,
         context_dir: Path | str | None = None,
-        env: dict[str, str | None] | None = None,
+        ignore: Sequence[str] | Callable[[Path], bool] = AUTO_DOCKERIGNORE,
+        build_args: dict[str, str] = {},
+        registry_secret: _Secret | None = None,
         secrets: Collection[_Secret] | None = None,
+        env: dict[str, str | None] | None = None,
         gpu: str | None = None,
         add_python: str | None = None,
-        build_args: dict[str, str] = {},
-        ignore: Sequence[str] | Callable[[Path], bool] = AUTO_DOCKERIGNORE,
     ) -> "_Image":
         """Build a Modal image from a local Dockerfile.
 
         If your Dockerfile does not have Python installed, you can use the `add_python` parameter
         to specify a version of Python to add to the image.
 
+        A `registry_secret` can be provided to pull the base image from a private registry.
+        Currently this is supported only for single-stage Dockerfiles.
+
         Args:
             path: Path to the Dockerfile on the local machine.
             force_build: If True, skip cached image builds.
             context_dir: Build context directory for resolving relative COPY paths.
+            ignore: Ignore rules for the implicit context mount (defaults to auto ``.dockerignore`` behavior).
+            build_args: Dockerfile ``ARG`` values forwarded to the build.
+            registry_secret: Optional Secret with credentials for pulling the base image from a private registry.
+            secrets: Secrets injected as environment variables in the build container.
             env: Environment variables set in the build container.
-            secrets: Secrets injected as environment variables during the build.
-            gpu: GPU type to attach to the builder container.
+            gpu: GPU type to attach to the build container.
             add_python: Standalone Python version to add when the Dockerfile does not install Python.
-            build_args: Dockerfile ``ARG`` values forwarded to the build.
-            ignore: Ignore rules for the implicit context mount (defaults to auto ``.dockerignore`` behavior).
 
         Returns:
             An `Image` built from the Dockerfile plus Modal runtime dependencies.
@@ -2590,6 +2605,12 @@ class _Image(_Object, type_prefix="im"):
                 add_python="3.12",
                 ignore=FilePatternMatcher.from_file("/path/to/dockerignore"),
             )
+
+            # Pull the Dockerfile's base image from a private registry.
+            image = modal.Image.from_dockerfile(
+                "./Dockerfile",
+                registry_secret=modal.Secret.from_name("my-registry-secret"),
+            )
             ```
         """
 
@@ -2602,7 +2623,15 @@ class _Image(_Object, type_prefix="im"):
             ignore=ignore, dockerfile_path=Path(path), context_dir=context_dir
         )
 
-        def dockerfile_image(commands: list[str], base_images: dict[str, _Image] | None = None) -> _Image:
+        registry_config = (
+            _ImageRegistryConfig(secret=registry_secret, infer_auth_type=True) if registry_secret is not None else None
+        )
+
+        def dockerfile_image(
+            commands: list[str],
+            base_images: dict[str, _Image] | None = None,
+            image_registry_config: _ImageRegistryConfig | None = None,
+        ) -> _Image:
             return _Image._from_args(
                 base_images=base_images,
                 dockerfile_function=lambda version: DockerfileSpec(commands=commands, context_files={}),
@@ -2610,6 +2639,7 @@ class _Image(_Object, type_prefix="im"):
                 gpu_config=gpu_config,
                 secrets=secrets,
                 build_args=build_args,
+                image_registry_config=image_registry_config,
                 force_build=force_build,
             )
 
@@ -2648,19 +2678,23 @@ class _Image(_Object, type_prefix="im"):
                 )
             with open(os.path.expanduser(path)) as f:
                 dockerfile_lines = f.read().split("\n")
+            if registry_secret is not None and is_multi_stage_dockerfile(dockerfile_lines):
+                raise InvalidError("`registry_secret` is not supported with multi-stage Dockerfiles.")
 
             # Builder versions after 2025.06 put the FROM line of a single-stage Dockerfile in its own image.
             # Dockerfiles the split could change (see splittable_from_line_index) stay in one layer.
             from_index = splittable_from_line_index(dockerfile_lines) if builder_version > "2025.06" else None
             if from_index is None:
-                image = dockerfile_image(dockerfile_lines)
+                image = dockerfile_image(dockerfile_lines, image_registry_config=registry_config)
             else:
                 # Drop the lines above FROM so Dockerfiles that differ only in header comments or blank lines
                 # share the cached image. Those lines can only be comments or blank lines, since
                 # splittable_from_line_index rejects parser directives.
                 from_lines = [dockerfile_lines[from_index]]
+                # Only this layer pulls from the registry; the layers above it build on top of it.
                 from_image = _Image._from_args(
                     dockerfile_function=lambda version: DockerfileSpec(commands=from_lines, context_files={}),
+                    image_registry_config=registry_config,
                     force_build=force_build,
                 )
                 rest = dockerfile_lines[from_index + 1 :]

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/_utils/docker_utils.py

@@ -79,6 +79,15 @@ _FROM_ALIAS_PATTERN = re.compile(r"\sAS\s+\S+\s*$", re.IGNORECASE)
 _PARSER_DIRECTIVE_PATTERN = re.compile(r"^#\s*[a-zA-Z][a-zA-Z0-9]*\s*=")
 
 
+def is_multi_stage_dockerfile(dockerfile_lines: Sequence[str]) -> bool:
+    """Return whether more than one line starts with a FROM instruction.
+
+    Can have false-positives for Dockerfiles with a Heredoc bodies of continuation lines
+    that contain "from" tokens.
+    """
+    return sum(1 for line in dockerfile_lines if _FROM_PATTERN.match(line)) > 1
+
+
 def splittable_from_line_index(dockerfile_lines: Sequence[str]) -> int | None:
     """Return the line index of the FROM instruction if it can be built as its own image.
 
@@ -96,7 +105,7 @@ def splittable_from_line_index(dockerfile_lines: Sequence[str]) -> int | None:
         return None
     if any(_PARSER_DIRECTIVE_PATTERN.match(line.strip()) for line in dockerfile_lines[:start]):
         return None
-    if any(_FROM_PATTERN.match(line) for line in dockerfile_lines[start + 1 :]):
+    if is_multi_stage_dockerfile(dockerfile_lines):
         return None
     return start
 

modal-1.6.4.dev0/modal/builder/PREVIEW.txt

@@ -0,0 +1,17 @@
+aiohappyeyeballs==2.7.1
+aiohttp==3.14.5
+aiosignal==1.4.0
+attrs==26.1.0
+cbor2==5.9.0
+certifi==2026.10.19
+frozenlist==1.8.0
+grpclib==0.4.9
+h2==4.4.1
+hpack==4.2.0
+hyperframe==6.1.0
+idna==3.20
+multidict==7.1.0
+propcache==0.5.4
+protobuf==7.36.2
+typing_extensions==4.16.0
+yarl==1.25.1

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/builder/base-images.json

@@ -1,6 +1,7 @@
 {
     "debian": {
         "PREVIEW": "trixie",
+        "2026.10": "trixie",
         "2025.06": "bookworm",
         "2024.10": "bookworm",
         "2024.04": "bookworm",
@@ -38,6 +39,7 @@
     },
     "micromamba": {
         "PREVIEW": "2.9.0-debian13-slim",
+        "2026.10": "2.9.0-debian13-slim",
         "2025.06": "2.1.1-debian12-slim",
         "2024.10": "1.5.10-bookworm-slim",
         "2024.04": "1.5.8-bookworm-slim",
@@ -45,6 +47,7 @@
     },
     "package_tools": {
         "PREVIEW": "pip wheel uv",
+        "2026.10": "pip wheel uv",
         "2025.06": "pip wheel uv",
         "2024.10": "pip wheel uv",
         "2024.04": "pip wheel uv",

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/cli/endpoint.py

@@ -260,26 +260,35 @@ async def list_(*, json: bool = False, env: Optional[str] = None):
 @click.option(
     "--name",
     default=None,
-    help="Endpoint name. Defaults to inference-{number} if not provided.",
+    help="Endpoint name. If omitted, Modal chooses a name.",
 )
 @click.option(
     "--model",
     required=True,
     help="Hugging Face repo ID for the base model architecture (e.g., 'Qwen/Qwen3.6-27B-FP8').",
 )
+@click.option(
+    "--shared",
+    is_flag=True,
+    default=False,
+    help="Create a Shared Endpoint. Defaults to a Dedicated Endpoint.",
+)
 @click.option(
     "--routing-region",
     "routing_region",
     multiple=True,
     callback=_single_routing_region_callback,
-    help=f"Region to route inference requests through. Defaults to {_DEFAULT_ROUTING_REGION}.",
+    help=(
+        f"Region to route inference requests through. Defaults to {_DEFAULT_ROUTING_REGION}. "
+        "Shared Endpoint routing cannot currently be customized."
+    ),
 )
 @click.option(
     "--compute-region",
     "compute_regions",
     multiple=True,
     help=(
-        "Region to run Endpoint containers in. May be specified multiple times. "
+        "Region to run Dedicated Endpoint containers in. May be specified multiple times. "
         "This incurs a region selection price multiplier."
     ),
 )
@@ -287,13 +296,16 @@ async def list_(*, json: bool = False, env: Optional[str] = None):
     "--colocate-compute",
     is_flag=True,
     default=False,
-    help="Run all containers within the routing region. This incurs a region selection price multiplier.",
+    help=(
+        "Run all Dedicated Endpoint containers within the routing region. "
+        "This incurs a region selection price multiplier."
+    ),
 )
 @click.option(
     "--unauthenticated",
     is_flag=True,
     default=False,
-    help="Allow unauthenticated HTTP requests to the endpoint.",
+    help="Allow unauthenticated HTTP requests to a Dedicated Endpoint.",
 )
 @click.option("--custom-hf-repo", default=None, help="Hugging Face repo ID for fine-tuned model weights.")
 @click.option("--custom-hf-revision", default=None, help="Git revision for --custom-hf-repo.")
@@ -304,6 +316,7 @@ async def list_(*, json: bool = False, env: Optional[str] = None):
 async def create(
     name: Optional[str],
     model: Optional[str] = None,
+    shared: bool = False,
     routing_region: str = _DEFAULT_ROUTING_REGION,
     compute_regions: tuple[str, ...] = (),
     colocate_compute: bool = False,
@@ -317,13 +330,21 @@ async def create(
 ):
     """Deploy a new Endpoint.
 
+    Creates a Dedicated Endpoint by default, with support for custom weights and compute placement.
+    Use --shared to serve a supported base model with Modal-managed capacity.
+
     Examples:
 
-    Create an Endpoint from a base model:
+    Create a Dedicated Endpoint from a base model:
     ```bash
     modal endpoint create --model Qwen/Qwen3.6-27B-FP8
     ```
 
+    Create a Shared Endpoint from a supported base model:
+    ```bash
+    modal endpoint create --shared --model moonshotai/Kimi-K3
+    ```
+
     Create an Endpoint with an explicit name:
     ```bash
     modal endpoint create --name qwen-chat --model Qwen/Qwen3.6-27B-FP8
@@ -348,6 +369,22 @@ async def create(
     ```
 
     """
+    if shared:
+        for option, provided in (
+            ("--compute-region", bool(compute_regions)),
+            ("--colocate-compute", colocate_compute),
+            ("--unauthenticated", unauthenticated),
+            ("--custom-hf-repo", custom_hf_repo is not None),
+            ("--custom-hf-revision", custom_hf_revision is not None),
+            ("--custom-hf-token", custom_hf_token is not None),
+            ("--custom-volume-name", custom_volume_name is not None),
+            ("--custom-volume-path", custom_volume_path is not None),
+        ):
+            if provided:
+                raise click.UsageError(f"{option} cannot be used with --shared.")
+        if routing_region != _DEFAULT_ROUTING_REGION:
+            raise click.UsageError(f"Shared Endpoints require --routing-region {_DEFAULT_ROUTING_REGION}.")
+
     if compute_regions and colocate_compute:
         raise click.UsageError("--compute-region and --colocate-compute are mutually exclusive.")
     if custom_hf_repo and custom_volume_name:
@@ -403,13 +440,18 @@ async def create(
         model=model_source,
         environment_name=environment_name,
         unauthenticated=unauthenticated,
+        serving_mode=(api_pb2.ENDPOINT_SERVING_MODE_SHARED if shared else api_pb2.ENDPOINT_SERVING_MODE_DEDICATED),
     )
     if name:
         req.name = name
     resp = await client._stub.EndpointCreate(req)
 
     output = OutputManager.get()
-    output.print(f"[green]✓[/green] Endpoint '{resp.name}' ({resp.endpoint_id}) was created and started provisioning.")
+    serving_mode = "Shared" if shared else "Dedicated"
+    output.print(
+        f"[green]✓[/green] {serving_mode} Endpoint '{resp.name}' ({resp.endpoint_id}) "
+        "was created and started provisioning."
+    )
     if resp.model_name:
         output.print(f'  → Send [cyan]"model": "{resp.model_name}"[/cyan] in requests to the Endpoint.')
     if resp.endpoint_page_url:

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/cli/profile.py

@@ -33,7 +33,7 @@ async def list_(json: bool | None = False):
     profiles = config_profiles()
     lookup_coros = [
         _lookup_workspace(
-            config.get("server_url", profile=profile),
+            config.get("server_url", profile=profile, use_env=False),
             token_id=config.get("token_id", profile=profile, use_env=False),
             token_secret=config.get("token_secret", profile=profile, use_env=False),
             oauth_refresh_token=config.get("oauth_refresh_token", profile=profile, use_env=False),

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/cli/workspace.py

@@ -471,7 +471,7 @@ def service_users_list(json: bool):
 
 @service_users_cli.command("delete", no_args_is_help=True)
 @click.argument("name")
-@click.option("--allow-missing", is_flag=True, default=False, help="Don't error if the Volume doesn't exist.")
+@click.option("--allow-missing", is_flag=True, default=False, help="Don't error if the Service User doesn't exist.")
 @yes_option
 def service_users_delete(name: str, *, allow_missing: bool, yes: bool):
     """Delete a Service User in this Workspace.

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/client.pyi

@@ -87,7 +87,7 @@ class _Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.3.dev12",
+        version: str = "1.6.4.dev0",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):
@@ -304,7 +304,7 @@ class Client:
         server_url: str,
         client_type: int,
         credentials: typing.Optional[tuple[str, str]],
-        version: str = "1.6.3.dev12",
+        version: str = "1.6.4.dev0",
         *,
         oauth_credentials: typing.Optional[_OAuthCredentials] = None,
     ):

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/image.pyi

@@ -65,7 +65,8 @@ class Image(modal.object.Object):
         base_images: typing.Optional[dict[str, Image]] = None,
         dockerfile_function: typing.Optional[
             collections.abc.Callable[
-                [typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "PREVIEW"]], modal._image.DockerfileSpec
+                [typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "2026.10", "PREVIEW"]],
+                modal._image.DockerfileSpec,
             ]
         ] = None,
         secrets: typing.Optional[collections.abc.Collection[modal.secret.Secret]] = None,
@@ -75,7 +76,7 @@ class Image(modal.object.Object):
         image_registry_config: typing.Optional[modal._image._ImageRegistryConfig] = None,
         context_mount_function: typing.Optional[
             collections.abc.Callable[
-                [typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "PREVIEW"]],
+                [typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "2026.10", "PREVIEW"]],
                 typing.Optional[modal.mount.Mount],
             ]
         ] = None,
@@ -873,7 +874,7 @@ class Image(modal.object.Object):
     @staticmethod
     def _registry_setup_commands(
         tag: str,
-        builder_version: typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "PREVIEW"],
+        builder_version: typing.Literal["2023.12", "2024.04", "2024.10", "2025.06", "2026.10", "PREVIEW"],
         setup_commands: list[str],
         add_python: typing.Optional[str] = None,
     ) -> list[str]: ...
@@ -945,7 +946,11 @@ class Image(modal.object.Object):
         add_python: typing.Optional[str] = None,
         **kwargs,
     ) -> Image:
-        """Build a Modal image from a private image in Google Cloud Platform (GCP) Artifact Registry.
+        """mdmd:hidden
+        Build a Modal image from a private image in Google Cloud Platform (GCP) Artifact Registry.
+
+        **Note:** This constructor is superseded by `Image.from_registry()`, which can also authenticate
+        to private repositories when provided with the appropriate keys in a `modal.Secret`.
 
         You will need to pass a `modal.Secret` containing [your GCP service account key data](https://cloud.google.com/iam/docs/keys-create-delete#creating)
         as `SERVICE_ACCOUNT_JSON`. This can be done from the [Secrets](https://modal.com/secrets) page.
@@ -996,11 +1001,15 @@ class Image(modal.object.Object):
         add_python: typing.Optional[str] = None,
         **kwargs,
     ) -> Image:
-        """Build a Modal image from a private image in AWS Elastic Container Registry (ECR).
+        """mdmd:hidden
+        Build a Modal image from a private image in AWS Elastic Container Registry (ECR).
 
         You will need to pass a `modal.Secret` containing either IAM user credentials or OIDC
         configuration to access the target ECR registry.
 
+        **Note:** This constructor is superseded by `Image.from_registry()`, which can also authenticate
+        to private repositories when provided with the appropriate keys in a `modal.Secret`.
+
         For IAM user authentication, set `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, and `AWS_REGION`.
 
         For OIDC authentication, set `AWS_ROLE_ARN` and `AWS_REGION`.
@@ -1043,30 +1052,35 @@ class Image(modal.object.Object):
         *,
         force_build: bool = False,
         context_dir: typing.Union[pathlib.Path, str, None] = None,
-        env: typing.Optional[dict[str, typing.Optional[str]]] = None,
-        secrets: typing.Optional[collections.abc.Collection[modal.secret.Secret]] = None,
-        gpu: typing.Optional[str] = None,
-        add_python: typing.Optional[str] = None,
-        build_args: dict[str, str] = {},
         ignore: typing.Union[
             collections.abc.Sequence[str], collections.abc.Callable[[pathlib.Path], bool]
         ] = modal._image.AUTO_DOCKERIGNORE,
+        build_args: dict[str, str] = {},
+        registry_secret: typing.Optional[modal.secret.Secret] = None,
+        secrets: typing.Optional[collections.abc.Collection[modal.secret.Secret]] = None,
+        env: typing.Optional[dict[str, typing.Optional[str]]] = None,
+        gpu: typing.Optional[str] = None,
+        add_python: typing.Optional[str] = None,
     ) -> Image:
         """Build a Modal image from a local Dockerfile.
 
         If your Dockerfile does not have Python installed, you can use the `add_python` parameter
         to specify a version of Python to add to the image.
 
+        A `registry_secret` can be provided to pull the base image from a private registry.
+        Currently this is supported only for single-stage Dockerfiles.
+
         Args:
             path: Path to the Dockerfile on the local machine.
             force_build: If True, skip cached image builds.
             context_dir: Build context directory for resolving relative COPY paths.
+            ignore: Ignore rules for the implicit context mount (defaults to auto ``.dockerignore`` behavior).
+            build_args: Dockerfile ``ARG`` values forwarded to the build.
+            registry_secret: Optional Secret with credentials for pulling the base image from a private registry.
+            secrets: Secrets injected as environment variables in the build container.
             env: Environment variables set in the build container.
-            secrets: Secrets injected as environment variables during the build.
-            gpu: GPU type to attach to the builder container.
+            gpu: GPU type to attach to the build container.
             add_python: Standalone Python version to add when the Dockerfile does not install Python.
-            build_args: Dockerfile ``ARG`` values forwarded to the build.
-            ignore: Ignore rules for the implicit context mount (defaults to auto ``.dockerignore`` behavior).
 
         Returns:
             An `Image` built from the Dockerfile plus Modal runtime dependencies.
@@ -1112,6 +1126,12 @@ class Image(modal.object.Object):
                 add_python="3.12",
                 ignore=FilePatternMatcher.from_file("/path/to/dockerignore"),
             )
+
+            # Pull the Dockerfile's base image from a private registry.
+            image = modal.Image.from_dockerfile(
+                "./Dockerfile",
+                registry_secret=modal.Secret.from_name("my-registry-secret"),
+            )
             ```
         """
         ...

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/io_streams.py

@@ -369,36 +369,48 @@ class _StreamReaderThroughCommandRouterBase(_StreamReaderImpl[T]):
         """Open the underlying stream at the current offset."""
         raise NotImplementedError
 
+    def _current_stream(self) -> AsyncGenerator[T, None]:
+        if self._stream is None:
+            self._stream = self._iterate_stream()
+        return self._stream
+
     async def __anext__(self) -> T:
         async with self._lock:
-            if self._stream is None:
-                self._stream = self._iterate_stream()
-            return await self._stream.__anext__()
+            return await self._current_stream().__anext__()
 
     async def _consume_stream(self) -> AsyncGenerator[T, None]:
+        # An iterator abandoned mid-loop is finalized at an arbitrary later
+        # time, so it must only close the stream it pulled from, never one a
+        # later iterator has since reopened.
+        stream: AsyncGenerator[T, None] | None = None
         try:
             while True:
-                try:
-                    item = await self.__anext__()
-                except StopAsyncIteration:
-                    return
+                async with self._lock:
+                    stream = self._current_stream()
+                    try:
+                        item = await stream.__anext__()
+                    except StopAsyncIteration:
+                        return
                 yield item
         finally:
-            await self.aclose()
+            await self._close_stream(stream)
 
     def __aiter__(self) -> AsyncGenerator[T, None]:
         return self._consume_stream()
 
-    async def aclose(self) -> None:
-        """Close the underlying stream. A stream another reader is currently
-        pulling from is left open for that reader to close."""
-        if self._lock.locked():
+    async def _close_stream(self, stream: AsyncGenerator[T, None] | None) -> None:
+        if stream is None or self._lock.locked():
             return
         async with self._lock:
-            stream, self._stream = self._stream, None
-            if stream is not None:
+            if self._stream is stream:
+                self._stream = None
                 await stream.aclose()
 
+    async def aclose(self) -> None:
+        """Close the underlying stream. A stream another reader is currently
+        pulling from is left open for that reader to close."""
+        await self._close_stream(self._stream)
+
 
 class _BytesStreamReaderThroughCommandRouter(_StreamReaderThroughCommandRouterBase[bytes]):
     """StreamReader that yields raw bytes from the router-backed stdio source

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/io_streams.pyi

@@ -243,9 +243,11 @@ class _StreamReaderThroughCommandRouterBase(_StreamReaderImpl[T]):
         """Open the underlying stream at the current offset."""
         ...
 
+    def _current_stream(self) -> collections.abc.AsyncGenerator[T, None]: ...
     async def __anext__(self) -> T: ...
     def _consume_stream(self) -> collections.abc.AsyncGenerator[T, None]: ...
     def __aiter__(self) -> collections.abc.AsyncGenerator[T, None]: ...
+    async def _close_stream(self, stream: typing.Optional[collections.abc.AsyncGenerator[T, None]]) -> None: ...
     async def aclose(self) -> None:
         """Close the underlying stream. A stream another reader is currently
         pulling from is left open for that reader to close.

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal/mount.py

@@ -63,6 +63,15 @@ PYTHON_STANDALONE_VERSIONS: dict[str, dict[str, tuple[str, str]]] = {
         "3.15": ("20261021", "3.15.1"),
         "3.15t": ("20261021", "3.15.1t"),
     },
+    "2026.10": {
+        "3.11": ("20261021", "3.11.17"),
+        "3.12": ("20261021", "3.12.15"),
+        "3.13": ("20261021", "3.13.17"),
+        "3.14": ("20261021", "3.14.9"),
+        "3.14t": ("20261021", "3.14.9t"),
+        "3.15": ("20261021", "3.15.1"),
+        "3.15t": ("20261021", "3.15.1t"),
+    },
     "2025.06": _PYTHON_STANDALONE_VERSIONS_2025_06,
     "2024.10": _PYTHON_STANDALONE_VERSIONS_2025_06,
     "2024.04": _PYTHON_STANDALONE_VERSIONS_2025_06,

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modal
-Version: 1.6.3.dev12
+Version: 1.6.4.dev0
 Summary: Python client library for Modal
 Author-email: Modal Labs <support@modal.com>
 License-Expression: Apache-2.0

{modal-1.6.3.dev12 → modal-1.6.4.dev0}/modal.egg-info/SOURCES.txt

@@ -163,6 +163,7 @@ modal/builder/2023.12.txt
 modal/builder/2024.04.txt
 modal/builder/2024.10.txt
 modal/builder/2025.06.txt
+modal/builder/2026.10.txt
 modal/builder/PREVIEW.txt
 modal/builder/README.md
 modal/builder/base-images.json