Update dependency e2b

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
e2b (source)	2.23.1 → 2.25.1
e2b (source)	2.24.0 → 2.27.1

---

Release Notes

e2b-dev/e2b (e2b)

v2.25.0

Compare Source

Minor Changes

• 3786f34: Support structured network rules with per-host transforms
• c485bf5: Add Sandbox.updateNetwork / update_network to replace a running sandbox's egress configuration (allow / deny lists, per-host rules, internet access toggle).
• 3ea4ef5: use stable sandbox.e2b.app for h2 efficiency

Patch Changes

• ba315c0: Add signal: AbortSignal option to Template.build, Template.buildInBackground, Template.getBuildStatus, Template.exists, Template.aliasExists, Template.assignTags, Template.removeTags, and Template.getTags. When the signal is aborted, the underlying request (and, for Template.build, the status polling loop) is cancelled and the returned promise rejects with an AbortError.

v2.24.0

Minor Changes

• 2680c89: Remove Sandbox.betaCreate (JS) and Sandbox.beta_create (Python). These methods were a beta of the lifecycle configuration that has since shipped on Sandbox.create. Migrate by calling Sandbox.create with the lifecycle option:

  // before
  await Sandbox.betaCreate({ autoPause: true })
  // after
  await Sandbox.create({ lifecycle: { onTimeout: 'pause' } })

  # before
  Sandbox.beta_create(auto_pause=True)
  # after
  Sandbox.create(lifecycle={"on_timeout": "pause"})

e2b-dev/e2b (e2b)

v2.27.1

Compare Source

Patch Changes

• ad37796: fix: await async callbacks in CommandHandle.wait()
• b7fa99e: Silence the undici HTTP/2 fallback warning.

v2.27.0

Compare Source

Minor Changes

• 2691c73: Sync OpenAPI spec from e2b-dev/infra. Notable changes: SandboxMetrics gains memCache / mem_cache (cached memory in bytes), NodeStatus gains standby, TeamUser.email is now nullable and deprecated, and POST /v3/templates can now return 403.

Patch Changes

• a6bf71a: fix(sdks): Template.fromDockerfile / Template.from_dockerfile now correctly handle multi-source COPY/ADD instructions. Previously, only the first source was kept and all intermediate sources were silently dropped; now each source is emitted as its own copy() call to the same destination.
• 4a4bb36: Validate the E2B API key format client-side. SDKs now throw an AuthenticationError / AuthenticationException with an example token (e.g. e2b_0000000000000000000000000000000000000000) when the key does not start with e2b_ followed by hex characters.

v2.26.0

Compare Source

Minor Changes

• 18a10af: chore(js): add max concurrency limits

v2.25.0

Compare Source

Minor Changes

• 3786f34: Support structured network rules with per-host transforms
• c485bf5: Add Sandbox.updateNetwork / update_network to replace a running sandbox's egress configuration (allow / deny lists, per-host rules, internet access toggle).
• 3ea4ef5: use stable sandbox.e2b.app for h2 efficiency

Patch Changes

• ba315c0: Add signal: AbortSignal option to Template.build, Template.buildInBackground, Template.getBuildStatus, Template.exists, Template.aliasExists, Template.assignTags, Template.removeTags, and Template.getTags. When the signal is aborted, the underlying request (and, for Template.build, the status polling loop) is cancelled and the returned promise rejects with an AbortError.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

LGTM — Renovate lockfile-only bump of the e2b SDK; no use of the removed beta_create/betaCreate APIs.

Extended reasoning...

Overview

This PR is a Renovate-generated lockfile-only update bumping the e2b SDK:

• Python: e2b 2.23.1 → 2.25.1 in python/poetry.lock
• JS: e2b 2.24.0 → 2.27.0 in pnpm-lock.yaml (plus transitive bumps: @bufbuild/protobuf, brace-expansion, lru-cache, minimatch, tar, undici)

No source code, manifest constraints (pyproject.toml/package.json), or CI config files are touched.

Security risks

None specific to this PR. The transitive dependencies that moved (undici 7.25 → 7.27, tar 7.5.12 → 7.5.16, minimatch 10.2.4 → 10.2.5, etc.) are all patch-level bumps, and the e2b SDK itself only added features (network rule updates, AbortSignal support, client-side API key validation) plus a Dockerfile parsing fix.

Level of scrutiny

Low. This is a routine dependency bump generated by Renovate with no code changes. The only potentially breaking change in the release range is the removal of Sandbox.beta_create / Sandbox.betaCreate in 2.24.0 — I grepped the repo and confirmed neither identifier is used anywhere, so this PR does not require any code migration.

Other factors

• Renovate has marked this with a confidence badge.
• The bug hunting system found no issues.
• Timeline is empty (no prior reviews or unresolved comments).
• No CODEOWNER-sensitive paths touched.