chore(deps): bump e2b from 2.38.0 to 2.39.0 in the production-dependencies group

[dependabot]

Bumps the production-dependencies group with 1 update: e2b.

Updates e2b from 2.38.0 to 2.39.0

Changelog

Sourced from e2b's changelog.

2.39.0

Minor Changes

• 07eb9be: Allow a network rule's transform to be a callback, so a workload identity token from the iam option can be injected into egress requests without the SDK ever seeing its value. The callback receives placeholder strings that the egress proxy resolves per request — iam.tokens.aws is ${e2b.identity.tokens.aws} on the wire — and referencing a token that is not registered in iam.tokens fails with InvalidArgumentError / InvalidArgumentException instead of silently sending a placeholder no token will ever replace.

  updateNetwork / update_network accepts the same callbacks, but its payload carries no iam config, so token names cannot be checked there and every name resolves to its placeholder.

  Token names are validated where they are registered and again before they are interpolated: a name cannot be empty or contain {, } or control characters, since the proxy reads a placeholder up to its first } and a brace in the name would resolve a different token than the one referenced.

  import { Sandbox, Secret } from 'e2b'
  const sandbox = await Sandbox.create({
  iam: {
  tokens: {
  aws: Secret.iamToken({
  audience: 'sts.amazonaws.com',
  tokenType: 'JWT-SVID',
  }),
  },
  },
  network: {
  allowOut: ({ rules }) => [...rules.keys()],
  rules: {
  'api.internal.example.com': [
  {
  transform: ({ iam }) => ({
  headers: { Authorization: Bearer ${iam.tokens.aws} },
  }),
  },
  ],
  },
  },
  })

  from e2b import Sandbox, Secret
  sandbox = Sandbox.create(
  iam={
  "tokens": {
  "aws": Secret.iam_token(audience="sts.amazonaws.com", token_type="JWT-SVID"),
  },
  },
  network={
  "allow_out": lambda ctx: list(ctx.rules.keys()),
  "rules": {
  "api.internal.example.com": [

... (truncated)

Commits

• ce634ab [skip ci] Release new versions
• 07eb9be feat(sdk): resolve iam token placeholders in network transform callbacks (#1616)
• 64b25bb feat(sdk): add iam workload identity option and Secret.iamToken helper (#1606)
• 6acbeb3 [skip ci] Release new versions
• cab27aa fix(sdk): clean up sandbox when MCP gateway startup fails (#1548)
• e611141 [skip ci] Release new versions
• d5a382e chore(js-sdk): bump undici to ^7.29.0 and optional undici8 to 8.10.0 (#1645)
• 2d2823c [skip ci] Release new versions
• 88f41f3 fix(python-sdk): port current JS stripAnsi regex to strip_ansi_escape_codes (...
• 86f7b8e fix(js-sdk): export the Git argument and status types (#1642)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like e2b is updatable in another way, so this is no longer needed.