Update dependency e2b

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
e2b (source)	2.36.0 → 2.37.1
e2b (source)	2.37.0 → 2.38.2

---

Release Notes

e2b-dev/e2b (e2b)

v2.37.1

Patch Changes

• 88f41f3: Align ANSI stripping of template build log messages across both SDKs. The Python SDK's strip_ansi_escape_codes now ports the JS SDK's stripAnsi regex: OSC sequences (hyperlinks, window titles) are matched non-greedily up to the first string terminator — including sequences spanning newlines — and CSI sequences are stripped without requiring a terminator. Both implementations additionally strip the remaining ECMA-48 string controls (DCS/Sixel, SOS, PM, APC) through their string terminator so control payloads no longer leak into cleaned logs.
• 998e560: Relax the Python SDK's wcmatch requirement from >=10.1,<11 to >=10.1,<12 so e2b can be installed alongside packages that already require wcmatch>=11 (for example deepagents>=0.7.0), which previously failed to resolve. The SDK only calls glob.glob() with GLOBSTAR | DOTMATCH for template context matching; wcmatch 11.0's single breaking change affects translate() callers using extended-glob capture groups, so it is a no-op here. The template glob test suite passes against 10.1, 10.2.1 and 11.0.

v2.37.0

Compare Source

Minor Changes

• 2821fb0: Route volume content requests to a team's custom (BYOC) cluster. When a team is connected to a custom cluster, the volume create and get endpoints now return that cluster's domain, and the SDK uses it as the destination for volume content requests instead of the default api.<E2B_DOMAIN> host. Teams on the default cluster are unaffected and keep their configured domain.

e2b-dev/e2b (e2b)

v2.38.2

Compare Source

Patch Changes

• d5a382e: Bump both undici dependencies past the 2026-07-24 security advisories: the required undici from ^7.28.0 to ^7.29.0, and the optional undici8 (npm:undici@…) from 8.8.0 to 8.10.0. Both releases fix one High (GHSA-4cwx-7wf7-3272) and four Medium advisories, and undici 8.10.0 additionally fixes HTTP/2 request settling, refused-stream retries and GOAWAY handling, which the SDK exercises because every dispatcher it builds sets allowH2: true. Neither bump moves a Node floor — 7.29.0 still requires Node >=20.18.1 and 8.10.0 still requires >=22.19.0, matching the UNDICI_8_MIN_NODE gate — so package selection and behaviour are unchanged.

v2.38.1

Compare Source

Patch Changes

• 88f41f3: Align ANSI stripping of template build log messages across both SDKs. The Python SDK's strip_ansi_escape_codes now ports the JS SDK's stripAnsi regex: OSC sequences (hyperlinks, window titles) are matched non-greedily up to the first string terminator — including sequences spanning newlines — and CSI sequences are stripped without requiring a terminator. Both implementations additionally strip the remaining ECMA-48 string controls (DCS/Sixel, SOS, PM, APC) through their string terminator so control payloads no longer leak into cleaned logs.
• 86f7b8e: Export GitResetMode, GitResetOpts, GitRestoreOpts and GitStatusLabel from the JS SDK entry point, so the argument and status types of the public git.reset(), git.restore() and git.status() methods can be named by callers

v2.38.0

Compare Source

Minor Changes

• 2821fb0: Route volume content requests to a team's custom (BYOC) cluster. When a team is connected to a custom cluster, the volume create and get endpoints now return that cluster's domain, and the SDK uses it as the destination for volume content requests instead of the default api.<E2B_DOMAIN> host. Teams on the default cluster are unaffected and keep their configured domain.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Scope: all 3 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
.                                        |  WARN  deprecated eslint@8.57.1
Progress: resolved 12, reused 0, downloaded 0, added 0
Progress: resolved 15, reused 0, downloaded 0, added 0
Progress: resolved 83, reused 0, downloaded 0, added 0
Progress: resolved 155, reused 0, downloaded 0, added 0
Progress: resolved 209, reused 0, downloaded 0, added 0
Progress: resolved 272, reused 0, downloaded 0, added 0
Progress: resolved 306, reused 0, downloaded 0, added 0
Progress: resolved 319, reused 0, downloaded 0, added 0
Progress: resolved 325, reused 0, downloaded 0, added 0
Progress: resolved 326, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/e2b-dev/desktop/packages/js-sdk:
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 8.5.26 (released 32 hours ago) of postcss does not meet the minimumReleaseAge constraint

This error happened while installing a direct dependency of /tmp/renovate/repos/github/e2b-dev/desktop/packages/js-sdk

The latest release of postcss is "8.5.26". Published at 8/6/2026

If you need the full list of all 290 published versions run "pnpm view postcss versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude