Repository navigation
chore: add changeset for Jupyter Unix socket isolation - #347
Conversation
Signed-off-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-Authored-By: mish@e2b.dev <mish@e2b.dev>
|
I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".
|
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
Looks good, straightforward changeset addition. What was reviewed: the single new file .changeset/jupyter-unix-socket.md, confirming it's a well-formed changeset (correct package name, patch bump, and a description consistent with the referenced PR #343) with no code changes to evaluate.
Extended reasoning...
The diff adds only one file, a changeset markdown note for @ e2b/code-interpreter-template describing a prior security fix (moving Jupyter off TCP to a Unix socket) in PR #343; no source code is touched here. There is no security-sensitive surface in this diff itself—it's purely release metadata/documentation. The change is trivial, mechanical, and matches the PR title/description, so this is a safe approve.
Summary
Adds a patch changeset for
@e2b/code-interpreter-templatecovering #343, which moved Jupyter's HTTP API, kernel WebSockets, and interrupts to the private Unix socket/run/e2b-jupyter/server.sock(mode0600) so they are no longer reachable over the sandbox network interface.Link to Devin session: https://app.devin.ai/sessions/e06e659bfe2e49bd91a54409a5e06c32
Open in Devin Desktop: https://app.devin.ai/desktop/session/e06e659bfe2e49bd91a54409a5e06c32?variant=devin
Requested by: @mishushakov