[waleedlatif1]

Summary

• e2b 2.50.0 → 2.62.1 (root override) and @e2b/code-interpreter 2.7.1 → 2.9.1. Drops e2b's optional undici8 alias pinned at the vulnerable 8.10.2; e2b now depends on undici 8.12.3
• Under Bun (the app and Trigger.dev workers both run bun-1.4), e2b detects the runtime and uses the global fetch in 2.50 and 2.62 alike, so none of 2.56's undici 8 / HTTP/2 / in-flight-cap changes reach production. Sim passes no custom fetch, dispatcher, or E2B_*_INFLIGHT_* settings
• 2.60 retries control-plane 429/502/503/504 and failed connections on create. Sandbox.create now sends an idempotencyKey (2.61+), so a retry after a gateway error returns the sandbox the first attempt started instead of starting a second one
• Other 2.51–2.62 changes don't hit Sim's call sites: timeouts and CPU/memory are passed explicitly, the one stream write already uses useOctetStream without gzip or multipart, and retainOutput defaults to the old behavior
• drizzle-kit 0.31.10 → 0.31.11. Upstream's only change is a journal-ordering warning in drizzle-kit check (unused here); api.js and the push/generate paths are byte-identical. The version-pinned patch ports unchanged except for one hunk header (+10 lines). patches/README.md now names 0.31.11 and documents the patch's unique-constraint introspection hunk
• pi 1.5 (the other undici 8.10.2 pin) ships separately: it needs new E2B/Daytona images switched in the same release

Type of Change

• Dependency update / security

Testing

• Real E2B end to end under Bun 1.4.4, same script against 2.62.1 and staging's 2.50.0, identical results on both: create with metadata, pause lifecycle and idempotency key; background command with streamed stdout; command timeout; string write/read; 3 MB ReadableStream write with useOctetStream plus streamed read; list by metadata; pause then reconnect with files intact; kill
• e2b provider suites (e2b-session, conformance, e2b-system-packages): 257 tests pass
• packages/db push.test.ts passes; the patched 0.31.11 CLI carries all five SIM_DB_PUSH_RENAME_MODE guards. The push/migrate db integration shards run the patched CLI against Postgres in CI
• bun install --frozen-lockfile clean (lockfile stays v1); lint, type-check, and check:audits run in CI

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
docs	Building	Preview	Nov 10, 2026 12:35am UTC

[cubic-dev-ai]

No issues found across 7 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no actionable defects were established.

Summary

Updates e2b to 2.62.1, @e2b/code-interpreter to 2.9.1, and drizzle-kit to 0.31.11.

• E2B sandbox retries can reuse the sandbox started by the first attempt.
• Database commands move to Drizzle Kit 0.31.11 with Sim’s patch still attached.

_{Reviews (1) · Last reviewed commit: "chore(deps): move e2b to 2.62.1 and driz..." · Reviewed by Greptile}