Skip to content

vertex AI: bump google-cloud-aiplatform to 1.133.0 - #18637

Open
tavasyag wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
tavasyag:security/vertexai-aiplatform-bucket-squatting-fix
Open

vertex AI: bump google-cloud-aiplatform to 1.133.0 #18637
tavasyag wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
tavasyag:security/vertexai-aiplatform-bucket-squatting-fix

Conversation

@tavasyag

Copy link
Copy Markdown
Contributor

Bug in version 1.75.0 of the Vertex AI SDK which created cloud storage buckets with guessable names, so an attacker could create a bucket with that same name first and hijack it.
Fixed in 1.133.0

Release Note Template for Downstream PRs (will be copied)

See Write release notes for guidance.


@modular-magician

modular-magician commented Aug 13, 2026

Copy link
Copy Markdown
Collaborator

Hi there, I'm the Modular magician. I've detected the following information about your changes for commit 40d996f:

Diff report

Your PR generated the following diffs in downstream repositories:

Repository Diff Link Changes
google provider View Diff 3 files changed, 0 insertions(+), 0 deletions(-)
google-beta provider View Diff 3 files changed, 0 insertions(+), 0 deletions(-)

Test report

Analytics

Total Tests Passed Skipped Affected
113 101 7 5
Affected Service Packages
  • vertexai

Learn how VCR tests work


Step 1: Replaying Mode

Action taken

Found 5 affected test(s) by replaying old test recordings. Starting RECORDING based on the most recent commit.

Click here to see the affected tests
  • TestAccDataSourceVertexAIReasoningEngineQuery_basic
  • TestAccVertexAIFeatureOnlineStoreFeatureview_vertexAiFeatureonlinestoreFeatureview_featureRegistry_updated
  • TestAccVertexAIReasoningEngine_apiParity
  • TestAccVertexAIReasoningEngine_vertexAiReasoningEngineImageSpecExample
  • TestAccVertexAIReasoningEngine_vertexAiReasoningEngineImageSpecUpdate

View the replaying VCR build log


Step 2: Recording Mode

Recording Mode Replaying Rerun Test Name
✅ Log TestAccDataSourceVertexAIReasoningEngineQuery_basic
✅ Log TestAccVertexAIReasoningEngine_apiParity
✅ Log TestAccVertexAIReasoningEngine_vertexAiReasoningEngineImageSpecExample
✅ Log TestAccVertexAIReasoningEngine_vertexAiReasoningEngineImageSpecUpdate
❌ Error · Log - TestAccVertexAIFeatureOnlineStoreFeatureview_vertexAiFeatureonlinestoreFeatureview_featureRegistry_updated

Caution

Issues requiring attention before PR completion

🔴 Initial Recording Failed: Some tests failed during the recording step. See the table above for details.

Please address these issues to complete your PR. If you believe these detections are incorrect or unrelated to your change, please raise the concern with your reviewer.

View the recording VCR build log or the debug logs folder for detailed results.

@tavasyag VCR tests complete for 40d996f!

@tavasyag
tavasyag marked this pull request as ready for review August 13, 2026 19:44
@tavasyag

Copy link
Copy Markdown
Contributor Author

Unrelated VCR failure

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants