From 1d6b191fd7894ace155709115b9e47b487706035 Mon Sep 17 00:00:00 2001 From: Owl Bot Date: Fri, 17 Jul 2026 20:46:37 +0000 Subject: [PATCH] chore: apply security updates to docker images and python dependencies - Add `apt-get upgrade -y` right after `apt-get update` in all OwlBot Dockerfiles to patch OS-level vulnerabilities (e.g. perl). - Upgrade `pip`, `setuptools`, and `wheel` inside Python pyenv and virtual environments in the Dockerfiles to address vulnerabilities in the Python toolchain. - Regenerate `requirements.txt` using Python 3.10 to update transitive dependencies, notably upgrading `idna` to `3.18` to resolve CVE-2026-45409. Source-Link: https://github.com/googleapis/synthtool/commit/2bb8ca52b5328fb45d84ed633fbd237ebc0caa41 Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-nodejs:latest@sha256:e7afa06497c2aa2a1d2403c140600802d851dc501e345901adde3b5dadd7e51a --- .github/.OwlBot.lock.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml index 7f983f1698..8a365f9da0 100644 --- a/.github/.OwlBot.lock.yaml +++ b/.github/.OwlBot.lock.yaml @@ -13,5 +13,5 @@ # limitations under the License. docker: image: gcr.io/cloud-devrel-public-resources/owlbot-nodejs:latest - digest: sha256:4fe73296173f9cbfced42915365a33981ee6a291dd2dc0edb1a0a2e3abeeeed8 -# created: 2026-05-06T03:27:26.255454877Z + digest: sha256:e7afa06497c2aa2a1d2403c140600802d851dc501e345901adde3b5dadd7e51a +# created: 2026-07-17T20:41:14.157202604Z