From 412d23349bcff696342ef917947637c71526f208 Mon Sep 17 00:00:00 2001 From: Owl Bot Date: Fri, 17 Jul 2026 20:52:26 +0000 Subject: [PATCH] chore: apply security updates to docker images and python dependencies - Add `apt-get upgrade -y` right after `apt-get update` in all OwlBot Dockerfiles to patch OS-level vulnerabilities (e.g. perl). - Upgrade `pip`, `setuptools`, and `wheel` inside Python pyenv and virtual environments in the Dockerfiles to address vulnerabilities in the Python toolchain. - Regenerate `requirements.txt` using Python 3.10 to update transitive dependencies, notably upgrading `idna` to `3.18` to resolve CVE-2026-45409. Source-Link: https://github.com/googleapis/synthtool/commit/2bb8ca52b5328fb45d84ed633fbd237ebc0caa41 Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-nodejs-mono-repo:latest@sha256:909f781cd00f94ea393b711b954050e67fd0888cfb8c34f3a1ac00e3bfe6a9d9 --- .github/.OwlBot.lock.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml index 25d101ef2f1a..9fb8e9a8e059 100644 --- a/.github/.OwlBot.lock.yaml +++ b/.github/.OwlBot.lock.yaml @@ -13,5 +13,5 @@ # limitations under the License. docker: image: gcr.io/cloud-devrel-public-resources/owlbot-nodejs-mono-repo:latest - digest: sha256:af5fe933b006a4679903d4dc8e1f11e45b46c53acef70e4fd6a4b1949fab8781 -# created: 2026-05-06T17:06:25.633305017Z + digest: sha256:909f781cd00f94ea393b711b954050e67fd0888cfb8c34f3a1ac00e3bfe6a9d9 +# created: 2026-07-17T20:41:55.903802238Z