From 852bf53e5a838338dcdc1dacc7addd9f89a48fff Mon Sep 17 00:00:00 2001 From: Danny McCormick Date: Mon, 26 Oct 2026 13:21:03 +0000 Subject: [PATCH] Update Python container CA dependencies and distroless base images to debian13 --- sdks/go/container/Dockerfile | 2 +- sdks/java/container/distroless/common.gradle | 2 +- sdks/python/container/distroless/Dockerfile | 2 +- sdks/python/container/ml/py310/base_image_requirements.txt | 6 +++--- sdks/python/container/ml/py310/gpu_image_requirements.txt | 6 +++--- sdks/python/container/ml/py311/base_image_requirements.txt | 6 +++--- sdks/python/container/ml/py311/gpu_image_requirements.txt | 6 +++--- sdks/python/container/ml/py312/base_image_requirements.txt | 6 +++--- sdks/python/container/ml/py312/gpu_image_requirements.txt | 6 +++--- sdks/python/container/ml/py313/base_image_requirements.txt | 6 +++--- sdks/python/container/py310/base_image_requirements.txt | 6 +++--- sdks/python/container/py311/base_image_requirements.txt | 6 +++--- sdks/python/container/py312/base_image_requirements.txt | 6 +++--- sdks/python/container/py313/base_image_requirements.txt | 6 +++--- sdks/python/container/py314/base_image_requirements.txt | 6 +++--- 15 files changed, 39 insertions(+), 39 deletions(-) diff --git a/sdks/go/container/Dockerfile b/sdks/go/container/Dockerfile index 3d70e2834b70..085496677277 100644 --- a/sdks/go/container/Dockerfile +++ b/sdks/go/container/Dockerfile @@ -16,7 +16,7 @@ # limitations under the License. ############################################################################### -FROM gcr.io/distroless/base-nossl-debian12:latest AS base_image +FROM gcr.io/distroless/base-nossl-debian13:latest AS base_image # Distroless base image has many layers. Squash into single layer FROM scratch diff --git a/sdks/java/container/distroless/common.gradle b/sdks/java/container/distroless/common.gradle index 7327a7291390..608a6b5e54eb 100644 --- a/sdks/java/container/distroless/common.gradle +++ b/sdks/java/container/distroless/common.gradle @@ -60,7 +60,7 @@ docker { files "./build/" buildArgs([ 'BEAM_BASE': base, - 'DISTROLESS_BASE': "gcr.io/distroless/java${imageJavaVersion}-debian12" + 'DISTROLESS_BASE': "gcr.io/distroless/java${imageJavaVersion}-debian13" ]) buildx project.useBuildx() platform(*project.containerPlatforms()) diff --git a/sdks/python/container/distroless/Dockerfile b/sdks/python/container/distroless/Dockerfile index 2799bd2be81f..287c64fd9d86 100644 --- a/sdks/python/container/distroless/Dockerfile +++ b/sdks/python/container/distroless/Dockerfile @@ -24,7 +24,7 @@ LABEL Author="Apache Beam " RUN if [ -z "${TARGETARCH}" ]; then echo "fatal: TARGETARCH not set; run as docker buildx build or use --build-arg=TARGETARCH=amd64|arm64" >&2; exit 1; fi -FROM gcr.io/distroless/python3-debian12:latest-${TARGETARCH} AS distroless +FROM gcr.io/distroless/python3-debian13:latest-${TARGETARCH} AS distroless # Prevents internal errors found with distroless container images and Flex templates. COPY --from=base /usr/lib/locale /usr/lib/locale diff --git a/sdks/python/container/ml/py310/base_image_requirements.txt b/sdks/python/container/ml/py310/base_image_requirements.txt index d075e695cfb0..6a459c7a9e97 100644 --- a/sdks/python/container/ml/py310/base_image_requirements.txt +++ b/sdks/python/container/ml/py310/base_image_requirements.txt @@ -37,7 +37,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -96,8 +96,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py310/gpu_image_requirements.txt b/sdks/python/container/ml/py310/gpu_image_requirements.txt index 77013a36eb82..373aecffc53e 100644 --- a/sdks/python/container/ml/py310/gpu_image_requirements.txt +++ b/sdks/python/container/ml/py310/gpu_image_requirements.txt @@ -41,7 +41,7 @@ bs4==0.0.2 build==1.5.0 cachetools==6.2.6 cbor2==6.1.4 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -116,8 +116,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py311/base_image_requirements.txt b/sdks/python/container/ml/py311/base_image_requirements.txt index 4f8f6e7dcf03..60c32b64099b 100644 --- a/sdks/python/container/ml/py311/base_image_requirements.txt +++ b/sdks/python/container/ml/py311/base_image_requirements.txt @@ -36,7 +36,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -94,8 +94,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py311/gpu_image_requirements.txt b/sdks/python/container/ml/py311/gpu_image_requirements.txt index 1717a25be2cc..57c130d29ed7 100644 --- a/sdks/python/container/ml/py311/gpu_image_requirements.txt +++ b/sdks/python/container/ml/py311/gpu_image_requirements.txt @@ -40,7 +40,7 @@ bs4==0.0.2 build==1.5.0 cachetools==6.2.6 cbor2==6.1.4 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -114,8 +114,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py312/base_image_requirements.txt b/sdks/python/container/ml/py312/base_image_requirements.txt index 7c245afc020f..d093c15673aa 100644 --- a/sdks/python/container/ml/py312/base_image_requirements.txt +++ b/sdks/python/container/ml/py312/base_image_requirements.txt @@ -35,7 +35,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -93,8 +93,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py312/gpu_image_requirements.txt b/sdks/python/container/ml/py312/gpu_image_requirements.txt index dd5458171e97..1750acc80f93 100644 --- a/sdks/python/container/ml/py312/gpu_image_requirements.txt +++ b/sdks/python/container/ml/py312/gpu_image_requirements.txt @@ -39,7 +39,7 @@ bs4==0.0.2 build==1.5.0 cachetools==6.2.6 cbor2==6.1.4 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -113,8 +113,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/ml/py313/base_image_requirements.txt b/sdks/python/container/ml/py313/base_image_requirements.txt index e6cc9b8b11f4..20362d45831f 100644 --- a/sdks/python/container/ml/py313/base_image_requirements.txt +++ b/sdks/python/container/ml/py313/base_image_requirements.txt @@ -35,7 +35,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -92,8 +92,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/py310/base_image_requirements.txt b/sdks/python/container/py310/base_image_requirements.txt index 62b8ef00dc99..f88e84ce75cf 100644 --- a/sdks/python/container/py310/base_image_requirements.txt +++ b/sdks/python/container/py310/base_image_requirements.txt @@ -35,7 +35,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -89,8 +89,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/py311/base_image_requirements.txt b/sdks/python/container/py311/base_image_requirements.txt index cc2db12cb477..c7be537ce39d 100644 --- a/sdks/python/container/py311/base_image_requirements.txt +++ b/sdks/python/container/py311/base_image_requirements.txt @@ -34,7 +34,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -87,8 +87,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/py312/base_image_requirements.txt b/sdks/python/container/py312/base_image_requirements.txt index 767858f342fd..1a6dbaf56195 100644 --- a/sdks/python/container/py312/base_image_requirements.txt +++ b/sdks/python/container/py312/base_image_requirements.txt @@ -33,7 +33,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -86,8 +86,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/py313/base_image_requirements.txt b/sdks/python/container/py313/base_image_requirements.txt index 34a40461670e..cb946e1aa3fe 100644 --- a/sdks/python/container/py313/base_image_requirements.txt +++ b/sdks/python/container/py313/base_image_requirements.txt @@ -33,7 +33,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -85,8 +85,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1 diff --git a/sdks/python/container/py314/base_image_requirements.txt b/sdks/python/container/py314/base_image_requirements.txt index 95a61155cbbb..98a0656cedcc 100644 --- a/sdks/python/container/py314/base_image_requirements.txt +++ b/sdks/python/container/py314/base_image_requirements.txt @@ -33,7 +33,7 @@ beautifulsoup4==4.15.0 bs4==0.0.2 build==1.5.0 cachetools==6.2.6 -certifi==2026.10.19 +certifi==2026.10.23 cffi==2.1.1 charset-normalizer==3.5.0 click==8.4.2 @@ -85,8 +85,8 @@ googleapis-common-protos==1.75.1 greenlet==3.5.5 grpc-google-iam-v1==0.14.5 grpc-interceptor==0.15.4 -grpcio==1.83.0 -grpcio-status==1.83.0 +grpcio==1.85.0 +grpcio-status==1.85.0 guppy3==3.1.7 h11==0.16.0 h2==4.4.1