Skip to content

fix: bump colab base to 20260716 to remediate image-scanning CVEs #1557

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
KeijiBranshi wants to merge 1 commit into
base: main
Choose a base branch
from
+14 −6
Open

fix: bump colab base to 20260716 to remediate image-scanning CVEs #1557

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 7 additions & 5 deletions Dockerfile.tmpl
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{{ if eq .Accelerator "gpu" }}
FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260514-060047_RC00
FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260716-060051_RC00
{{ else }}
FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260514-060047_RC00
FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260716-060051_RC00
{{ end}}

ADD kaggle_requirements.txt /kaggle_requirements.txt
Expand Down Expand Up @@ -82,9 +82,11 @@ RUN mkdir -p /usr/share/nltk_data && \
twitter_samples udhr2 udhr unicode_samples universal_tagset universal_treebanks_v20 \
vader_lexicon verbnet webtext word2vec_sample wordnet wordnet_ic words ycoe

RUN apt-get install -y git-lfs && \
# vtk dependencies
apt-get install -y libgl1-mesa-glx && \
# Don't `apt-get install git-lfs` here. The base image already ships
# git-lfs 3.7.1 built with Go 1.26, and Ubuntu's git-lfs 3.0.2 package
# overwrites it with an older build from Go 1.18.
# vtk dependencies
RUN apt-get install -y libgl1-mesa-glx && \
# xvfbwrapper dependencies
apt-get install -y xvfb && \
/tmp/clean-layer.sh
Expand Down
8 changes: 7 additions & 1 deletion kaggle_requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,9 @@ papermill
path
path.py
pdf2image
# The base image ships pillow 11.3; pin up to a newer release.
# Remove once the base image ships >=12.2 itself.
pillow>=12.2
plotly-express
pudb
pyLDAvis
Expand Down Expand Up @@ -127,11 +130,14 @@ git+https://github.com/facebookresearch/segment-anything.git
squarify
tensorflow-io
# Must be compatible with torch version: https://github.com/meta-pytorch/torchcodec?tab=readme-ov-file#installing-torchcodec
torchcodec==0.10.0
torchcodec==0.11.0
torchinfo
torchmetrics
torchtune
transformers>=5.0.0
# The base image ships urllib3 2.5; pin up to a newer release.
# Remove once the base image ships >=2.7 itself.
urllib3>=2.7
vtk
wavio
xvfbwrapper
Expand Down