From a43f9edcd7219cf73798aea53744d8f603b8033e Mon Sep 17 00:00:00 2001 From: Yuta Saito Date: Fri, 16 Jan 2026 12:26:22 +0900 Subject: [PATCH] chore: force jaraco.context 6.1.0 in runtime images --- Dockerfile | 3 +++ docker/Dockerfile.database | 3 +++ 2 files changed, 6 insertions(+) diff --git a/Dockerfile b/Dockerfile index 0e7a8412bbc..a75585cfd58 100644 --- a/Dockerfile +++ b/Dockerfile @@ -61,6 +61,9 @@ COPY --from=builder /wheels/ /wheels/ # Install the built wheel using pip; again using a wildcard if it's the only file RUN pip install *.whl /wheels/* --no-index --find-links=/wheels/ && rm -f *.whl && rm -rf /wheels +# Force patched jaraco.context version (GHSA-58pv-8j8x-9vj2) +RUN pip install --no-cache-dir 'jaraco.context==6.1.0' + # Remove test files and keys from dependencies RUN find /usr/lib -type f -path "*/tornado/test/*" -delete && \ find /usr/lib -type d -path "*/tornado/test" -delete diff --git a/docker/Dockerfile.database b/docker/Dockerfile.database index 49655129506..a05e37591ab 100644 --- a/docker/Dockerfile.database +++ b/docker/Dockerfile.database @@ -63,6 +63,9 @@ COPY --from=builder /wheels/ /wheels/ # Install the built wheel using pip; again using a wildcard if it's the only file RUN pip install *.whl /wheels/* --no-index --find-links=/wheels/ && rm -f *.whl && rm -rf /wheels +# Force patched jaraco.context version (GHSA-58pv-8j8x-9vj2) +RUN pip install --no-cache-dir 'jaraco.context==6.1.0' + # Install semantic_router and aurelio-sdk using script # Convert Windows line endings to Unix and make executable RUN sed -i 's/\r$//' docker/install_auto_router.sh && chmod +x docker/install_auto_router.sh && ./docker/install_auto_router.sh