From 64ba43202d00fabd0a90397937920cb6580853c1 Mon Sep 17 00:00:00 2001 From: Owl Bot Date: Tue, 15 Jul 2025 17:23:49 +0000 Subject: [PATCH] build: fix cross-span and setuptools CVEs Fixes CVE-2024-21538 and CVE-2024-6345 . b/430729479 * use python:3.10.18-bullseye for PHP base to fix Kokoro failure Source-Link: https://github.com/googleapis/synthtool/commit/65d4020efe345d7e36b676eba3d02f991b3314e9 Post-Processor: gcr.io/cloud-devrel-public-resources/owlbot-nodejs:latest@sha256:a52bd494fc1fe28479d7982db3d0f8bd49d862b4184c4574ca0931e99ac1ffee --- .github/.OwlBot.lock.yaml | 4 ++-- .github/workflows/ci.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/.OwlBot.lock.yaml b/.github/.OwlBot.lock.yaml index 6044334..cfb414e 100644 --- a/.github/.OwlBot.lock.yaml +++ b/.github/.OwlBot.lock.yaml @@ -13,5 +13,5 @@ # limitations under the License. docker: image: gcr.io/cloud-devrel-public-resources/owlbot-nodejs:latest - digest: sha256:c7e4968cfc97a204a4b2381f3ecb55cabc40c4cccf88b1ef8bef0d976be87fee -# created: 2025-04-08T17:33:08.498793944Z + digest: sha256:a52bd494fc1fe28479d7982db3d0f8bd49d862b4184c4574ca0931e99ac1ffee +# created: 2025-07-15T17:18:59.198670588Z diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 883082c..ba80cb2 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest strategy: matrix: - node: [18, 20, 22] + node: [18, 20, 22, 24] steps: - uses: actions/checkout@v4 - uses: actions/setup-node@v4