Merge branch 'main' into typescript_node_trixie

Author: sireeshajonnalagadda

.devcontainer/devcontainer.json

@@ -4,7 +4,7 @@
         "ghcr.io/devcontainers/features/docker-in-docker:2": {},
         "ghcr.io/devcontainers/features/azure-cli:1": {}
     },
-    "postCreateCommand": "corepack enable && corepack prepare yarn@4.9.4 --activate && npm install -g @devcontainers/cli",
+    "postCreateCommand": "sudo corepack enable && corepack prepare yarn@4.9.4 --activate && npm install -g @devcontainers/cli",
     "customizations": {
         "vscode": {
             "extensions": [

.github/workflows/push-again.yml

@@ -60,6 +60,9 @@ jobs:
 
         # Setup build CLI
         cd "$GITHUB_WORKSPACE/ref"
+        # This is required to set yarn 4.9.4 as the global yarn version in the runner is 1.22.22
+        sudo corepack enable
+        sudo corepack prepare yarn@4.9.4 --activate
         yarn install
         npm install -g @devcontainers/cli
 

.github/workflows/push-dev.yml

@@ -48,6 +48,9 @@ jobs:
         ACR_REGISTRY_NAME=$(echo "$REGISTRY" | grep -oP '(.+)(?=\.azurecr\.io)')
         az acr login --name $ACR_REGISTRY_NAME --username $TOKEN_NAME --password $PASSWORD
 
+        # This is required to set yarn 4.9.4 as the global yarn version in the runner is 1.22.22
+        sudo corepack enable
+        sudo corepack prepare yarn@4.9.4 --activate
         # Build and push dev images
         yarn install
         npm install -g @devcontainers/cli

.github/workflows/push-manual-dev.yml

@@ -56,6 +56,9 @@ jobs:
 
         # Setup build CLI
         cd "$GITHUB_WORKSPACE/ref"
+        # This is required to set yarn 4.9.4 as the global yarn version in the runner is 1.22.22
+        sudo corepack enable
+        sudo corepack prepare yarn@4.9.4 --activate        
         yarn install
         npm install -g @devcontainers/cli
 

.github/workflows/push.yml

@@ -51,6 +51,9 @@ jobs:
         ACR_REGISTRY_NAME=$(echo "$REGISTRY" | grep -oP '(.+)(?=\.azurecr\.io)')
         az acr login --name $ACR_REGISTRY_NAME --username $TOKEN_NAME --password $PASSWORD
 
+        # This is required to set yarn 4.9.4 as the global yarn version in the runner is 1.22.22
+        sudo corepack enable
+        sudo corepack prepare yarn@4.9.4 --activate     
         # Build and push images
         yarn install
         npm install -g @devcontainers/cli

.github/workflows/version-history.yml

@@ -64,6 +64,9 @@ jobs:
         ACR_REGISTRY_NAME=$(echo "$REGISTRY" | grep -oP '(.+)(?=\.azurecr\.io)')
         az acr login --name $ACR_REGISTRY_NAME --username $TOKEN_NAME --password $PASSWORD
 
+        # This is required to set yarn 4.9.4 as the global yarn version in the runner is 1.22.22
+        sudo corepack enable
+        sudo corepack prepare yarn@4.9.4 --activate
         yarn install
         RELEASE_STRING=$(echo "${{ inputs.release }}" | grep -oP 'refs/(heads|tags)/\K(.+)')
         OVERWRITE_STRING=$(if [ "${{ inputs.overwrite }}" = "false" ]; then echo '--no-overwrite'; else echo '--overwrite'; fi)

src/anaconda/.devcontainer/apply_security_patches.sh

@@ -3,7 +3,7 @@
 # vulnerabilities:
 # werkzeug - [GHSA-f9vj-2wh5-fj8j] 
 
-vulnerable_packages=( "mistune=3.0.1" "aiohttp=3.10.11" "cryptography=44.0.1" "h11=0.16.0" "jinja2=3.1.6" "jupyter_core=5.8.1" "protobuf=4.25.8" "requests=2.32.4" "setuptools=78.1.1" "transformers=4.52.1" "urllib3=2.5.0" "Werkzeug=3.0.6" "jupyter-lsp=2.2.2" "scrapy=2.11.2" \ 
+vulnerable_packages=( "mistune=3.0.1" "aiohttp=3.10.11" "cryptography=44.0.1" "h11=0.16.0" "jinja2=3.1.6" "jupyter_core=5.8.1" "protobuf=5.29.5" "requests=2.32.4" "setuptools=78.1.1" "transformers=4.53.0" "urllib3=2.5.0" "Werkzeug=3.0.6" "jupyter-lsp=2.2.2" "scrapy=2.11.2" \ 
                       "zipp=3.19.1" "tornado=6.4.2")
 
 # Define the number of rows (based on the length of vulnerable_packages)
@@ -26,7 +26,7 @@ done
 
 # Add an array for packages that should always pin to the provided version, 
 # even if higher version is available in conda channel
-pin_to_required_version=("jupyter_core" "cryptography" )
+pin_to_required_version=("jupyter_core" "cryptography")
 # Function to check if a package is in the pin_to_required_version array
 function is_pin_to_required_version() {
     local pkg="$1"

src/anaconda/README.md

@@ -29,8 +29,8 @@ Refer to [this guide](https://containers.dev/guide/dockerfile) for more details.
 You can decide how often you want updates by referencing a [semantic version](https://semver.org/) of each image. For example:
 
 - `mcr.microsoft.com/devcontainers/anaconda:1-3`
-- `mcr.microsoft.com/devcontainers/anaconda:1.0-3`
-- `mcr.microsoft.com/devcontainers/anaconda:1.0.0-3`
+- `mcr.microsoft.com/devcontainers/anaconda:1.3-3`
+- `mcr.microsoft.com/devcontainers/anaconda:1.3.0-3`
 
 See [history](history) for information on the contents of each version and [here for a complete list of available tags](https://mcr.microsoft.com/v2/devcontainers/anaconda/tags/list).
 

src/anaconda/manifest.json

@@ -1,5 +1,5 @@
 {
-	"version": "1.2.9",
+	"version": "1.3.0",
 	"build": {
 		"latest": true,
 		"rootDistro": "debian",

src/anaconda/test-project/test.sh

@@ -41,8 +41,8 @@ checkPythonPackageVersion "certifi" "2022.12.07"
 checkPythonPackageVersion "cryptography" "44.0.1"
 checkPythonPackageVersion "h11" "0.16.0"
 checkPythonPackageVersion "jupyter_core" "5.8.1"
-checkPythonPackageVersion "protobuf" "4.25.8"
-checkPythonPackageVersion "transformers" "4.52.1"
+checkPythonPackageVersion "protobuf" "5.29.5"
+checkPythonPackageVersion "transformers" "4.53.0"
 checkPythonPackageVersion "mpmath" "1.3.0"
 checkPythonPackageVersion "aiohttp" "3.10.2"
 checkPythonPackageVersion "tornado" "6.4.2"