2026.06

ghcr.io/twplatformlabs/circleci-python-builder:🏷️

Detailed build logs and CVE scan output included in release assets.

Commits included

013128d [nc] adjust tests
d0fa542 [nc] adjust tests
29ee588 [nc] just amd64
0fe96a3 [nc] just alpine, multi-arch
852a79b [nc] buildx but with a single Dockerfile
354eebc [nc] new orb-executor-tools and pipeline for buildx bake file
a8d7f8c [nc] new release notes with package versions
8300d68 [nc] update credentials for ghcr.io
5a18003 [nc] add trivy and docker scout
24fefe6 [nc] switch to bake file buildx

SBOM guidance

alpine

Python 3.14.5
Package Version

---

anyio 4.14.0
astroid 4.0.4
bandit 1.9.4
black 26.5.1
boto3 1.43.34
botocore 1.43.34
build 1.5.0
certifi 2026.6.17
cffi 2.0.0
charset-normalizer 3.4.7
click 8.4.1
coverage 7.14.2
cryptography 49.0.0
dill 0.4.1
distlib 0.4.3
distro 1.9.0
docutils 0.23
filelock 3.29.4
h11 0.16.0
hatch 1.17.0
hatchling 1.30.1
httpcore2 2.4.0
httpx2 2.4.0
hyperlink 21.0.0
id 1.6.1
idna 3.18
iniconfig 2.3.0
invoke 3.0.3
isort 8.0.1
jaraco.classes 3.4.0
jaraco.context 6.1.2
jaraco.functools 4.5.0
jeepney 0.9.0
Jinja2 3.1.6
jmespath 1.1.0
keyring 25.7.0
markdown-it-py 4.2.0
MarkupSafe 3.0.3
mccabe 0.7.0
mdurl 0.1.2
mock 5.2.0
more-itertools 11.1.0
moto 5.2.2
mypy_extensions 1.1.0
nh3 0.3.6
packaging 26.2
pathspec 1.1.1
pexpect 4.9.0
pip 26.1.2
pipenv 2026.6.2
platformdirs 4.10.0
pluggy 1.6.0
ptyprocess 0.7.0
pycparser 3.0
Pygments 2.20.0
pylint 4.0.6
pyproject_hooks 1.2.0
pytest 9.1.1
pytest-asyncio 1.4.0
pytest-cov 7.1.0
pytest-env 1.6.0
python-dateutil 2.9.0.post0
python-discovery 1.4.2
python-dotenv 1.2.2
pytokens 0.4.1
PyYAML 6.0.3
readme_renderer 45.0
requests 2.34.2
requests-toolbelt 1.0.0
responses 0.26.1
rfc3986 2.0.0
rich 15.0.0
s3transfer 0.19.0
SecretStorage 3.5.0
setuptools 82.0.1
setuptools-scm 10.1.1
shellingham 1.5.4
six 1.17.0
stevedore 5.8.0
tomli_w 1.2.0
tomlkit 0.15.0
trove-classifiers 2026.6.1.19
truststore 0.10.4
twine 6.2.0
urllib3 2.7.0
userpath 1.9.2
uv 0.11.23
vcs-versioning 2.0.1
virtualenv 21.5.1
Werkzeug 3.1.8
wheel 0.47.0
xmltodict 1.0.4
Bats 1.13.0
snyk 1.1305.1
Haskell Dockerfile Linter 2.14.0

cosign GitVersion: v3.1.1

syft 1.45.1

oras Version: 1.3.2

trivy Version: 0.71.2

Scout version: v1.22.0 (go1.26.3 - linux/amd64)

2025.07

Review pipeline build.out log for detailed base image and package version information
Review pipeline snyk.out log for CVE

Commits included

b7d7676 [nc] fix cleanup

2025.06

Review pipeline build.out log for detailed base image and package version information
Review pipeline snyk.out log for CVE

Commits included

b3e8d38 [nc] fix test container reference
aec8a4b [nc] fix test name
82e9122 [nc] fix dependency name
85b1baf [nc] update pipeline for current orbs
d9fd69e [nc] adopt gh-release for releate notes
4c03cd7 [nc] update banner
85a7dd5 [nc] adjust build for current release versions
10faa20 [nc] adjust build for current release versions
e46e878 [nc] adjust tests to be version agnostic
0de1b2a [nc] testing whether the new circleci support for multiple pipeline yaml is software controlable or a GUI only feature

5.2.0

Review build.out log for detailed base image and package version information

Commits included

6ea6923 [nc] new base image and related packages
ee726d3 [nc] new base image and related packages
1aeb98e [nc] update for twplatformlabs

5.1.1

Review build.out log for detailed base image and package version information

Commits included

7a823b6 [nc] clean up project workdir

5.1.0

Review build.out log for detailed base image and package version information

Commits included

21d204d [nc] add crane tool for pulling digests

5.0.1

Review build.out log for detailed base image and package version information

Commits included

47f8126 [nc] gh cli release notes values

4.0.0

Enhancements:

• #43 oras v1.0.0
• #42 syft v0.85.0
• #41 cosign v2.1.1
• #31 Add python package hatch=1.7.0
• #22 snyk@1.1115.0
• #21 moto==4.1.4
• #20 twine==4.0.2
• #19 setuptools_scm==7.1.0
• #18 Remove versioneer
• #17 versioneer==0.28
• #16 build==0.10.0

3.0.2

Enhancements:

• #43 oras v1.0.0
• #42 syft v0.85.0
• #41 cosign v2.1.1
• #31 Add python package hatch=1.7.0
• #22 snyk@1.1115.0
• #21 moto==4.1.4
• #20 twine==4.0.2
• #19 setuptools_scm==7.1.0
• #18 Remove versioneer
• #17 versioneer==0.28
• #16 build==0.10.0

2.5.0

Enhancements:

• #43 oras v1.0.0
• #42 syft v0.85.0
• #41 cosign v2.1.1
• #31 Add python package hatch=1.7.0
• #22 snyk@1.1115.0
• #21 moto==4.1.4
• #20 twine==4.0.2
• #19 setuptools_scm==7.1.0
• #18 Remove versioneer
• #17 versioneer==0.28
• #16 build==0.10.0