This is an automated email from the ASF dual-hosted git repository.
damccorm pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new 7531f63ef5a Update Python container CA dependencies and distroless
base images to debian13 (#40811)
7531f63ef5a is described below
commit 7531f63ef5aa2feaeb2b9b7a3276c09b4ea7d480
Author: Danny McCormick <[email protected]>
AuthorDate: Thu Oct 29 16:03:47 2026 +0000
Update Python container CA dependencies and distroless base images to
debian13 (#40811)
---
sdks/go/container/Dockerfile | 2 +-
sdks/java/container/distroless/common.gradle | 2 +-
sdks/python/container/distroless/Dockerfile | 2 +-
sdks/python/container/ml/py310/base_image_requirements.txt | 6 +++---
sdks/python/container/ml/py310/gpu_image_requirements.txt | 6 +++---
sdks/python/container/ml/py311/base_image_requirements.txt | 6 +++---
sdks/python/container/ml/py311/gpu_image_requirements.txt | 6 +++---
sdks/python/container/ml/py312/base_image_requirements.txt | 6 +++---
sdks/python/container/ml/py312/gpu_image_requirements.txt | 6 +++---
sdks/python/container/ml/py313/base_image_requirements.txt | 6 +++---
sdks/python/container/py310/base_image_requirements.txt | 6 +++---
sdks/python/container/py311/base_image_requirements.txt | 6 +++---
sdks/python/container/py312/base_image_requirements.txt | 6 +++---
sdks/python/container/py313/base_image_requirements.txt | 6 +++---
sdks/python/container/py314/base_image_requirements.txt | 6 +++---
15 files changed, 39 insertions(+), 39 deletions(-)
diff --git a/sdks/go/container/Dockerfile b/sdks/go/container/Dockerfile
index 3d70e2834b7..08549667727 100644
--- a/sdks/go/container/Dockerfile
+++ b/sdks/go/container/Dockerfile
@@ -16,7 +16,7 @@
# limitations under the License.
###############################################################################
-FROM gcr.io/distroless/base-nossl-debian12:latest AS base_image
+FROM gcr.io/distroless/base-nossl-debian13:latest AS base_image
# Distroless base image has many layers. Squash into single layer
FROM scratch
diff --git a/sdks/java/container/distroless/common.gradle
b/sdks/java/container/distroless/common.gradle
index 7327a729139..608a6b5e54e 100644
--- a/sdks/java/container/distroless/common.gradle
+++ b/sdks/java/container/distroless/common.gradle
@@ -60,7 +60,7 @@ docker {
files "./build/"
buildArgs([
'BEAM_BASE': base,
- 'DISTROLESS_BASE':
"gcr.io/distroless/java${imageJavaVersion}-debian12"
+ 'DISTROLESS_BASE':
"gcr.io/distroless/java${imageJavaVersion}-debian13"
])
buildx project.useBuildx()
platform(*project.containerPlatforms())
diff --git a/sdks/python/container/distroless/Dockerfile
b/sdks/python/container/distroless/Dockerfile
index 2799bd2be81..287c64fd9d8 100644
--- a/sdks/python/container/distroless/Dockerfile
+++ b/sdks/python/container/distroless/Dockerfile
@@ -24,7 +24,7 @@ LABEL Author="Apache Beam <[email protected]>"
RUN if [ -z "${TARGETARCH}" ]; then echo "fatal: TARGETARCH not set; run as
docker buildx build or use --build-arg=TARGETARCH=amd64|arm64" >&2; exit 1; fi
-FROM gcr.io/distroless/python3-debian12:latest-${TARGETARCH} AS distroless
+FROM gcr.io/distroless/python3-debian13:latest-${TARGETARCH} AS distroless
# Prevents internal errors found with distroless container images and Flex
templates.
COPY --from=base /usr/lib/locale /usr/lib/locale
diff --git a/sdks/python/container/ml/py310/base_image_requirements.txt
b/sdks/python/container/ml/py310/base_image_requirements.txt
index d075e695cfb..6a459c7a9e9 100644
--- a/sdks/python/container/ml/py310/base_image_requirements.txt
+++ b/sdks/python/container/ml/py310/base_image_requirements.txt
@@ -37,7 +37,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -96,8 +96,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py310/gpu_image_requirements.txt
b/sdks/python/container/ml/py310/gpu_image_requirements.txt
index 77013a36eb8..373aecffc53 100644
--- a/sdks/python/container/ml/py310/gpu_image_requirements.txt
+++ b/sdks/python/container/ml/py310/gpu_image_requirements.txt
@@ -41,7 +41,7 @@ bs4==0.0.2
build==1.5.0
cachetools==6.2.6
cbor2==6.1.4
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -116,8 +116,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py311/base_image_requirements.txt
b/sdks/python/container/ml/py311/base_image_requirements.txt
index 4f8f6e7dcf0..60c32b64099 100644
--- a/sdks/python/container/ml/py311/base_image_requirements.txt
+++ b/sdks/python/container/ml/py311/base_image_requirements.txt
@@ -36,7 +36,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -94,8 +94,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py311/gpu_image_requirements.txt
b/sdks/python/container/ml/py311/gpu_image_requirements.txt
index 1717a25be2c..57c130d29ed 100644
--- a/sdks/python/container/ml/py311/gpu_image_requirements.txt
+++ b/sdks/python/container/ml/py311/gpu_image_requirements.txt
@@ -40,7 +40,7 @@ bs4==0.0.2
build==1.5.0
cachetools==6.2.6
cbor2==6.1.4
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -114,8 +114,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py312/base_image_requirements.txt
b/sdks/python/container/ml/py312/base_image_requirements.txt
index 7c245afc020..d093c15673a 100644
--- a/sdks/python/container/ml/py312/base_image_requirements.txt
+++ b/sdks/python/container/ml/py312/base_image_requirements.txt
@@ -35,7 +35,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -93,8 +93,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py312/gpu_image_requirements.txt
b/sdks/python/container/ml/py312/gpu_image_requirements.txt
index dd5458171e9..1750acc80f9 100644
--- a/sdks/python/container/ml/py312/gpu_image_requirements.txt
+++ b/sdks/python/container/ml/py312/gpu_image_requirements.txt
@@ -39,7 +39,7 @@ bs4==0.0.2
build==1.5.0
cachetools==6.2.6
cbor2==6.1.4
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -113,8 +113,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/ml/py313/base_image_requirements.txt
b/sdks/python/container/ml/py313/base_image_requirements.txt
index e6cc9b8b11f..20362d45831 100644
--- a/sdks/python/container/ml/py313/base_image_requirements.txt
+++ b/sdks/python/container/ml/py313/base_image_requirements.txt
@@ -35,7 +35,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -92,8 +92,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/py310/base_image_requirements.txt
b/sdks/python/container/py310/base_image_requirements.txt
index 62b8ef00dc9..f88e84ce75c 100644
--- a/sdks/python/container/py310/base_image_requirements.txt
+++ b/sdks/python/container/py310/base_image_requirements.txt
@@ -35,7 +35,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -89,8 +89,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/py311/base_image_requirements.txt
b/sdks/python/container/py311/base_image_requirements.txt
index cc2db12cb47..c7be537ce39 100644
--- a/sdks/python/container/py311/base_image_requirements.txt
+++ b/sdks/python/container/py311/base_image_requirements.txt
@@ -34,7 +34,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -87,8 +87,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/py312/base_image_requirements.txt
b/sdks/python/container/py312/base_image_requirements.txt
index 767858f342f..1a6dbaf5619 100644
--- a/sdks/python/container/py312/base_image_requirements.txt
+++ b/sdks/python/container/py312/base_image_requirements.txt
@@ -33,7 +33,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -86,8 +86,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/py313/base_image_requirements.txt
b/sdks/python/container/py313/base_image_requirements.txt
index 34a40461670..cb946e1aa3f 100644
--- a/sdks/python/container/py313/base_image_requirements.txt
+++ b/sdks/python/container/py313/base_image_requirements.txt
@@ -33,7 +33,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -85,8 +85,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
diff --git a/sdks/python/container/py314/base_image_requirements.txt
b/sdks/python/container/py314/base_image_requirements.txt
index 95a61155cbb..98a0656cedc 100644
--- a/sdks/python/container/py314/base_image_requirements.txt
+++ b/sdks/python/container/py314/base_image_requirements.txt
@@ -33,7 +33,7 @@ beautifulsoup4==4.15.0
bs4==0.0.2
build==1.5.0
cachetools==6.2.6
-certifi==2026.10.19
+certifi==2026.10.23
cffi==2.1.1
charset-normalizer==3.5.0
click==8.4.2
@@ -85,8 +85,8 @@ googleapis-common-protos==1.75.1
greenlet==3.5.5
grpc-google-iam-v1==0.14.5
grpc-interceptor==0.15.4
-grpcio==1.83.0
-grpcio-status==1.83.0
+grpcio==1.85.0
+grpcio-status==1.85.0
guppy3==3.1.7
h11==0.16.0
h2==4.4.1
