Bumping packages to latest stable versions#1836
Merged
loosebazooka merged 1 commit intomainfrom Aug 10, 2025
Merged
Conversation
Signed-off-by: Distroless Bot <distroless-bot@google.com>
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Summary of Changes
Hello @distroless-bot, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!
This pull request automates the process of updating various Debian packages across different architectures to their latest stable versions. It primarily involves updating snapshot URLs and package hashes in several lock and YAML files, ensuring the system uses the most current and secure dependencies.
Highlights
- Core Package Updates: The pull request includes automated version bumps for critical packages like
libssl3andopenssl, moving them fromdeb12u1todeb12u2across all supported architectures. This ensures that the images incorporate the latest security and stability fixes for these fundamental libraries. - Debian Snapshot Refresh: The Debian snapshot URLs referenced in
bookworm.yaml,bookworm_java.yaml, andbookworm_python.yamlhave been updated to a more recent timestamp (20250808T204515Z). This change reflects a refresh of the source for all Debian packages used in the build process, pulling in the latest available stable versions. - Dependency Hash Regeneration: Corresponding to the updated snapshot URLs, the SHA256 hashes and download locations for numerous packages across
bookworm.lock.json,bookworm_java.lock.json, andbookworm_python.lock.jsonhave been regenerated. This guarantees that the build system fetches the correct and verified versions of all dependencies. - Multi-Architecture Coverage: The updates are comprehensive, affecting packages across various architectures including
amd64,arm64,armhf,s390x, andppc64el, ensuring broad compatibility and consistent updates across different deployment environments.
Using Gemini Code Assist
The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.
Invoking Gemini
You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.
| Feature | Command | Description |
|---|---|---|
| Code Review | /gemini review |
Performs a code review for the current pull request in its current state. |
| Pull Request Summary | /gemini summary |
Provides a summary of the current pull request in its current state. |
| Comment | @gemini-code-assist | Responds in comments when explicitly tagged, both in issue comments and review comments. |
| Help | /gemini help |
Displays a list of available commands. |
Customization
To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.
Limitations & Feedback
Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments or fill out our survey to provide feedback.
You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.
Footnotes
-
Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩
Contributor
There was a problem hiding this comment.
Code Review
This pull request updates Debian package dependencies by pointing to a newer snapshot date. This results in updating openssl and libssl3 to version 3.0.17-1~deb12u2 across all architectures. The changes are consistent across all configuration, lock, and SBOM files. The updates appear correct and I have no further feedback.
Contributor
|
🌳 🔄 Image Check This pull request has modified the following images: //base:debug_root_amd64_debian12
//base:debug_root_amd64_debian12
//base:debug_nonroot_amd64_debian12
//base:base_root_arm64_debian12
//base:debug_root_arm64_debian12
//base:debug_nonroot_amd64_debian12
//base:base_nonroot_arm64_debian12
//base:base_root_amd64_debian12
//base:debug_nonroot_arm64_debian12
//base:base_nonroot_amd64_debian12
//base:base_nonroot_arm_debian12
//base:base_root_s390x_debian12
//base:debug_nonroot_arm_debian12
//base:base_root_amd64_debian12
//base:base_root_arm_debian12
//base:base_nonroot_amd64_debian12
//base:base_nonroot_arm_debian12
//base:base_nonroot_s390x_debian12
//base:debug_nonroot_s390x_debian12
//base:debug_root_ppc64le_debian12
//base:debug_root_arm_debian12
//base:base_nonroot_s390x_debian12
//base:debug_root_arm_debian12
//base:base_root_arm_debian12
//base:debug_root_s390x_debian12
//base:base_root_s390x_debian12
//base:debug_root_ppc64le_debian12
//base:base_nonroot_ppc64le_debian12
//base:base_root_ppc64le_debian12
//base:debug_nonroot_arm_debian12
//base:debug_nonroot_s390x_debian12
//base:debug_nonroot_ppc64le_debian12
//base:base_root_arm64_debian12
//base:base_nonroot_arm64_debian12
//base:debug_root_s390x_debian12
//base:base_root_ppc64le_debian12
//cc:cc_nonroot_amd64_debian12
//cc:debug_root_amd64_debian12
//cc:debug_root_arm64_debian12
//base:debug_root_arm64_debian12
//cc:cc_nonroot_amd64_debian12
//cc:debug_nonroot_arm64_debian12
//cc:cc_nonroot_arm_debian12
//cc:cc_root_arm_debian12
//cc:cc_nonroot_arm_debian12
//cc:debug_nonroot_arm64_debian12
//cc:debug_nonroot_amd64_debian12
//cc:cc_nonroot_arm64_debian12
//cc:cc_root_amd64_debian12
//cc:debug_root_arm64_debian12
//cc:debug_root_s390x_debian12
//cc:cc_nonroot_s390x_debian12
//cc:debug_nonroot_s390x_debian12
//cc:cc_root_arm64_debian12
//base:debug_nonroot_ppc64le_debian12
//cc:debug_root_ppc64le_debian12
//cc:cc_root_arm64_debian12
//cc:debug_nonroot_amd64_debian12
//cc:debug_nonroot_ppc64le_debian12
//cc:cc_root_ppc64le_debian12
//cc:cc_nonroot_s390x_debian12
//cc:cc_root_ppc64le_debian12
//python3:debug_nonroot_amd64_debian12
//python3:python3_root_amd64_debian12
//cc:debug_nonroot_ppc64le_debian12
//cc:debug_nonroot_arm_debian12
//cc:debug_root_ppc64le_debian12
//python3:python3_root_amd64_debian12
//python3:debug_nonroot_amd64_debian12
//python3:python3_nonroot_arm64_debian12
//python3:debug_root_arm64_debian12
//cc:debug_root_amd64_debian12
//python3:python3_nonroot_amd64_debian12
//python3:debug_root_arm64_debian12
//cc:cc_root_s390x_debian12
//python3:debug_root_amd64_debian12
//cc:cc_nonroot_arm64_debian12
//base:base_nonroot_ppc64le_debian12
//python3:debug_root_amd64_debian12
//nodejs:nodejs20_debug_root_amd64_debian12
//nodejs:nodejs20_nonroot_amd64_debian12
//python3:python3_root_arm64_debian12
//python3:debug_nonroot_arm64_debian12
//python3:debug_nonroot_arm64_debian12
//nodejs:nodejs20_nonroot_arm64_debian12
//cc:cc_root_s390x_debian12
//cc:cc_nonroot_ppc64le_debian12
//python3:python3_nonroot_amd64_debian12
//cc:cc_nonroot_ppc64le_debian12
//base:debug_nonroot_arm64_debian12
//python3:python3_root_arm64_debian12
//python3:python3_nonroot_arm64_debian12
//cc:cc_root_amd64_debian12
//cc:debug_nonroot_arm_debian12
//cc:debug_root_arm_debian12
//nodejs:nodejs20_root_amd64_debian12
//nodejs:nodejs20_nonroot_arm64_debian12
//cc:debug_root_arm_debian12
//cc:cc_root_arm_debian12
//nodejs:nodejs20_debug_nonroot_arm64_debian12
//cc:debug_nonroot_s390x_debian12
//nodejs:nodejs20_debug_root_arm64_debian12
//nodejs:nodejs20_debug_root_arm64_debian12
//cc:debug_root_s390x_debian12
//nodejs:nodejs20_nonroot_amd64_debian12
//nodejs:nodejs20_root_arm64_debian12
//nodejs:nodejs20_debug_root_arm_debian12
//nodejs:nodejs20_root_arm_debian12
//nodejs:nodejs20_debug_root_ppc64le_debian12
//nodejs:nodejs20_root_arm64_debian12
//nodejs:nodejs20_debug_root_arm_debian12
//nodejs:nodejs20_root_s390x_debian12
//nodejs:nodejs22_nonroot_amd64_debian12
//nodejs:nodejs20_debug_nonroot_amd64_debian12
//nodejs:nodejs20_nonroot_ppc64le_debian12
//nodejs:nodejs20_root_ppc64le_debian12
//nodejs:nodejs22_nonroot_amd64_debian12
//nodejs:nodejs20_debug_nonroot_arm_debian12
//nodejs:nodejs22_root_amd64_debian12
//nodejs:nodejs20_debug_root_amd64_debian12
//nodejs:nodejs22_debug_nonroot_amd64_debian12
//nodejs:nodejs20_debug_nonroot_s390x_debian12
//nodejs:nodejs20_root_s390x_debian12
//nodejs:nodejs20_debug_nonroot_arm64_debian12
//nodejs:nodejs20_debug_nonroot_arm_debian12
//nodejs:nodejs22_debug_nonroot_arm64_debian12
//nodejs:nodejs20_debug_root_ppc64le_debian12
//nodejs:nodejs20_debug_root_s390x_debian12
//nodejs:nodejs22_root_arm64_debian12
//nodejs:nodejs20_debug_nonroot_amd64_debian12
//nodejs:nodejs22_debug_root_arm_debian12
//nodejs:nodejs20_debug_root_s390x_debian12
//nodejs:nodejs22_debug_root_arm64_debian12
//nodejs:nodejs20_nonroot_arm_debian12
//nodejs:nodejs20_nonroot_s390x_debian12
//nodejs:nodejs22_nonroot_arm_debian12
//nodejs:nodejs22_root_s390x_debian12
//nodejs:nodejs20_nonroot_arm_debian12
//nodejs:nodejs22_nonroot_s390x_debian12
//nodejs:nodejs20_debug_nonroot_ppc64le_debian12
//nodejs:nodejs20_nonroot_ppc64le_debian12
//nodejs:nodejs22_root_s390x_debian12
//nodejs:nodejs22_debug_root_s390x_debian12
//nodejs:nodejs22_debug_nonroot_amd64_debian12
//nodejs:nodejs22_debug_root_amd64_debian12
//nodejs:nodejs22_root_arm64_debian12
//nodejs:nodejs22_debug_nonroot_arm_debian12
//nodejs:nodejs22_nonroot_ppc64le_debian12
//nodejs:nodejs22_nonroot_arm_debian12
//nodejs:nodejs20_root_ppc64le_debian12
//nodejs:nodejs22_root_ppc64le_debian12
//nodejs:nodejs22_root_ppc64le_debian12
//nodejs:nodejs22_debug_nonroot_ppc64le_debian12
//nodejs:nodejs22_debug_root_ppc64le_debian12
//nodejs:nodejs22_debug_nonroot_s390x_debian12
//nodejs:nodejs22_debug_root_arm64_debian12
//nodejs:nodejs20_root_amd64_debian12
//nodejs:nodejs22_debug_nonroot_s390x_debian12
//nodejs:nodejs20_debug_nonroot_s390x_debian12
//nodejs:nodejs22_debug_nonroot_arm64_debian12
//nodejs:nodejs20_debug_nonroot_ppc64le_debian12
//nodejs:nodejs22_root_arm_debian12
//nodejs:nodejs22_debug_nonroot_arm_debian12
//nodejs:nodejs24_nonroot_amd64_debian12
//nodejs:nodejs22_debug_root_s390x_debian12
//nodejs:nodejs22_debug_nonroot_ppc64le_debian12
//nodejs:nodejs22_debug_root_arm_debian12
//nodejs:nodejs22_root_arm_debian12
//nodejs:nodejs22_root_amd64_debian12
//nodejs:nodejs24_root_amd64_debian12
//nodejs:nodejs20_nonroot_s390x_debian12
//nodejs:nodejs22_debug_root_ppc64le_debian12
//nodejs:nodejs24_debug_nonroot_amd64_debian12
//nodejs:nodejs24_nonroot_amd64_debian12
//nodejs:nodejs22_nonroot_s390x_debian12
//nodejs:nodejs24_debug_nonroot_amd64_debian12
//nodejs:nodejs24_nonroot_arm64_debian12
//nodejs:nodejs24_debug_root_arm64_debian12
//nodejs:nodejs24_root_arm64_debian12
//nodejs:nodejs24_nonroot_ppc64le_debian12
//nodejs:nodejs24_debug_nonroot_s390x_debian12
//nodejs:nodejs24_nonroot_arm64_debian12
//nodejs:nodejs24_nonroot_s390x_debian12
//nodejs:nodejs24_debug_nonroot_arm64_debian12
//nodejs:nodejs24_debug_root_amd64_debian12
//nodejs:nodejs24_nonroot_ppc64le_debian12
//nodejs:nodejs24_root_arm64_debian12
//nodejs:nodejs22_debug_root_amd64_debian12
//nodejs:nodejs22_nonroot_arm64_debian12
//nodejs:nodejs24_root_amd64_debian12
//nodejs:nodejs24_debug_root_ppc64le_debian12
//nodejs:nodejs22_nonroot_ppc64le_debian12
//nodejs:nodejs22_nonroot_arm64_debian12
//nodejs:nodejs24_root_ppc64le_debian12
//nodejs:nodejs20_root_arm_debian12
//nodejs:nodejs24_debug_root_amd64_debian12
//nodejs:nodejs24_debug_nonroot_arm64_debian12
//nodejs:nodejs24_root_ppc64le_debian12
//nodejs:nodejs24_debug_root_arm64_debian12
//nodejs:nodejs24_debug_nonroot_ppc64le_debian12
//nodejs:nodejs24_debug_nonroot_s390x_debian12
//nodejs:nodejs24_debug_root_ppc64le_debian12
//nodejs:nodejs24_nonroot_s390x_debian12
//nodejs:nodejs24_root_s390x_debian12
//nodejs:nodejs24_debug_root_s390x_debian12
//nodejs:nodejs24_debug_root_s390x_debian12
//nodejs:nodejs24_debug_nonroot_ppc64le_debian12
//nodejs:nodejs24_root_s390x_debian12You can check the details in the report here |
loosebazooka
approved these changes
Aug 10, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumping packages to latest stable version