Skip to content

chore: update all dependencies and align Containerfiles to UBI10#3020

Merged
crivetimihai merged 5 commits intomainfrom
tag-1.0.0-rc1-release-final
Feb 18, 2026
Merged

chore: update all dependencies and align Containerfiles to UBI10#3020
crivetimihai merged 5 commits intomainfrom
tag-1.0.0-rc1-release-final

Conversation

@crivetimihai
Copy link
Copy Markdown
Member

@crivetimihai crivetimihai commented Feb 17, 2026

Summary

  • Update all Python dependencies across 24 pyproject.toml files and 5 requirements.txt files (fastapi, uvicorn, pydantic, redis, openai, langchain-core, ruff, and more)
  • Update all 7 Go modules (mcp-go v0.43.2→v0.44.0, and transitive deps)
  • Update all 4 Rust projects via cargo update (pyo3, futures, clap, syn, uuid, etc.)
  • Update pre-commit hooks across 3 config files (gitleaks, ruff, black, mypy, bandit, etc.)
  • Align all 3 root Containerfile base images to latest manylinux2014:2026.02.06-1 and UBI10 tags
  • Convert 13 mcp-server Containerfiles from python:3.11-slim to UBI10 multi-stage builds (ubi10/ubi builder + ubi10/ubi-minimal runtime)
  • Upgrade 2 mcp-server Containerfiles from UBI9 scratch-based to UBI10 ubi-minimal
  • Upgrade 3 plugin Containerfiles from UBI9 to UBI10
  • Update SECURITY.md with 10+ newly added security scanners and tools

Test plan

  • make install-dev — all dependencies install cleanly, no conflicts
  • make lint-quick — ruff, black, isort all pass
  • make test — 12,378 passed, 470 skipped, 1 pre-existing flaky test
  • All 7 Go projects compile (go build)
  • All Rust projects compile (cargo check)
  • Containerfile.lite builds successfully (360MB)
  • docx_server UBI10 Containerfile builds and passes smoke test (259MB)
  • qr_code_server UBI10 Containerfile builds and passes smoke test
  • ubi10/python-312-minimal confirmed available for plugin Containerfiles

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
@crivetimihai crivetimihai changed the title Update security pre-commit tools chore: update all dependencies and align Containerfiles to UBI10 Feb 17, 2026
- csv_pandas_chat: remove COPY templates/ (directory doesn't exist)
- data_analysis/mcp_eval: replace shell heredoc with printf (Docker
  parses heredoc content as Dockerfile instructions); remove COPY of
  non-existent __init__.py and config/ directory
- latex_server: switch to Fedora 41 base (texlive packages not in UBI10 repos)
- libreoffice_server: switch to Fedora 41 base (libreoffice not in UBI10 repos)
- python_sandbox: remove coreutils from builder/runtime (conflicts with
  coreutils-single pre-installed in UBI images)

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
The coverage Makefile target calls xdg-open to display the HTML report,
which fails in CI where no browser is available. Make it non-fatal so
the coverage report generation still succeeds.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
@crivetimihai crivetimihai marked this pull request as ready for review February 18, 2026 00:53
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
@crivetimihai crivetimihai merged commit 1902707 into main Feb 18, 2026
57 checks passed
@crivetimihai crivetimihai deleted the tag-1.0.0-rc1-release-final branch February 18, 2026 01:23
vishu-bh pushed a commit that referenced this pull request Feb 18, 2026
* Update security pre-commit tools

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Update all dependencies

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: resolve Containerfile build failures found during full validation

- csv_pandas_chat: remove COPY templates/ (directory doesn't exist)
- data_analysis/mcp_eval: replace shell heredoc with printf (Docker
  parses heredoc content as Dockerfile instructions); remove COPY of
  non-existent __init__.py and config/ directory
- latex_server: switch to Fedora 41 base (texlive packages not in UBI10 repos)
- libreoffice_server: switch to Fedora 41 base (libreoffice not in UBI10 repos)
- python_sandbox: remove coreutils from builder/runtime (conflicts with
  coreutils-single pre-installed in UBI images)

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: make xdg-open non-fatal in Rust coverage target

The coverage Makefile target calls xdg-open to display the HTML report,
which fails in CI where no browser is available. Make it non-fatal so
the coverage report generation still succeeds.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Vishu Bhatnagar <vishu.bhatnagar@ibm.com>
KKNithin pushed a commit to KKNithin/mcp-context-forge that referenced this pull request Feb 19, 2026
…#3020)

* Update security pre-commit tools

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Update all dependencies

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: resolve Containerfile build failures found during full validation

- csv_pandas_chat: remove COPY templates/ (directory doesn't exist)
- data_analysis/mcp_eval: replace shell heredoc with printf (Docker
  parses heredoc content as Dockerfile instructions); remove COPY of
  non-existent __init__.py and config/ directory
- latex_server: switch to Fedora 41 base (texlive packages not in UBI10 repos)
- libreoffice_server: switch to Fedora 41 base (libreoffice not in UBI10 repos)
- python_sandbox: remove coreutils from builder/runtime (conflicts with
  coreutils-single pre-installed in UBI images)

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: make xdg-open non-fatal in Rust coverage target

The coverage Makefile target calls xdg-open to display the HTML report,
which fails in CI where no browser is available. Make it non-fatal so
the coverage report generation still succeeds.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Nithin Katta <Nithin.Katta@ibm.com>
crivetimihai added a commit that referenced this pull request Feb 24, 2026
* Update security pre-commit tools

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Update all dependencies

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: resolve Containerfile build failures found during full validation

- csv_pandas_chat: remove COPY templates/ (directory doesn't exist)
- data_analysis/mcp_eval: replace shell heredoc with printf (Docker
  parses heredoc content as Dockerfile instructions); remove COPY of
  non-existent __init__.py and config/ directory
- latex_server: switch to Fedora 41 base (texlive packages not in UBI10 repos)
- libreoffice_server: switch to Fedora 41 base (libreoffice not in UBI10 repos)
- python_sandbox: remove coreutils from builder/runtime (conflicts with
  coreutils-single pre-installed in UBI images)

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: make xdg-open non-fatal in Rust coverage target

The coverage Makefile target calls xdg-open to display the HTML report,
which fails in CI where no browser is available. Make it non-fatal so
the coverage report generation still succeeds.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Nithin Katta <Nithin.Katta@ibm.com>
cafalchio pushed a commit that referenced this pull request Feb 26, 2026
* Update security pre-commit tools

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Update all dependencies

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: resolve Containerfile build failures found during full validation

- csv_pandas_chat: remove COPY templates/ (directory doesn't exist)
- data_analysis/mcp_eval: replace shell heredoc with printf (Docker
  parses heredoc content as Dockerfile instructions); remove COPY of
  non-existent __init__.py and config/ directory
- latex_server: switch to Fedora 41 base (texlive packages not in UBI10 repos)
- libreoffice_server: switch to Fedora 41 base (libreoffice not in UBI10 repos)
- python_sandbox: remove coreutils from builder/runtime (conflicts with
  coreutils-single pre-installed in UBI images)

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: make xdg-open non-fatal in Rust coverage target

The coverage Makefile target calls xdg-open to display the HTML report,
which fails in CI where no browser is available. Make it non-fatal so
the coverage report generation still succeeds.

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* linting

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant