Merge branch 'fbenitez/vuln-620-minor-upgrade-for-protobuf-apollo-agent-container' into dev

Author: benitezfede

requirements-azure.in

@@ -5,4 +5,8 @@ azure-mgmt-resource==23.0.1
 azure-monitor-opentelemetry==1.3.0
 azure-monitor-query==1.2.1
 aiohttp==3.10.11
-viztracer==0.17.1
+deprecated==1.2.18 # Added VULN-620
+opentelemetry-api==1.25.0 # Added VULN-620
+viztracer==0.17.1 # Added VULN-620
+wrapt==1.17.2 # Added VULN-620
+zipp==3.23.0 # Added VULN-620

requirements-azure.txt

@@ -60,8 +60,10 @@ charset-normalizer==3.3.2
     # via
     #   -c requirements.txt
     #   requests
-deprecated==1.2.14
-    # via opentelemetry-api
+deprecated==1.2.18
+    # via
+    #   -r requirements-azure.in
+    #   opentelemetry-api
 fixedint==0.1.6
     # via azure-monitor-opentelemetry-exporter
 frozenlist==1.4.1
@@ -99,6 +101,7 @@ objprint==0.3.0
     # via viztracer
 opentelemetry-api==1.25.0
     # via
+    #   -r requirements-azure.in
     #   azure-core-tracing-opentelemetry
     #   azure-monitor-opentelemetry-exporter
     #   opentelemetry-instrumentation
@@ -217,16 +220,19 @@ urllib3==2.4.0
     #   requests
 viztracer==0.17.1
     # via -r requirements-azure.in
-wrapt==1.16.0
+wrapt==1.17.2
     # via
+    #   -r requirements-azure.in
     #   deprecated
     #   opentelemetry-instrumentation
     #   opentelemetry-instrumentation-dbapi
     #   opentelemetry-instrumentation-urllib3
 yarl==1.12.0
     # via aiohttp
-zipp==3.19.2
-    # via importlib-metadata
+zipp==3.23.0
+    # via
+    #   -r requirements-azure.in
+    #   importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools

requirements-cloudrun.in

@@ -1,3 +1,5 @@
 -c requirements.txt
-google-cloud-logging==3.10.0
-google-cloud-run==0.10.5
+google-cloud-logging==3.12.1 # Upgraded in VULN-620
+google-cloud-run==0.10.18 # Upgraded in VULN-620
+importlib-metadata==7.1.0 # Added VULN-620
+opentelemetry-api==1.25.0 # Added VULN-620

requirements-cloudrun.txt

@@ -16,6 +16,8 @@ charset-normalizer==3.3.2
     # via
     #   -c requirements.txt
     #   requests
+deprecated==1.2.18
+    # via opentelemetry-api
 google-api-core==2.19.1
     # via
     #   -c requirements.txt
@@ -33,15 +35,15 @@ google-auth==2.30.0
     #   google-cloud-run
 google-cloud-appengine-logging==1.4.5
     # via google-cloud-logging
-google-cloud-audit-log==0.3.0
+google-cloud-audit-log==0.3.2
     # via google-cloud-logging
 google-cloud-core==2.4.1
     # via
     #   -c requirements.txt
     #   google-cloud-logging
-google-cloud-logging==3.10.0
+google-cloud-logging==3.12.1
     # via -r requirements-cloudrun.in
-google-cloud-run==0.10.5
+google-cloud-run==0.10.18
     # via -r requirements-cloudrun.in
 googleapis-common-protos==1.63.2
     # via
@@ -50,7 +52,7 @@ googleapis-common-protos==1.63.2
     #   google-cloud-audit-log
     #   grpc-google-iam-v1
     #   grpcio-status
-grpc-google-iam-v1==0.13.1
+grpc-google-iam-v1==0.14.2
     # via
     #   google-cloud-logging
     #   google-cloud-run
@@ -66,14 +68,22 @@ idna==3.7
     # via
     #   -c requirements.txt
     #   requests
+importlib-metadata==7.1.0
+    # via
+    #   -r requirements-cloudrun.in
+    #   opentelemetry-api
+opentelemetry-api==1.25.0
+    # via
+    #   -r requirements-cloudrun.in
+    #   google-cloud-logging
 proto-plus==1.24.0
     # via
     #   -c requirements.txt
     #   google-api-core
     #   google-cloud-appengine-logging
     #   google-cloud-logging
     #   google-cloud-run
-protobuf==4.25.3
+protobuf==5.29.5
     # via
     #   -c requirements.txt
     #   google-api-core
@@ -106,3 +116,7 @@ urllib3==2.4.0
     # via
     #   -c requirements.txt
     #   requests
+wrapt==1.17.2
+    # via deprecated
+zipp==3.23.0
+    # via importlib-metadata

requirements.in

@@ -10,7 +10,7 @@ dataclasses-json==0.6.0
 duckdb==1.1.0
 flask==2.3.3
 flask-compress==1.14
-google-api-python-client==2.98.0
+google-api-python-client==2.176.0  # Upgraded in VULN-620
 google-cloud-storage==2.10.0
 gunicorn==22.0.0
 hdbcli==2.18.27
@@ -21,7 +21,7 @@ msal==1.31.0
 numpy<2.0.0  # prevent "numpy.dtype size changed" errors: https://github.com/numpy/numpy/issues/26710
 oracledb>=2.4.1
 presto-python-client==0.8.3
-protobuf<5.0.0dev  # from google-cloud-logging in requirements-cloudrun
+protobuf==5.29.5  # from google-cloud-logging in requirements-cloudrun - Upgraded in VULN-620
 psycopg2-binary==2.9.9
 pyarrow==17.0.0  # CVE-2024-52338
 pycryptodome>=3.21.0

requirements.txt

@@ -100,7 +100,7 @@ google-api-core==2.19.1
     #   google-api-python-client
     #   google-cloud-core
     #   google-cloud-storage
-google-api-python-client==2.98.0
+google-api-python-client==2.176.0
     # via -r requirements.in
 google-auth==2.30.0
     # via
@@ -212,7 +212,7 @@ presto-python-client==0.8.3
     # via -r requirements.in
 proto-plus==1.24.0
     # via google-api-core
-protobuf==4.25.3
+protobuf==5.29.5
     # via
     #   -r requirements.in
     #   google-api-core