From 64ccad8c6f682f9afb90f6ffab8758ce991085d7 Mon Sep 17 00:00:00 2001 From: Brian Yee Date: Mon, 7 Sep 2026 04:36:44 -0700 Subject: [PATCH] fix: pin Bento RAPIDS base image --- CHANGELOG.md | 2 ++ images/bento-tools/2.1.3/Dockerfile | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fcb64ec..5eb7ba4 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,6 +4,8 @@ ### Fixed +- Pinned the Bento Tools 2.1.3 base image to RAPIDS Singlecell 0.10.9 so its + legacy CUDA 12.6 dependency set is not broken by changes to the `latest` tag. - Updated the Bento Tools 2.1.3 image to cryptography 49.0.0 and its required cffi 2.0.0 dependency to remediate CVE-2026-69249 (GHSA-jwv3-5hgf-82ww). - Updated the ChipSeeker 1.32 image's Jupyter base and fixed the Bioconductor diff --git a/images/bento-tools/2.1.3/Dockerfile b/images/bento-tools/2.1.3/Dockerfile index 19e3c72..cf8b267 100644 --- a/images/bento-tools/2.1.3/Dockerfile +++ b/images/bento-tools/2.1.3/Dockerfile @@ -1,10 +1,10 @@ ################## BASE IMAGE ###################### -FROM ghcr.io/scverse/rapids_singlecell:latest +FROM ghcr.io/scverse/rapids_singlecell:v0.10.9@sha256:ad9b0e1828c1cb718bcbf966288bce3bf9ea63b768eef3f7d1873a19f76e55c8 ################## METADATA ###################### -LABEL base_image="ghcr.io/scverse/rapids_singlecell:latest" +LABEL base_image="ghcr.io/scverse/rapids_singlecell:v0.10.9" LABEL version="1" LABEL software="rapids-singlecell" LABEL software.version="0.10.9"