fix(security): refresh CI and gateway image dependencies (#1432)

Refresh the CI image tool pins so Go-built tools are rebuilt with patched Go releases and move the sandbox Python runtime to 3.14.5.

Rebase the gateway runtime to a pinned distroless Debian 13 image with glibc 2.41-12+deb13u3 while preserving the existing UID/GID 1000 runtime identity for upgrade compatibility. Update rustls-webpki to 0.103.13 and clarify Linux k3d guidance now that k3d is not installed through mise on Linux.

Signed-off-by: John Myers <9696606+johntmyers@users.noreply.github.com>

Author: johntmyers

.gitignore

@@ -196,6 +196,9 @@ artifacts/
 # Local mise settings
 mise.local.toml
 
+# Local Codex app state
+.codex/
+
 # Ignore plans for now
 architecture/plans
 

Cargo.lock

@@ -60,7 +60,7 @@ The sandbox container includes the following tools by default:
 | Category   | Tools                                                    |
 | ---------- | -------------------------------------------------------- |
 | Agent      | `claude`, `opencode`, `codex`, `copilot`                 |
-| Language   | `python` (3.13), `node` (22)                             |
+| Language   | `python` (3.14), `node` (22)                             |
 | Developer  | `gh`, `git`, `vim`, `nano`                               |
 | Networking | `ping`, `dig`, `nslookup`, `nc`, `traceroute`, `netstat` |
 

README.md

@@ -40,8 +40,8 @@ the staging directory before running Buildx.
 
 Runtime layout:
 
-- **Gateway**: `nvcr.io/nvidia/distroless/cc` base, GNU-linked binary at
-  `/usr/local/bin/openshell-gateway`, runs as UID/GID `65532:65532`.
+- **Gateway**: `gcr.io/distroless/cc-debian13:nonroot` base, GNU-linked binary at
+  `/usr/local/bin/openshell-gateway`, runs as UID/GID `1000:1000`.
 - **Supervisor**: `scratch` base, static musl binary at `/openshell-sandbox`.
   Static linkage is required because the image is mounted/extracted into
   sandbox environments (Docker extraction, Podman image volumes, Kubernetes

architecture/build.md

@@ -8,8 +8,8 @@
 
 FROM nvcr.io/nvidia/base/ubuntu:noble-20251013
 
-ARG DOCKER_VERSION=29.4.1
-ARG BUILDX_VERSION=v0.33.0
+ARG DOCKER_VERSION=29.5.1
+ARG BUILDX_VERSION=v0.34.0
 ARG NPM_VERSION=11.13.0
 ARG TARGETARCH
 
@@ -57,7 +57,7 @@ RUN case "$TARGETARCH" in \
     && chmod +x /usr/local/lib/docker/cli-plugins/docker-buildx
 
 # Install GitHub CLI used by install.sh and CI jobs
-ARG GH_VERSION=2.91.0
+ARG GH_VERSION=2.92.0
 RUN case "$TARGETARCH" in \
       amd64) gh_arch=amd64 ;; \
       arm64) gh_arch=arm64 ;; \

deploy/docker/Dockerfile.ci

@@ -14,11 +14,12 @@
 # an artifact, which is downloaded into the same staging directory before the
 # image build job runs.
 #
-# The runtime is `nvcr.io/nvidia/distroless/cc:4.0.0`, which provides glibc and
-# the dynamic loader needed by the GNU-linked gateway binary while keeping the
-# attack surface small.
+# The runtime is distroless Debian 13, which provides glibc and the dynamic
+# loader needed by the GNU-linked gateway binary while keeping the attack
+# surface small. The default digest currently carries Debian glibc
+# 2.41-12+deb13u3.
 
-ARG GATEWAY_BASE_IMAGE=nvcr.io/nvidia/distroless/cc:v4.0.4
+ARG GATEWAY_BASE_IMAGE=gcr.io/distroless/cc-debian13:nonroot@sha256:e1fd250ce83d94603e9887ec991156a6c26905a6b0001039b7a43699018c0733
 
 FROM ${GATEWAY_BASE_IMAGE} AS gateway
 
@@ -28,7 +29,7 @@ WORKDIR /app
 
 COPY deploy/docker/.build/prebuilt-binaries/${TARGETARCH}/openshell-gateway /usr/local/bin/openshell-gateway
 
-USER nvs:nvs
+USER 1000:1000
 EXPOSE 8080
 
 ENTRYPOINT ["/usr/local/bin/openshell-gateway"]

deploy/docker/Dockerfile.gateway

@@ -129,7 +129,14 @@ if [ -n "${OPENSHELL_E2E_KUBE_CONTEXT:-}" ]; then
     exit 2
   fi
 else
-  require_cmd k3d
+  if ! command -v k3d >/dev/null 2>&1; then
+    if [ "$(uname -s)" = "Linux" ]; then
+      echo "ERROR: k3d is not installed by mise on Linux in this repo." >&2
+      echo "Set OPENSHELL_E2E_KUBE_CONTEXT to a kind/existing cluster, or install k3d explicitly." >&2
+      exit 2
+    fi
+    require_cmd k3d
+  fi
   CLUSTER_NAME="oshe2e-$$-$(date +%s | tail -c 8)"
   echo "Creating ephemeral k3d cluster ${CLUSTER_NAME}..."
   HELM_K3S_CLUSTER_NAME="${CLUSTER_NAME}" \

e2e/with-kube-gateway.sh

@@ -19,16 +19,19 @@ lockfile = true
 lockfile_platforms = ["linux-x64", "linux-arm64", "macos-arm64"]
 
 [tools]
-python = "3.13.13"
+python = "3.14.5"
 rust = "1.95.0"
 node = "24.15.0"
-kubectl = "1.35.4"
+kubectl = "1.36.1"
 uv = "0.10.12"
 protoc = "29.6"
-helm = "4.1.4"
-skaffold = "2.19.0"
-k3d = "5.8.3"
-"github:anchore/syft" = { version = "1.43.0" }
+helm = "4.2.0"
+skaffold = "2.20.0"
+# Keep k3d out of Linux CI images until upstream ships a release rebuilt with
+# patched Go/container dependencies. Linux Kubernetes E2E uses kind or an
+# externally provided cluster context.
+k3d = { version = "5.8.3", os = ["macos"] }
+"github:anchore/syft" = { version = "1.44.0" }
 "github:EmbarkStudios/cargo-about" = { version = "0.8.4", version_prefix = "" }
 zig = "0.14.1"
 "cargo:cargo-zigbuild" = { version = "0.22.3", os = ["macos"] }

mise.lock

@@ -26,6 +26,7 @@ classifiers = [
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Programming Language :: Rust",
     "License :: OSI Approved :: Apache Software License",
     "Topic :: Security",