Skip to content

Conversation

@Kaniska244
Copy link
Contributor

@Kaniska244 Kaniska244 commented Oct 31, 2025

Ref: https://github.com/devcontainers/internal/issues/184

Devcontainer Image:

  • universal

Description of changes:

  • Updates multiple pinned toolings of Java, javascript-node, dotnet, php and ruby in universal image.
  • Also removed the machine learning internal packages to save space. Therefore following python machine learning specific libraries won't be shipped with the universal image next release onwards. Users are requested to use conda instead which is shipped with the image, to install the required libraries.
    1. numpy
    2. pandas
    3. scipy
    4. matplotlib
    5. seaborn
    6. scikit-learn
    7. torch
    8. plotly
  • Further removed the installation of npm 9.8.1 which was manually installed in past to override the then available vulnerable npm version, GHSA-c2qf-rxjj-qqgw. This is not needed anymore as we have npm 10 and 11 versions available with node 22 and 24 respectively.
  • Changes in the setup-user build script to avoid applying blanket chown command in /opt/ and home directory as Docker uses a copy-on-write filesystem. When the file metadata is changed(like ownership with chown), docker doesn't just update the metadata - it creates a complete copy of the file in the new layer, instead apply the command on specific directories as deemed necessary to allow Oryx to install different versions of dotnet and php.

Changelog:

  • Multiple pinned toolings of java, javascript-node, dotnet, php and ruby in universal image.
  • Excluded internal features such as machine-learning-packages, patch-python from the build process.
  • Removed manual installation of npm 9.8.1 from setup-user build script.
  • Apply targeted specific permission on directories as deemed necessary to allow Oryx to install different versions of dotnet and php
  • Version bump.
  • Small change in test script

Checklist:

  • All checks are passed.

@Kaniska244 Kaniska244 marked this pull request as ready for review November 5, 2025 09:16
@Kaniska244 Kaniska244 requested a review from a team as a code owner November 5, 2025 09:16
Copilot AI review requested due to automatic review settings November 5, 2025 09:16
@Kaniska244 Kaniska244 changed the title [universal] - Update pinned toolings [universal] - Update pinned toolings and removal of python libraries Nov 5, 2025
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR bumps the universal image to version 5.0.0, introducing breaking changes to default language versions and removing the machine-learning-packages feature.

  • Major version bump from 4.1.1 to 5.0.0 in manifest.json
  • Updates default versions for Node.js (22→24), .NET (8.0→10.0), Java (21→25), PHP (8.4.2→8.4.8), and Ruby (3.4.1→3.4.7)
  • Removes machine-learning-packages feature and related Python package tests

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File Description
src/universal/manifest.json Bumps version to 5.0.0 and adds trailing space to annotation
src/universal/.devcontainer/devcontainer.json Updates language versions, removes machine-learning-packages and patch-python features
src/universal/.devcontainer/local-features/setup-user/install.sh Removes temporary npm security fix workaround
src/universal/test-project/test.sh Updates Node version test from 22 to 24, removes ML package tests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant