chore: address vulnerability issues (#5)

* chore: update package versions for vulnerability

Signed-off-by: Takumi Yanagawa <yana@jp.ibm.com>

* fix: typo

Signed-off-by: Takumi Yanagawa <yana@jp.ibm.com>

* chore: make setuptools up to date

Signed-off-by: Takumi Yanagawa <yana@jp.ibm.com>

* fix: missing to mount requirements.txt

Signed-off-by: Takumi Yanagawa <yana@jp.ibm.com>

---------

Signed-off-by: Takumi Yanagawa <yana@jp.ibm.com>

Author: yana1205

docker/agent-harness/Dockerfile

@@ -1,12 +1,12 @@
-FROM python:3.11.10-slim
+FROM python:3.11-slim
 
 RUN apt update -y && apt install -y curl gnupg2
 RUN mkdir /etc/agent-benchmark
 COPY itbench_utilities /etc/agent-benchmark/itbench_utilities
 COPY pyproject.toml /etc/agent-benchmark/pyproject.toml
 COPY docker/agent-harness/entrypoint.sh /etc/entrypoint.sh
 RUN chmod +x /etc/entrypoint.sh
-RUN pip install --upgrade setuptools==70.0.0
+RUN pip install --upgrade setuptools
 RUN pip install -e /etc/agent-benchmark --no-cache-dir
 RUN ln -sf /bin/bash /bin/sh
 

docker/agent-harness/sre_agent_harness/Dockerfile

@@ -6,6 +6,7 @@ RUN apt update -y && apt install -y curl gnupg2 jq
 RUN mkdir /app/agent-benchmark
 COPY itbench_utilities /app/agent-benchmark/itbench_utilities
 COPY pyproject.toml /app/agent-benchmark/pyproject.toml
+RUN pip install --upgrade setuptools
 RUN pip install -e /app/agent-benchmark --no-cache-dir
 RUN ln -sf /bin/bash /bin/sh
 

docker/bench-runner/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11.10-slim
+FROM python:3.11-slim
 
 RUN apt update -y && apt install -y curl gnupg2 unzip
 RUN mkdir /etc/agent-benchmark
@@ -7,7 +7,7 @@ COPY pyproject.toml /etc/agent-benchmark/pyproject.toml
 COPY docker/bench-runner/entrypoint.sh /etc/entrypoint.sh
 COPY docker/bench-runner/config.yaml /etc/config.yaml
 RUN chmod +x /etc/entrypoint.sh
-RUN pip install --upgrade setuptools==70.0.0
+RUN pip install --upgrade setuptools
 RUN pip install -e /etc/agent-benchmark --no-cache-dir
 RUN ln -sf /bin/bash /bin/sh
 

docker/bench-runner/sre_bench/Dockerfile

@@ -1,12 +1,14 @@
-FROM python:3.11.10-slim
+FROM python:3.11-slim
 
 RUN apt update -y && apt install -y curl gnupg2 unzip
 RUN mkdir /etc/agent-benchmark
 COPY itbench_utilities /etc/agent-benchmark/itbench_utilities
+COPY docker /etc/agent-benchmark/docker
 COPY pyproject.toml /etc/agent-benchmark/pyproject.toml
+RUN pip install --upgrade setuptools
 RUN pip install -e /etc/agent-benchmark --no-cache-dir
-RUN pip install -r /etc/agent-benchmark/itbench_utilities/bench_runner/sre_bench/requirements.txt --no-cache-dir
-RUN ansible-galaxy install -r /etc/agent-benchmark/itbench_utilities/bench_runner/sre_bench/requirements.yaml
+RUN pip install -r /etc/agent-benchmark/docker/bench-runner/sre_bench/requirements.txt --no-cache-dir
+RUN ansible-galaxy install -r /etc/agent-benchmark/docker/bench-runner/sre_bench/requirements.yaml
 RUN ln -sf /bin/bash /bin/sh
 
 # TODO: consider how to handle deps dynamically

docker/bench-runner/sre_bench/requirements.txt

@@ -1,4 +1,4 @@
-ansible==10.6.0
+ansible==11.4.0
 boto==2.49.0
 boto3==1.35.62
 jsonschema==4.23.0

pyproject.toml

@@ -13,7 +13,7 @@ classifiers = [
 
 dependencies = [
   "fastapi==0.115.11",
-  "Jinja2==3.1.4",
+  "Jinja2==3.1.6",
   "pandas==2.2.3",
   "pydantic==2.9.1",
   "pydantic-settings==2.7.1",