Security patch 2025.02 for ai-studio-dev (#3868)

* Security patch 2025.02 * Remove pip install from Docker file * Templatize azure-ai-ml and azureml-mlflow
Azure · Feb 25, 2025 · aef604e · aef604e
1 parent 8d9a7c6
commit aef604e
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 8 deletions.
diff --git a/assets/aistudio/environments/ai_studio_dev/context/Dockerfile b/assets/aistudio/environments/ai_studio_dev/context/Dockerfile
@@ -9,11 +9,6 @@ RUN apt update && apt upgrade -y && apt install -y fuse
 COPY requirements.txt .
 RUN pip install -r requirements.txt
 
-# inference server dependencies, it has to be installed after the requirements.txt
-RUN pip install azureml-inference-server-http
-# Temporary fix version for security patch
-RUN pip install -U setuptools>=70.0.0
-
 # Adding this install under root's path for the custom AI Studio container solution
 ENV PATH="/home/vscode/.dotnet/tools:${PATH}"
 

diff --git a/assets/aistudio/environments/ai_studio_dev/context/requirements.txt b/assets/aistudio/environments/ai_studio_dev/context/requirements.txt
@@ -1,8 +1,8 @@
 # Install Python SDK
-azure-ai-ml
-openai>1.0
+azure-ai-ml=={{latest-pypi-version}}
+openai
 # hardcoded the version of azureml-mlflow here for faster Docker image building speed
-azureml-mlflow==1.57.0
+azureml-mlflow=={{latest-pypi-version}}
 # copilot dependencies
 keyrings.alt
 ipykernel
@@ -11,3 +11,6 @@ langchain-openai
 semantic-kernel
 pytest
 keyring
+# dev dependencies
+setuptools>70.0.0
+azureml-inference-server-http