RHAIENG-722: chore(CVEs): bump TensorFlow to 2.20, TensorBoard to 2.20, Boto3 to 1.40.6, Kfp to 2.14 across those UBI9 Python 3.12 images that permit it (opendatahub-io#1875)

- relock `pylock.toml` on Python 3.12; bump `Kfp` to 2.14.1, `google-cloud-storage` to 3.3.0, `protobuf` to 6.31.1, add `click-option-group`

Author: jiridanek

codeserver/ubi9-python-3.12/pylock.toml

@@ -36,15 +36,15 @@ wheels = [{ url = "https://files.pythonhosted.org/packages/c0/45/aad9fd88cf999f1
 
 [[packages]]
 name = "boto3"
-version = "1.37.38"
-sdist = { url = "https://files.pythonhosted.org/packages/0d/b5/d1c2e8c484cea43891629bbab6ca90ce9ca932586750bc0e786c8f096ccf/boto3-1.37.38.tar.gz", upload-time = 2025-04-21T19:27:18Z, size = 111623, hashes = { sha256 = "88c02910933ab7777597d1ca7c62375f52822e0aa1a8e0c51b2598a547af42b2" } }
-wheels = [{ url = "https://files.pythonhosted.org/packages/d3/87/8189f22ee798177bc7b40afd13f046442c5f91b699e70a950b42ff447e80/boto3-1.37.38-py3-none-any.whl", upload-time = 2025-04-21T19:27:16Z, size = 139922, hashes = { sha256 = "b6d42803607148804dff82389757827a24ce9271f0583748853934c86310999f" } }]
+version = "1.40.30"
+sdist = { url = "https://files.pythonhosted.org/packages/77/a7/3fde131d2431d1801e3f16f1b428cf9b8c6677996716c5286a72eb43ecb7/boto3-1.40.30.tar.gz", upload-time = 2025-09-12T19:23:22Z, size = 111636, hashes = { sha256 = "e95db539c938710917f4cb4fc5915f71b27f2c836d949a1a95df7895d2e9ec8b" } }
+wheels = [{ url = "https://files.pythonhosted.org/packages/3f/43/f1865e3e2aa91c1aa54db90a82ed17b8c0dc60c354045adf1c2134e5cbd8/boto3-1.40.30-py3-none-any.whl", upload-time = 2025-09-12T19:23:20Z, size = 139343, hashes = { sha256 = "04e89abf61240857bf7dec160e22f097eec68c502509b2bb3c5010a22cb91052" } }]
 
 [[packages]]
 name = "botocore"
-version = "1.37.38"
-sdist = { url = "https://files.pythonhosted.org/packages/34/79/4e072e614339727f79afef704e5993b5b4d2667c1671c757cc4deb954744/botocore-1.37.38.tar.gz", upload-time = 2025-04-21T19:27:05Z, size = 13832365, hashes = { sha256 = "c3ea386177171f2259b284db6afc971c959ec103fa2115911c4368bea7cbbc5d" } }
-wheels = [{ url = "https://files.pythonhosted.org/packages/55/1b/93f3504afc7c523dcaa8a8147cfc75421983e30b08d9f93a533929589630/botocore-1.37.38-py3-none-any.whl", upload-time = 2025-04-21T19:27:00Z, size = 13499391, hashes = { sha256 = "23b4097780e156a4dcaadfc1ed156ce25cb95b6087d010c4bb7f7f5d9bc9d219" } }]
+version = "1.40.30"
+sdist = { url = "https://files.pythonhosted.org/packages/c5/be/086ff6f031c407540e8226b3a4921dd18a05688224324c2df60457f9bcc0/botocore-1.40.30.tar.gz", upload-time = 2025-09-12T19:23:12Z, size = 14349135, hashes = { sha256 = "8a74f77cfe5c519826d22f7613f89544cbb8491a1a49d965031bd997f89a8e3f" } }
+wheels = [{ url = "https://files.pythonhosted.org/packages/ad/a8/3644f482b7b319f3fda87d4583f7b073c0cdf4a6d1b58e5a92555fe3e2e3/botocore-1.40.30-py3-none-any.whl", upload-time = 2025-09-12T19:23:09Z, size = 14022003, hashes = { sha256 = "1d87874ad81234bec3e83f9de13618f67ccdfefd08d6b8babc041cd45007447e" } }]
 
 [[packages]]
 name = "cachetools"
@@ -2072,9 +2072,9 @@ wheels = [{ url = "https://files.pythonhosted.org/packages/64/8d/0133e4eb4beed9e
 
 [[packages]]
 name = "s3transfer"
-version = "0.11.5"
-sdist = { url = "https://files.pythonhosted.org/packages/c4/2b/5c9562795c2eb2b5f63536961754760c25bf0f34af93d36aa28dea2fb303/s3transfer-0.11.5.tar.gz", upload-time = 2025-04-17T19:23:19Z, size = 149107, hashes = { sha256 = "8c8aad92784779ab8688a61aefff3e28e9ebdce43142808eaa3f0b0f402f68b7" } }
-wheels = [{ url = "https://files.pythonhosted.org/packages/45/39/13402e323666d17850eca87e4cd6ecfcf9fd7809cac9efdcce10272fc29d/s3transfer-0.11.5-py3-none-any.whl", upload-time = 2025-04-17T19:23:17Z, size = 84782, hashes = { sha256 = "757af0f2ac150d3c75bc4177a32355c3862a98d20447b69a0161812992fe0bd4" } }]
+version = "0.14.0"
+sdist = { url = "https://files.pythonhosted.org/packages/62/74/8d69dcb7a9efe8baa2046891735e5dfe433ad558ae23d9e3c14c633d1d58/s3transfer-0.14.0.tar.gz", upload-time = 2025-09-09T19:23:31Z, size = 151547, hashes = { sha256 = "eff12264e7c8b4985074ccce27a3b38a485bb7f7422cc8046fee9be4983e4125" } }
+wheels = [{ url = "https://files.pythonhosted.org/packages/48/f0/ae7ca09223a81a1d890b2557186ea015f6e0502e9b8cb8e1813f1d8cfa4e/s3transfer-0.14.0-py3-none-any.whl", upload-time = 2025-09-09T19:23:30Z, size = 85712, hashes = { sha256 = "ea3b790c7077558ed1f02a3072fb3cb992bbbd253392f4b6e9e8976941c7d456" } }]
 
 [[packages]]
 name = "scikit-learn"

codeserver/ubi9-python-3.12/pyproject.toml

@@ -9,7 +9,7 @@ dependencies = [
     "setuptools~=78.1.1",
 
     # Datascience packages
-    "boto3~=1.37.8",
+    "boto3~=1.40.27",
     "kafka-python-ng~=2.2.3",
     "matplotlib~=3.10.1",
     "numpy~=2.2.6",

jupyter/datascience/ubi9-python-3.12/pylock.toml

@@ -5,9 +5,9 @@ requires-python = "==3.12.*"
 
 dependencies = [
     # Datascience and useful extensions
-    "boto3~=1.37.8",
+    "boto3~=1.40.27",
     "kafka-python-ng~=2.2.3",
-    "kfp~=2.12.1",
+    "kfp~=2.14.3",
     "matplotlib~=3.10.1",
     "numpy~=2.2.6",
     "pandas~=2.2.3",