fix: bump colab base to 20260716 to remediate image-scanning CVEs

Bumps the Colab base image from release-colab-external-images_20260514-060047_RC00
to release-colab-external-images_20260716-060051_RC00, which clears 20 of the 32
P1 image-scanning CVEs blocking b/548519812.

The bump alone resolves:
- All GO_STDLIB findings. Every Go binary in the image is now built with
  go1.26.0 or newer (git-lfs, fzf, gcloud-crc32c, gh, wandb-core).
- go-billy 5.8.0 -> 5.9.0 (wandb-core), rsync .22.04.4 -> .22.04.6,
  litellm 1.82.4 -> 1.85.7, langsmith 0.7.34 -> 0.10.2, pyjwt 2.12.1 -> 2.13.0,
  gradio 5.50 -> 6.20.0, python-multipart 0.0.26 -> 0.0.32,
  gitpython 3.1.47 -> 3.1.51.

Also stops `apt-get install -y git-lfs`. The base image ships a working
git-lfs 3.7.1 built with go1.26.0, but Ubuntu's git-lfs 3.0.2 package was
overwriting it with a go1.18.1 build, which is what the GO_STDLIB scanners
were actually flagging. Without this the base bump would not have fixed those
findings.

Pins pillow>=12.2 (b/541575345) and urllib3>=2.7 (b/541071828); the new base
still ships pillow 11.3 and urllib3 2.5. Both resolve cleanly with no conflicts.

torchcodec is bumped 0.10.0 -> 0.11.0 because the new base ships torch 2.11,
and torchcodec must stay compatible with the torch version.

Remaining open, all base/upstream-owned with no clean fix from this Dockerfile:
npm minimatch/tar (bundled in node v20.19.0), netty 4.1.118.Final, zookeeper
3.9.3 and jackson-core 2.12.7 shaded in hadoop-client-runtime (pyspark 4.0.3
jars), and jupyterlab 3.6.8 (capped by our jupyter-lsp==1.5.1 pin, b/276358430).

Both CPU and GPU images build clean with --no-cache. Test suite not yet run.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: KeijiBranshi

Dockerfile.tmpl

@@ -1,7 +1,7 @@
 {{ if eq .Accelerator "gpu" }}
-FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260514-060047_RC00
+FROM us-docker.pkg.dev/colab-images/public/runtime:release-colab-external-images_20260716-060051_RC00
 {{ else }}
-FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260514-060047_RC00
+FROM us-docker.pkg.dev/colab-images/public/cpu-runtime:release-colab-external-images_20260716-060051_RC00
 {{ end}}
 
 ADD kaggle_requirements.txt /kaggle_requirements.txt
@@ -82,9 +82,12 @@ RUN mkdir -p /usr/share/nltk_data && \
     twitter_samples udhr2 udhr unicode_samples universal_tagset universal_treebanks_v20 \
     vader_lexicon verbnet webtext word2vec_sample wordnet wordnet_ic words ycoe
 
-RUN apt-get install -y git-lfs && \
-    # vtk dependencies
-    apt-get install -y libgl1-mesa-glx && \
+# b/541577154 and related: don't `apt-get install git-lfs` here. The base image
+# already ships git-lfs 3.7.1 built with a current Go toolchain, and Ubuntu's
+# git-lfs 3.0.2 package overwrites it with a go1.18.1 build that trips the
+# GO_STDLIB image scanners.
+# vtk dependencies
+RUN apt-get install -y libgl1-mesa-glx && \
     # xvfbwrapper dependencies
     apt-get install -y xvfb && \
     /tmp/clean-layer.sh

kaggle_requirements.txt

@@ -100,6 +100,9 @@ papermill
 path
 path.py
 pdf2image
+# b/541575345: CVE-2026-40192. The Colab base image ships pillow 11.3; pin up to
+# a patched release. Remove once the base image ships >=12.2 itself.
+pillow>=12.2
 plotly-express
 pudb
 pyLDAvis
@@ -127,11 +130,14 @@ git+https://github.com/facebookresearch/segment-anything.git
 squarify
 tensorflow-io
 # Must be compatible with torch version: https://github.com/meta-pytorch/torchcodec?tab=readme-ov-file#installing-torchcodec
-torchcodec==0.10.0
+torchcodec==0.11.0
 torchinfo
 torchmetrics
 torchtune
 transformers>=5.0.0
+# b/541071828: CVE-2026-44431. The Colab base image ships urllib3 2.5; pin up to
+# a patched release. Remove once the base image ships >=2.7 itself.
+urllib3>=2.7
 vtk
 wavio
 xvfbwrapper