feat(marketing-agent): fix dependencies & Dockerfile

Update hatchling, setuptools, wheel, and streamlit package versions in requirements.in to remediate Renovate security vulnerabilities.

Author: layolin@google.com

Change-Id: Ic8363be48c8a6ad12dcadc928b8e9b8e140413c3
GitOrigin-RevId: 58c3035d1b4f114814c2175a970e5072e3b35727

Author: layolin

projects/ai/gen-media/marketing-agent/ge_marketing_agent/lj_marketing_agent/requirements.in

@@ -1,9 +1,9 @@
-google-genai==1.75.0
-google-cloud-aiplatform==1.162.0
+google-genai==2.16.0
+google-cloud-aiplatform==1.163.0
 google-cloud-bigquery==3.42.2
 pydantic==2.13.4
-fastapi==0.140.7
-uvicorn==0.51.0
+fastapi==0.141.1
+uvicorn==0.52.0
 python-dotenv==1.2.2
 gitpython==3.1.57
 aiohttp==3.14.3

projects/ai/gen-media/marketing-agent/marketing_agent/Dockerfile

@@ -25,14 +25,12 @@ COPY streamlit_app.py .
 COPY logo.jpg .
 COPY .streamlit/ .streamlit/
 
-# hadolint ignore=DL3013
-RUN pip install --no-cache-dir hatchling setuptools wheel \
-    && pip install --no-cache-dir --no-build-isolation \
-        adk_common/ \
-        lj_marketing_agent/ \
-        streamlit \
-        google-ads==30.1.0 \
-        rapidfuzz==3.14.5
+# Copy hash-verified requirements manifest
+COPY requirements.txt .
+
+# Install dependencies securely with hash verification and install local project modules
+RUN pip install --no-cache-dir --require-hashes -r requirements.txt \
+    && pip install --no-cache-dir --no-build-isolation --no-deps ./adk_common ./lj_marketing_agent
 
 ENV PYTHONPATH=/app
 

projects/ai/gen-media/marketing-agent/marketing_agent/requirements.in

@@ -0,0 +1,7 @@
+hatchling==1.27.0
+setuptools==83.0.0
+wheel==0.46.2
+streamlit==1.54.0
+pillow==12.3.0
+google-ads==30.1.0
+rapidfuzz==3.14.5

projects/ai/gen-media/marketing-agent/marketing_agent/requirements.txt

@@ -6,10 +6,10 @@ authors = [{ name = "GenMedia Team", email = "team@example.com" }]
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-    "google-adk==1.30.0",
+    "google-adk==1.36.2",
     "python-dotenv==1.2.2",
-    "google-genai==1.75.0",
-    "google-cloud-aiplatform[adk,agent-engines]==1.162.0",
+    "google-genai==2.16.0",
+    "google-cloud-aiplatform[adk,agent-engines]==1.163.0",
     "pydantic==2.13.4",
     "absl-py==2.5.0",
     "requests==2.34.2",

projects/ai/gen-media/marketing-agent/marketing_agent/streamlit_demo/adk_common/pyproject.toml

@@ -1,9 +1,9 @@
-google-genai==1.75.0
+google-genai==2.16.0
 google-cloud-storage==3.13.0
-google-ads==30.1.0
+google-ads==31.2.0
 pydantic==2.13.4
-fastapi==0.140.7
-uvicorn==0.51.0
+fastapi==0.141.1
+uvicorn==0.52.0
 python-dotenv==1.2.2
 gitpython==3.1.57
 aiohttp==3.14.3

projects/ai/gen-media/marketing-agent/marketing_agent/streamlit_demo/ads_agent/requirements.in

@@ -6,16 +6,16 @@ authors = [{ name = "Layolin Jesudhass" }]
 readme = "README.md"
 requires-python = ">=3.11"
 dependencies = [
-    "google-adk==1.30.0",
-    "google-cloud-aiplatform[adk,agent-engines]==1.162.0",
+    "google-adk==1.36.2",
+    "google-cloud-aiplatform[adk,agent-engines]==1.163.0",
     "google-cloud-bigquery==3.42.2",
-    "google-genai==1.75.0",
+    "google-genai==2.16.0",
     "pydantic==2.13.4",
     "pydantic-settings==2.14.2",
     "absl-py==2.5.0",
     "python-dotenv==1.2.2",
-    "pandas==2.3.3",
-    "toolbox-core==0.6.0",
+    "pandas==3.0.5",
+    "toolbox-core==1.3.0",
     "google-cloud-texttospeech==2.37.0",
     "soundfile==0.14.0",
     "aiohttp==3.14.3",
@@ -25,7 +25,7 @@ dependencies = [
     "httpx==0.28.1",
     "google-cloud-storage==3.13.0",
     "tenacity==9.1.4",
-    "google-ads==30.1.0",
+    "google-ads==31.2.0",
     "rapidfuzz==3.14.5",
     "gitpython==3.1.57",
 ]