[rhoai-3.3] RHAIENG-4687: fix(cve): CVE-2026-28684 python-dotenv - #2696

• Namespace: rhoai-tenant
• PipelineRun: odh-workbench-jupyter-minimal-cuda-py312-on-pull-request-rkkjq

---

Task Statuses:

Status	Duration	Name
🟢 Succeeded	21 seconds	rhoai-init
🟢 Succeeded	4 seconds	init
🟢 Succeeded	39 seconds	clone-repository
🟢 Succeeded	13 seconds	prefetch-dependencies
🟢 Succeeded	16 minutes	build-images
🟢 Succeeded	19 minutes	build-images
🟢 Succeeded	21 seconds	build-image-index
🟢 Succeeded	5 seconds	apply-tags
🔴 Failed	6 seconds	build-source-image
🔴 Failed	6 seconds	clair-scan
🔴 Failed	6 seconds	clair-scan
🔴 Failed	7 seconds	clamav-scan
🔴 Failed	7 seconds	clamav-scan
🟢 Succeeded	6 seconds	coverity-availability-check
🔴 Failed	7 seconds	deprecated-base-image-check
🔴 Failed	7 seconds	fips-check
🔴 Failed	7 seconds	fips-check
🔴 Failed	7 seconds	push-dockerfile
🔴 Failed	7 seconds	rpms-signature-scan
🔴 Failed	7 seconds	sast-shell-check
🔴 Failed	7 seconds	sast-snyk-check
🔴 Failed	7 seconds	sast-unicode-check
🟢 Succeeded	9 seconds	show-sbom

---

Failure snippet:

task build-source-image has the status "TaskRunCancelled":

TaskRun "odh-workbenc18098a22b1b7bd6bd44aa6b486a53b49-build-source-image" was cancelled. TaskRun cancelled as the PipelineRun it belongs to has been cancelled.
Previous status: [Pending] pod status "PodReadyToStartContainers":"False"; message: ""