[Yury Semikhatsky (yury-s)]

Summary

• Run apt-get upgrade right after apt-get update in the jammy, noble and resolute images, so that they get security fixes that the ubuntu base image does not have yet (apt CVE-2026-109518 today).

References #44055

[microsoft-playwright-automation]

🟡 Failures appear unrelated; prior occurrences not confirmed

Hi, I'm the Playwright bot. I checked the six failures in tests 1, run 43063966253.

Details

At head add103352, this PR changes only the three Dockerfiles. The failed VSCode Extension job runs directly on ubuntu-latest and does not build or use those images. No failure is explained by the diff.

Uncertain

• run-tests.spec.ts:1298 — should start webServer, in default, default-reuse and default-trace: the inner test reports failed instead of passed, but the log does not include its underlying error.
• run-tests.spec.ts:1329 — should start webServer with npx command, in the same three projects: all three fail with EADDRINUSE: address already in use :::42130. Both tests use the same port for a given worker, which points to a port conflict, not a Docker build failure.

I found no matching failures in the 20 recent completed main runs checked, or in the recent failed run of #44058. The test-history database refresh was unavailable because this run has no GITHUB_TOKEN. Without an occurrence outside this PR, I cannot confirm either test as a pre-existing flake. The first test also needs its inner error to establish whether the two failures share a cause.

The reported video test passed on retry and is not one of the six failures.

_{Checked the failures on Linux by the Playwright bot - agent run}

[github-actions]

Test results for "tests 1"

1 flaky

⚠️ [webkit-library] › library/trace-viewer.spec.ts:616 › TV-029 should show font preview `@webkit-playwright-x64-ubuntu24-64-core-node22`

23627 passed, 713 skipped

---

Merge workflow run.

[github-actions]

Test results for "MCP"

5229 passed, 637 skipped

---

Merge workflow run.