fix: install doc uploader and releasetool with hashes (#227)

Hashes ensure we're always running a known version.
Installing them in the docker image means the publish and release scripts don't need to install them with a pip command.

Author: SurferJeffAtGoogle

node/12-user/Dockerfile

@@ -64,6 +64,10 @@ RUN pyenv install 3.7.4 && \
     pyenv global 3.7.4 && \
     python3 -m pip install --upgrade pip setuptools
 
+# Install gcp-uploader and gcp-releasetool and their dependencies.
+COPY requirements.txt requirements.txt
+RUN python3 -m pip install --require-hashes -r requirements.txt
+
 # Setup Cloud SDK
 WORKDIR /home/node
 ENV CLOUD_SDK_VERSION=261.0.0 \

node/12-user/requirements.txt

@@ -64,6 +64,10 @@ RUN pyenv install 3.7.4 && \
     pyenv global 3.7.4 && \
     python3 -m pip install --upgrade pip setuptools
 
+# Install gcp-uploader and gcp-releasetool and their dependencies.
+COPY requirements.txt requirements.txt
+RUN python3 -m pip install --require-hashes -r requirements.txt
+
 # Setup Cloud SDK
 WORKDIR /home/node
 ENV CLOUD_SDK_VERSION=303.0.0 \

node/14-user/Dockerfile

@@ -60,10 +60,14 @@ RUN echo 'export PATH="/home/node/.pyenv/bin:$PATH"' >> ~/.profile && \
 ENV PATH="/home/node/.pyenv/bin:/home/node/.pyenv/shims:${PATH}"
 
 # Install python
-RUN pyenv install 3.7.1 && \
-    pyenv global 3.7.1 && \
+RUN pyenv install 3.7.4 && \
+    pyenv global 3.7.4 && \
     python3 -m pip install --upgrade pip setuptools
 
+# Install gcp-uploader and gcp-releasetool and their dependencies.
+COPY requirements.txt requirements.txt
+RUN python3 -m pip install --require-hashes -r requirements.txt
+
 # Setup Cloud SDK
 WORKDIR /home/node
 ENV CLOUD_SDK_VERSION=261.0.0 \

node/14-user/requirements.txt

@@ -0,0 +1,4 @@
+gcp-docuploader
+gcp-releasetool
+importlib-metadata
+typing-extensions