[universal] - Fix vulnerability issues GHSA-mf9w-mj56-hr94 and GHSA-p423-j2cm-9vmq

[Kaniska244]

GHSA ID	Vulnerability ID	Action	Package	Installed Version	Required Version	Language	Install Path	Image Digest
Python (Pip) Security Update for python-dotenv (GHSA-mf9w-mj56-hr94)	5011346	Y	python-dotenv	0.21.0	1.2.2	python	opt/conda/lib/python3.13/site-packages/python__dotenv-1.2.1.dist-info/METADATA and opt/conda/pkgs/python-dotenv-1.2.1-py313h06a4308__0/lib/python3.13/site-packages/python__dotenv-1.2.1.dist-info/METADATA	sha256:d4e0d5954535d633a354e99ff41cffc72f65839696e7be1373c00a2efd392269
Python (Pip) Security Update for cryptography (GHSA-p423-j2cm-9vmq)	5010634	Y	cryptography	46.0.5	46.0.7	python	opt/conda/pkgs/cryptography-45.0.7-py313h0a354b3__0/lib/python3.13/site-packages/cryptography-45.0.7.dist-info/METADATA cryptography 46.0.5 46.0.7 Python opt/conda/lib/python3.13/site-packages/cryptography-46.0.5.dist-info/METADATA cryptography 46.0.5 46.0.7 Python opt/conda/pkgs/cryptography-46.0.5 py313h04fe016__1/lib/python3.13/site-packages/cryptography-46.0.5.dist-info/METADATA	sha256:ebf14f951910c62ec544a6f636027b44a485c5e6a5aaeaf0f6d8ae0afee0d125

[Copilot]

Pull request overview

Updates the Universal image’s Conda patching and validation to address reported security advisories for cryptography (GHSA-p423-j2cm-9vmq) and python-dotenv (GHSA-mf9w-mj56-hr94), along with a patch version bump for the image.

Changes:

• Bump Universal image version from 6.0.4 to 6.0.5.
• Update Conda patching to install cryptography 46.0.7 and add patching for python-dotenv 1.2.2.
• Update the Universal test project’s Conda package version checks accordingly.

Show a summary per file

File	Description
src/universal/test-project/test.sh	Updates expected Conda package versions (and adds python-dotenv validation).
src/universal/manifest.json	Bumps Universal image patch version to 6.0.5.
src/universal/.devcontainer/local-features/patch-conda/install.sh	Updates Conda patching to target the fixed advisory versions.

Copilot's findings

• Files reviewed: 3/3 changed files
• Comments generated: 3

[Kaniska244]

The problem is in python-dotenv library version installed in the supporting python binary of conda feature, not in the actual python feature installed in the universal image and the library isn't available in conda channels therefore pip was used for the installation. However, once installed with pip, the conda list command perfectly shows the correct version of the python-dotenv library. So this change should not be needed.

[Kaniska244]

The problem is in python-dotenv library version installed in the supporting python binary of conda feature, not in the actual python feature installed in the universal image and the library isn't available in conda channels therefore pip was used with conda's supporting python binary path /opt/conda/bin/python3 for the installation. So no further change should be needed.