From 842897d373cc4734c6d4d40280cfcff81e35af65 Mon Sep 17 00:00:00 2001
From: Matt McCormick <matt@fideus.io>
Date: Thu, 12 Feb 2026 14:55:13 -0500
Subject: [PATCH] ENH: Bump manylinux x64 image to latest

Includes a patch for improved dockcross startup time.

Due to permission changes, we need to sudo package upgrades in the
image.
---
 scripts/dockcross-manylinux-build-wheels.sh       | 2 +-
 scripts/dockcross-manylinux-set-vars.sh           | 2 +-
 scripts/internal/manylinux-build-module-wheels.sh | 6 +++---
 scripts/internal/manylinux-build-wheels.sh        | 4 ++--
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/scripts/dockcross-manylinux-build-wheels.sh b/scripts/dockcross-manylinux-build-wheels.sh
index 0c2b422c..0619b301 100755
--- a/scripts/dockcross-manylinux-build-wheels.sh
+++ b/scripts/dockcross-manylinux-build-wheels.sh
@@ -25,7 +25,7 @@ oci_exe=$(ociExe)
 MANYLINUX_VERSION=${MANYLINUX_VERSION:=_2_28}
 
 if [[ ${MANYLINUX_VERSION} == _2_28 ]]; then
-  IMAGE_TAG=${IMAGE_TAG:=20250913-6ea98ba}
+  IMAGE_TAG=${IMAGE_TAG:=20260203-3dfb3ff}
 elif [[ ${MANYLINUX_VERSION} == 2014 ]]; then
   IMAGE_TAG=${IMAGE_TAG:=20240304-9e57d2b}
 else
diff --git a/scripts/dockcross-manylinux-set-vars.sh b/scripts/dockcross-manylinux-set-vars.sh
index 49fd449f..14081bca 100755
--- a/scripts/dockcross-manylinux-set-vars.sh
+++ b/scripts/dockcross-manylinux-set-vars.sh
@@ -39,7 +39,7 @@ TARGET_ARCH=${TARGET_ARCH:=x64}
 
 # Specialized manylinux image tag to use for building.
 if [[ ${MANYLINUX_VERSION} == _2_28 && ${TARGET_ARCH} == x64 ]]; then
-  IMAGE_TAG=${IMAGE_TAG:=20250913-6ea98ba}
+  IMAGE_TAG=${IMAGE_TAG:=20260203-3dfb3ff}
 elif [[ ${MANYLINUX_VERSION} == _2_28 && ${TARGET_ARCH} == aarch64 ]]; then
   IMAGE_TAG=${IMAGE_TAG:=2025.08.12-1}
 elif [[ ${MANYLINUX_VERSION} == 2014 ]]; then
diff --git a/scripts/internal/manylinux-build-module-wheels.sh b/scripts/internal/manylinux-build-module-wheels.sh
index a58a473a..b6237fd8 100755
--- a/scripts/internal/manylinux-build-module-wheels.sh
+++ b/scripts/internal/manylinux-build-module-wheels.sh
@@ -90,14 +90,14 @@ for PYBIN in "${PYBINARIES[@]}"; do
 
     if $use_skbuild_classic; then
       # So older remote modules with setup.py continue to work
-      ${Python3_EXECUTABLE} -m pip install --upgrade scikit-build
+      sudo ${Python3_EXECUTABLE} -m pip install --upgrade scikit-build
     fi
 
     if [[ -e /work/requirements-dev.txt ]]; then
-      ${PYBIN}/pip install --upgrade -r /work/requirements-dev.txt
+      sudo ${PYBIN}/pip install --upgrade -r /work/requirements-dev.txt
     fi
     if [[ -e /ITKPythonPackage/requirements-dev.txt ]]; then
-      ${PYBIN}/pip install --upgrade -r /ITKPythonPackage/requirements-dev.txt
+      sudo ${PYBIN}/pip install --upgrade -r /ITKPythonPackage/requirements-dev.txt
     fi
     version=$(basename $(dirname ${PYBIN}))
     # Remove "m" -- not present in Python 3.8 and later
diff --git a/scripts/internal/manylinux-build-wheels.sh b/scripts/internal/manylinux-build-wheels.sh
index cdbc6fb8..c85dda6d 100755
--- a/scripts/internal/manylinux-build-wheels.sh
+++ b/scripts/internal/manylinux-build-wheels.sh
@@ -62,7 +62,7 @@ for PYBIN in "${PYBINARIES[@]}"; do
     echo "Python3_INCLUDE_DIR:${Python3_INCLUDE_DIR}"
 
     # Install dependencies
-    ${PYBIN}/pip install --upgrade -r /work/requirements-dev.txt
+    sudo ${PYBIN}/pip install --upgrade -r /work/requirements-dev.txt
 
     build_type="Release"
     compile_flags="-O3 -DNDEBUG"
@@ -204,7 +204,7 @@ rm dist/itk_*-linux_*.whl
 # Install packages and test
 for PYBIN in "${PYBINARIES[@]}"; do
     ${PYBIN}/pip install --user numpy
-    ${PYBIN}/pip install --upgrade pip
+    sudo ${PYBIN}/pip install --upgrade pip
     ${PYBIN}/pip install itk --user --no-cache-dir --no-index -f /work/dist
     (cd $HOME && ${PYBIN}/python -c 'from itk import ITKCommon;')
     (cd $HOME && ${PYBIN}/python -c 'import itk; image = itk.Image[itk.UC, 2].New()')