#706 Fix shell injection of version-constrained pip package specs in dockerfile Pull request opened by pingsutw Package version constraints containing '<' or '>' (e.g. apache-airflow<=3.0.0) were passed unquoted into the Dockerfile RUN shell command, causing the shell to interpret '<' as an input redirection operator and fail with 'cannot open =3.0.0'. Use shlex.quote() on each package spec so metacharacters are safely single-quoted. flyteorg/flyte-sdk