diff --git a/plugins/bufbuild/py/v0.6.0/.dockerignore b/plugins/bufbuild/py/v0.6.0/.dockerignore
new file mode 100644
index 000000000..c8a679bc6
--- /dev/null
+++ b/plugins/bufbuild/py/v0.6.0/.dockerignore
@@ -0,0 +1,3 @@
+*
+!Dockerfile
+!requirements.txt
diff --git a/plugins/bufbuild/py/v0.6.0/Dockerfile b/plugins/bufbuild/py/v0.6.0/Dockerfile
new file mode 100644
index 000000000..7c86a8458
--- /dev/null
+++ b/plugins/bufbuild/py/v0.6.0/Dockerfile
@@ -0,0 +1,18 @@
+# syntax=docker/dockerfile:1.26
+FROM python:3.13.15-trixie@sha256:82c46c08c991d3d3ff10476ac5e386c2c28f27bbd3985a02c5e39fe99ab272eb AS build
+WORKDIR /app
+RUN python -mvenv /app
+ADD /requirements.txt requirements.txt
+RUN . ./bin/activate \
+ && pip install --no-cache-dir -r requirements.txt \
+ && pip uninstall --yes pip setuptools \
+ && rm -f requirements.txt bin/activate.fish bin/activate.csh bin/Activate.ps1 \
+ && ln -sf /usr/bin/python /app/bin/python
+
+FROM gcr.io/distroless/python3-debian13:latest@sha256:e866e2f9fbaa19f63e579cf2f61b7f76cd8a74c43a62a0af95d48678d9878436 AS base
+
+FROM scratch
+COPY --link --from=base / /
+COPY --link --from=build --chmod=0755 /app /app
+USER nobody
+CMD [ "/app/bin/protoc-gen-py" ]
diff --git a/plugins/bufbuild/py/v0.6.0/buf.plugin.yaml b/plugins/bufbuild/py/v0.6.0/buf.plugin.yaml
new file mode 100644
index 000000000..242f164e4
--- /dev/null
+++ b/plugins/bufbuild/py/v0.6.0/buf.plugin.yaml
@@ -0,0 +1,21 @@
+version: v1
+name: buf.build/bufbuild/py
+plugin_version: v0.6.0
+source_url: https://github.com/bufbuild/protobuf-py
+integration_guide_url: https://protobufpy.com/getting-started/quickstart/
+description: Generates idiomatic Python code from Protocol Buffers definitions using protobuf-py.
+spdx_license_id: Apache-2.0
+license_url: https://github.com/bufbuild/protobuf-py/blob/v0.6.0/LICENSE
+output_languages:
+- python
+registry:
+  python:
+    package_type: "runtime"
+    requires_python: ">=3.10"
+    deps:
+      # https://pypi.org/project/protobuf-py/
+      - "protobuf-py>=0.6.0"
+  opts:
+    # Produce PEP 420 namespace packages so the py, grpc-py, and dependency
+    # SDKs for a module can share the same top-level package.
+    - init_files=false
diff --git a/plugins/bufbuild/py/v0.6.0/requirements.txt b/plugins/bufbuild/py/v0.6.0/requirements.txt
new file mode 100644
index 000000000..390f1551f
--- /dev/null
+++ b/plugins/bufbuild/py/v0.6.0/requirements.txt
@@ -0,0 +1,2 @@
+protoc-gen-py==0.6.0
+protobuf-py==0.6.0
diff --git a/plugins/community/sudorandom-connect-openapi/v0.28.0/.dockerignore b/plugins/community/sudorandom-connect-openapi/v0.28.0/.dockerignore
new file mode 100644
index 000000000..5d0f124ff
--- /dev/null
+++ b/plugins/community/sudorandom-connect-openapi/v0.28.0/.dockerignore
@@ -0,0 +1,2 @@
+*
+!Dockerfile
diff --git a/plugins/community/sudorandom-connect-openapi/v0.28.0/Dockerfile b/plugins/community/sudorandom-connect-openapi/v0.28.0/Dockerfile
new file mode 100644
index 000000000..d1b75b392
--- /dev/null
+++ b/plugins/community/sudorandom-connect-openapi/v0.28.0/Dockerfile
@@ -0,0 +1,15 @@
+# syntax=docker/dockerfile:1.26
+FROM --platform=$BUILDPLATFORM golang:1.27.1-trixie@sha256:433790e515d27dc6003e847e644cc0af956985cf315c1c58a3b73ee2dd305183 AS build
+
+ARG TARGETOS TARGETARCH
+ENV CGO_ENABLED=0 GOOS=$TARGETOS GOARCH=$TARGETARCH
+
+RUN --mount=type=cache,target=/go/pkg/mod \
+    go install -ldflags "-s -w" -tags remote_plugin -trimpath github.com/sudorandom/protoc-gen-connect-openapi@v0.28.0 \
+ && mv /go/bin/${GOOS}_${GOARCH}/protoc-gen-connect-openapi /go/bin/protoc-gen-connect-openapi || true
+
+FROM scratch
+COPY --from=build --link /etc/passwd /etc/passwd
+COPY --from=build --link --chown=root:root /go/bin/protoc-gen-connect-openapi .
+USER nobody
+ENTRYPOINT [ "/protoc-gen-connect-openapi" ]
diff --git a/plugins/community/sudorandom-connect-openapi/v0.28.0/buf.plugin.yaml b/plugins/community/sudorandom-connect-openapi/v0.28.0/buf.plugin.yaml
new file mode 100644
index 000000000..282c43d0b
--- /dev/null
+++ b/plugins/community/sudorandom-connect-openapi/v0.28.0/buf.plugin.yaml
@@ -0,0 +1,7 @@
+version: v1
+name: buf.build/community/sudorandom-connect-openapi
+plugin_version: v0.28.0
+source_url: https://github.com/sudorandom/protoc-gen-connect-openapi
+description: Plugin for generating OpenAPIv3 from Protobufs matching the Connect RPC interface.
+spdx_license_id: MIT
+license_url: https://github.com/sudorandom/protoc-gen-connect-openapi/blob/v0.28.0/LICENSE
diff --git a/tests/testdata/buf.build/bufbuild/py/v0.6.0/eliza/plugin.sum b/tests/testdata/buf.build/bufbuild/py/v0.6.0/eliza/plugin.sum
new file mode 100644
index 000000000..af5951c54
--- /dev/null
+++ b/tests/testdata/buf.build/bufbuild/py/v0.6.0/eliza/plugin.sum
@@ -0,0 +1 @@
+h1:+z43tE9Eiy6oBjXf96HRFnO4cvdlzGx4A5WLXQoZpwI=
diff --git a/tests/testdata/buf.build/bufbuild/py/v0.6.0/petapis/plugin.sum b/tests/testdata/buf.build/bufbuild/py/v0.6.0/petapis/plugin.sum
new file mode 100644
index 000000000..ac4922608
--- /dev/null
+++ b/tests/testdata/buf.build/bufbuild/py/v0.6.0/petapis/plugin.sum
@@ -0,0 +1 @@
+h1:jdlGtvneNPT1uvaB/EEKeGgif/zbEiO3D6IQ49uEsv4=
diff --git a/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/eliza/plugin.sum b/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/eliza/plugin.sum
new file mode 100644
index 000000000..9548c6f10
--- /dev/null
+++ b/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/eliza/plugin.sum
@@ -0,0 +1 @@
+h1:oQTFzs5dGIFVnoJTqikV0/BapjAFUoE07xkUIBWPzSU=
diff --git a/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/petapis/plugin.sum b/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/petapis/plugin.sum
new file mode 100644
index 000000000..29bd2de76
--- /dev/null
+++ b/tests/testdata/buf.build/community/sudorandom-connect-openapi/v0.28.0/petapis/plugin.sum
@@ -0,0 +1 @@
+h1:ZH9B/SdkQTUdBT6XzJ6epya8FEP7YzfpkwsMMBXIIA8=