-
-
Notifications
You must be signed in to change notification settings - Fork 10
Bump Docker and python deps #4097
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Bumps the docker-deps group with 3 updates in the / directory: python, node and nginx. Bumps the docker-deps group with 2 updates in the /Backend directory: dotnet/sdk and dotnet/aspnet. Bumps the docker-deps group with 1 update in the /database directory: mongo. Bumps the docker-deps group with 1 update in the /deploy directory: python. Updates `python` from `235ad56` to `28cf028` Updates `node` from `4de72fb` to `7378f5a` Updates `nginx` from 1.29.3 to 1.29.4 Updates `dotnet/sdk` from 8.0.415-jammy to 8.0.416-jammy Updates `dotnet/aspnet` from 8.0.21-jammy to 8.0.22-jammy Updates `mongo` from 7.0.25-jammy to 7.0.28-jammy Updates `python` from `235ad56` to `28cf028` --- updated-dependencies: - dependency-name: python dependency-version: 3.12.12-slim-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: node dependency-version: 22.21.1-bookworm-slim dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: nginx dependency-version: 1.29.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: dotnet/sdk dependency-version: 8.0.416-jammy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: dotnet/aspnet dependency-version: 8.0.22-jammy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: mongo dependency-version: 7.0.28-jammy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps - dependency-name: python dependency-version: 3.12.12-slim-bookworm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker-deps ... Signed-off-by: dependabot[bot] <support@github.com>
📝 WalkthroughWalkthroughThis PR updates Docker base images across four Dockerfiles (Backend, main application, database, and deploy) and refreshes Python package versions in multiple requirements files, including a new regex dependency addition in dev-requirements.in. Changes
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~22 minutes Suggested labels
Suggested reviewers
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
commit 840aa39612: |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #4097 +/- ##
==========================================
+ Coverage 74.57% 74.79% +0.21%
==========================================
Files 295 295
Lines 10938 10946 +8
Branches 1372 1372
==========================================
+ Hits 8157 8187 +30
+ Misses 2385 2363 -22
Partials 396 396
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
This comment was marked as resolved.
This comment was marked as resolved.
This comment was marked as resolved.
This comment was marked as resolved.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull request overview
This pull request updates Docker base images and Python dependencies across multiple environments (deployment, development, and maintenance). The changes are automated dependency updates generated by pip-compile and dependabot.
Changes:
- Updated Docker base images for Python, Node, nginx, MongoDB, and .NET SDK/runtime
- Bumped Python package versions across all requirements files
- Added regex package to dev-requirements for script usage
- Removed google-auth and related dependencies (pyasn1, pyasn1-modules, rsa) as they are no longer needed
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| maintenance/requirements.txt | Updated Python dependencies for maintenance scripts |
| dev-requirements.txt | Updated development dependencies and added regex package |
| dev-requirements.in | Added regex dependency for script usage |
| deploy/requirements.txt | Updated deployment dependencies including Ansible and Kubernetes |
| deploy/Dockerfile | Updated Python base image SHA |
| database/Dockerfile | Updated MongoDB base image from 7.0.25 to 7.0.28 |
| Dockerfile | Updated Python, Node, and nginx base image SHAs |
| Backend/Dockerfile | Updated .NET SDK and ASP.NET runtime images |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
jasonleenaylor
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@jasonleenaylor reviewed 8 files and all commit messages, and made 1 comment.
Reviewable status:complete! all files reviewed, all discussions resolved (waiting on @imnasnainaec).
Resolves many security issues with
urllib3This change is
Summary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings.