Skip to content

Conversation

@imnasnainaec
Copy link
Collaborator

@imnasnainaec imnasnainaec commented Jan 12, 2026

Resolves many security issues with urllib3

This change is Reviewable

Summary by CodeRabbit

  • Chores
    • Updated base container images to newer versions for Python, Node.js, Nginx, and MongoDB.
    • Refreshed multiple deployment and development dependencies with latest stable versions for improved compatibility and security.
    • Enhanced multi-stage build workflow with dependency restoration steps.

✏️ Tip: You can customize this high-level summary in your review settings.

dependabot bot and others added 2 commits January 8, 2026 17:32
Bumps the docker-deps group with 3 updates in the / directory: python, node and nginx.
Bumps the docker-deps group with 2 updates in the /Backend directory: dotnet/sdk and dotnet/aspnet.
Bumps the docker-deps group with 1 update in the /database directory: mongo.
Bumps the docker-deps group with 1 update in the /deploy directory: python.


Updates `python` from `235ad56` to `28cf028`

Updates `node` from `4de72fb` to `7378f5a`

Updates `nginx` from 1.29.3 to 1.29.4

Updates `dotnet/sdk` from 8.0.415-jammy to 8.0.416-jammy

Updates `dotnet/aspnet` from 8.0.21-jammy to 8.0.22-jammy

Updates `mongo` from 7.0.25-jammy to 7.0.28-jammy

Updates `python` from `235ad56` to `28cf028`

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.12.12-slim-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: node
  dependency-version: 22.21.1-bookworm-slim
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: nginx
  dependency-version: 1.29.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: dotnet/sdk
  dependency-version: 8.0.416-jammy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: dotnet/aspnet
  dependency-version: 8.0.22-jammy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: mongo
  dependency-version: 7.0.28-jammy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
- dependency-name: python
  dependency-version: 3.12.12-slim-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@coderabbitai
Copy link

coderabbitai bot commented Jan 12, 2026

📝 Walkthrough

Walkthrough

This PR updates Docker base images across four Dockerfiles (Backend, main application, database, and deploy) and refreshes Python package versions in multiple requirements files, including a new regex dependency addition in dev-requirements.in.

Changes

Cohort / File(s) Summary
Docker base image updates
Backend/Dockerfile, Dockerfile, database/Dockerfile, deploy/Dockerfile
Updated base images to newer versions: .NET SDK/ASP.NET runtime in Backend/Dockerfile with added restore step; Python 3.12, Node.js 22, and nginx versions updated with new digests; MongoDB image bumped from 7.0.25 to 7.0.28; Python deploy image hash updated.
Python dependency version pins
deploy/requirements.txt, maintenance/requirements.txt
Dependency version bumps across multiple packages (ansible, certifi, cffi, kubernetes, requests, urllib3, websocket-client, etc.). No new packages added or removed.
Development dependency restructuring
dev-requirements.txt
Significant version updates and restructuring across 56 added and 64 removed lines; includes major version bumps (mypy 1.16.0→1.19.1, kubernetes 33.1.0→35.0.0, cryptography 45.0.4→46.0.3) with dependency graph adjustments and some package reordering.
Development dependency declaration
dev-requirements.in
Added new regex dependency under Scripts section; no other changes to existing dependencies.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~22 minutes

Suggested labels

backend, .NET

Suggested reviewers

  • jasonleenaylor

Poem

🐰 Images fresh and packages bright,
From .NET to MongoDB's light,
Dependencies dance in their new attire,
Ansible leaps, Kubernetes climbs higher,
A regex friend joins the dev's delight! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title 'Bump Docker and python deps' directly and concisely summarizes the main changes across the pull request: updating Docker base images and Python dependencies.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions bot added deployment docker python dependencies Pull requests that update a dependency file labels Jan 12, 2026
@github-actions
Copy link

github-actions bot commented Jan 12, 2026

⚠️ Commit Message Format Issues ⚠️

commit 840aa39612:
3: B1 Line exceeds max length (86>80): "Bumps the docker-deps group with 3 updates in the / directory: python, node and nginx."
4: B1 Line exceeds max length (99>80): "Bumps the docker-deps group with 2 updates in the /Backend directory: dotnet/sdk and dotnet/aspnet."

@codecov
Copy link

codecov bot commented Jan 12, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.79%. Comparing base (6f665a9) to head (4dc38f3).
⚠️ Report is 8 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #4097      +/-   ##
==========================================
+ Coverage   74.57%   74.79%   +0.21%     
==========================================
  Files         295      295              
  Lines       10938    10946       +8     
  Branches     1372     1372              
==========================================
+ Hits         8157     8187      +30     
+ Misses       2385     2363      -22     
  Partials      396      396              
Flag Coverage Δ
backend 86.08% <ø> (+0.48%) ⬆️
frontend 66.02% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@imnasnainaec

This comment was marked as resolved.

@imnasnainaec

This comment was marked as resolved.

@imnasnainaec imnasnainaec marked this pull request as ready for review January 16, 2026 14:40
@imnasnainaec imnasnainaec requested a review from Copilot January 16, 2026 14:40
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates Docker base images and Python dependencies across multiple environments (deployment, development, and maintenance). The changes are automated dependency updates generated by pip-compile and dependabot.

Changes:

  • Updated Docker base images for Python, Node, nginx, MongoDB, and .NET SDK/runtime
  • Bumped Python package versions across all requirements files
  • Added regex package to dev-requirements for script usage
  • Removed google-auth and related dependencies (pyasn1, pyasn1-modules, rsa) as they are no longer needed

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file
File Description
maintenance/requirements.txt Updated Python dependencies for maintenance scripts
dev-requirements.txt Updated development dependencies and added regex package
dev-requirements.in Added regex dependency for script usage
deploy/requirements.txt Updated deployment dependencies including Ansible and Kubernetes
deploy/Dockerfile Updated Python base image SHA
database/Dockerfile Updated MongoDB base image from 7.0.25 to 7.0.28
Dockerfile Updated Python, Node, and nginx base image SHAs
Backend/Dockerfile Updated .NET SDK and ASP.NET runtime images

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@imnasnainaec imnasnainaec added 🟨Medium Medium-priority PR and removed 🟩Low Low-priority PR labels Jan 16, 2026
Copy link
Contributor

@jasonleenaylor jasonleenaylor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

@jasonleenaylor reviewed 8 files and all commit messages, and made 1 comment.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on @imnasnainaec).

@imnasnainaec imnasnainaec merged commit 44f4785 into master Jan 16, 2026
25 of 26 checks passed
@imnasnainaec imnasnainaec deleted the docker-python-deps branch January 16, 2026 20:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file deployment docker 🟨Medium Medium-priority PR python

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants