Skip to content

[Snyk] Security upgrade python from 3.13.2-slim to 3.14.3-slim #31

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
simcax wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade python from 3.13.2-slim to 3.14.3-slim #31

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docker/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Use Chainguard's Python image
FROM python:3.13.2-slim AS builder
FROM python:3.14.3-slim AS builder
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The base image is being bumped to Python 3.14, but the project declares requires-python = "~=3.11" in pyproject.toml (i.e., >=3.11,<3.12). uv sync --frozen will likely fail or you’ll be running an unsupported interpreter for the locked deps. Consider upgrading to the latest patched python:3.11.x-slim (or widening requires-python and regenerating uv.lock to explicitly support 3.14).

Copilot uses AI. Check for mistakes.

ENV PYTHONUNBUFFERED=1
ENV PYTHONDONTWRITEBYTECODE=1
Expand All @@ -22,7 +22,7 @@ RUN echo $PATH
RUN CC=gcc uv sync --frozen --no-dev

#FROM cgr.dev/chainguard/python:latest-dev
FROM python:3.13.2-slim
FROM python:3.14.3-slim
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same interpreter-version mismatch as in the builder stage: runtime image is Python 3.14 but pyproject.toml restricts the app to ~=3.11 (<3.12). Align the runtime image with the supported Python version, or update requires-python + lockfile to match the new base image.

Copilot uses AI. Check for mistakes.
# Set the working directory
WORKDIR /app

Expand Down
Loading