Skip to content

Chore: [AEA-0000] - update syft, grype, poetry, node#92

Open
anthony-nhs wants to merge 4 commits intomainfrom
update_tools
Open

Chore: [AEA-0000] - update syft, grype, poetry, node#92
anthony-nhs wants to merge 4 commits intomainfrom
update_tools

Conversation

@anthony-nhs
Copy link
Copy Markdown
Contributor

@anthony-nhs anthony-nhs commented Apr 13, 2026

Summary

  • Routine Change

Details

  • update syft to 1.42.4
  • update, grype to 0.111.0
  • update poetry to 2.3.4
  • update node to 24.14.1

Copilot AI review requested due to automatic review settings April 13, 2026 15:15
@github-actions
Copy link
Copy Markdown
Contributor

This PR is linked to a ticket in an NHS Digital JIRA Project. Here's a handy link to the ticket:

AEA-0000

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Routine devcontainer/tooling version bumps to keep build and security scanning tools current across the Node 24 + Python language images and base scanner images.

Changes:

  • Bump Poetry in Node 24 + Python 3.12/3.13/3.14 devcontainers to 2.3.4.
  • Bump Syft to 1.42.4 in the Syft devcontainer image build.
  • Bump Grype to 0.111.0 in the Grype devcontainer image build.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
src/languages/node_24_python_3_14/.devcontainer/.tool-versions Updates Poetry version for Python 3.14 devcontainer tooling.
src/languages/node_24_python_3_13/.devcontainer/.tool-versions Updates Poetry version for Python 3.13 devcontainer tooling.
src/languages/node_24_python_3_12/.devcontainer/.tool-versions Updates Poetry version for Python 3.12 devcontainer tooling.
src/base/.devcontainer/Dockerfile.syft Updates Syft version used in the Syft scratch image build.
src/base/.devcontainer/Dockerfile.grype Updates Grype version used in the Grype scratch image build.

Comment on lines 1 to +2
python 3.12.13
poetry 2.3.2
poetry 2.3.4
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR description says poetry is updated to 2.3.4, but only the Python 3.12–3.14 devcontainers are updated; node_24_python_3_10 still pins poetry 2.1.3 (src/languages/node_24_python_3_10/.devcontainer/.tool-versions:2). Either update that devcontainer too, or clarify in the PR description that the poetry bump is only for 3.12+ images.

Copilot uses AI. Check for mistakes.
@anthony-nhs anthony-nhs changed the title Chore: [AEA-0000] - update syft, grype, poetry Chore: [AEA-0000] - update syft, grype, poetry, node Apr 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants