From 9253a6c9ac5709221a1863469276fa94c6cffb3c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jul 2026 07:54:44 +0000 Subject: [PATCH] chore(deps): bump python from 3.12-slim to 3.14-slim in /services/api Bumps python from 3.12-slim to 3.14-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- services/api/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/services/api/Dockerfile b/services/api/Dockerfile index 2aba5a0d..e0e3474f 100644 --- a/services/api/Dockerfile +++ b/services/api/Dockerfile @@ -15,7 +15,7 @@ RUN npm init -y >/dev/null 2>&1 && npm install --no-audit --no-fund \ # --- python build stage (B3): a full toolchain compiles any source-only wheel HERE, then we lift only # the installed packages into the runtime image below. gcc + headers never ship to production, so the # runtime image is smaller and carries no compiler in its attack surface. --- -FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de AS pybuild +FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 AS pybuild # build toolchain + the same shared libs, so wheels that need to compile can link during install RUN apt-get update && apt-get install -y --no-install-recommends \ libgl1 libglib2.0-0 build-essential python3-dev \ @@ -29,7 +29,7 @@ COPY services/api/requirements.lock /tmp/req/requirements.lock # wholesale into the runtime stage. RUN pip install --prefix=/install --require-hashes -r /tmp/req/requirements.lock -FROM python:3.12-slim@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de +FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 WORKDIR /app ENV PYTHONUNBUFFERED=1 \