From 14126d648efdfea67456b69496b4fb9dc32d60d4 Mon Sep 17 00:00:00 2001 From: Cordero Core Date: Wed, 5 Aug 2026 03:33:12 -0700 Subject: [PATCH] fix(docker): bump base image to python:3.13-slim to clear base-image CVEs Snyk flagged 4 vulnerabilities in the python:3.12-slim base image (uw-ssec/llteacher#7, which proposed python:3.15-rc-alpine). This takes the conservative path instead: - 3.13-slim is a released stable Python (3.15 is an unreleased release candidate; pinning production to an RC is not appropriate). - Stays on the Debian/glibc `-slim` line rather than switching to Alpine/musl, which would break manylinux wheels and risk the Django build (psycopg2 etc.). - 3.13 satisfies pyproject's `requires-python = ">=3.12"` and is supported by Django 5.2. Supersedes the Snyk PR uw-ssec/llteacher#7. --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 9a1ceac5..3ffae2a5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ -# Use Python 3.12 slim image as base -FROM python:3.12-slim as base +# Use Python 3.13 slim image as base +FROM python:3.13-slim as base # Declare volume for database persistence VOLUME ["/data"]