From ebb1a6ca1d1b97678d0cda486a8dedf1b22c0166 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 9 Aug 2026 05:42:47 +0000 Subject: [PATCH] chore(deps): bump python from `cea0e60` to `a7fb1e6` in /docker Bumps python from `cea0e60` to `a7fb1e6`. --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- docker/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docker/Dockerfile b/docker/Dockerfile index b3d5c49..99b874b 100644 --- a/docker/Dockerfile +++ b/docker/Dockerfile @@ -18,7 +18,7 @@ # Base image pinned by digest for reproducible, supply-chain-safe builds; # Dependabot (docker ecosystem) keeps the digest current. Tag is retained for # human readability — the digest is what actually resolves. -FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 AS builder +FROM python:3.14-slim@sha256:a7fb1e634c4a578f9e0bd6327f11a3cde11b7a9395f48e24360c0988bcc5c2bc AS builder # uv from PyPI; pin the project's tooling requirements via pyproject if # stricter reproducibility is wanted at CI time. @@ -38,7 +38,7 @@ RUN uv sync --frozen --no-dev --no-install-project # ============================================================= # Stage 2 — runtime: minimal image with only venv + source # ============================================================= -FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 AS runtime +FROM python:3.14-slim@sha256:a7fb1e634c4a578f9e0bd6327f11a3cde11b7a9395f48e24360c0988bcc5c2bc AS runtime # OCI metadata — picked up by GHCR, Trivy, Renovate, and similar tooling. # CI can override ``revision``/``version`` at build time via ``--label``.