Skip to content

chore(deps): bump python from cea0e60 to a7fb1e6 in /docker #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump python from cea0e60 to a7fb1e6 in /docker #7

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docker/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
# Base image pinned by digest for reproducible, supply-chain-safe builds;
# Dependabot (docker ecosystem) keeps the digest current. Tag is retained for
# human readability — the digest is what actually resolves.
FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 AS builder
FROM python:3.14-slim@sha256:a7fb1e634c4a578f9e0bd6327f11a3cde11b7a9395f48e24360c0988bcc5c2bc AS builder

# uv from PyPI; pin the project's tooling requirements via pyproject if
# stricter reproducibility is wanted at CI time.
Expand All @@ -38,7 +38,7 @@ RUN uv sync --frozen --no-dev --no-install-project
# =============================================================
# Stage 2 — runtime: minimal image with only venv + source
# =============================================================
FROM python:3.14-slim@sha256:cea0e6040540fb2b965b6e7fb5ffa00871e632eef63719f0ea54bca189ce14a6 AS runtime
FROM python:3.14-slim@sha256:a7fb1e634c4a578f9e0bd6327f11a3cde11b7a9395f48e24360c0988bcc5c2bc AS runtime

# OCI metadata — picked up by GHCR, Trivy, Renovate, and similar tooling.
# CI can override ``revision``/``version`` at build time via ``--label``.
Expand Down
Loading