From ec65f5ad1bf0ab6d0f5442353706a45358ebfe49 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Nov 2026 20:35:19 +0000 Subject: [PATCH] Build(deps): Bump the base-images group across 2 directories with 1 update Bumps the base-images group with 1 update in the /skills/agentbase-build-mcp-server/assets/mcp_server directory: [astral-sh/uv](https://github.com/astral-sh/uv). Bumps the base-images group with 1 update in the /skills/agentbase-build-scaffold/assets/backend directory: [astral-sh/uv](https://github.com/astral-sh/uv). Updates `astral-sh/uv` from `af22a52` to `96f40d3` - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/uv/compare/0.13.0...0.13.0) Updates `astral-sh/uv` from `af22a52` to `96f40d3` - [Release notes](https://github.com/astral-sh/uv/releases) - [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/uv/compare/0.13.0...0.13.0) --- updated-dependencies: - dependency-name: astral-sh/uv dependency-version: '0.13' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: base-images - dependency-name: astral-sh/uv dependency-version: '0.13' dependency-type: direct:production update-type: version-update:semver-patch dependency-group: base-images ... Signed-off-by: dependabot[bot] --- skills/agentbase-build-mcp-server/assets/mcp_server/Dockerfile | 2 +- skills/agentbase-build-scaffold/assets/backend/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/skills/agentbase-build-mcp-server/assets/mcp_server/Dockerfile b/skills/agentbase-build-mcp-server/assets/mcp_server/Dockerfile index 6ab9e8c..0fdd604 100644 --- a/skills/agentbase-build-mcp-server/assets/mcp_server/Dockerfile +++ b/skills/agentbase-build-mcp-server/assets/mcp_server/Dockerfile @@ -3,7 +3,7 @@ # Two stages: uv and its cache stay in the builder; the runtime image only gets Python, the venv and the code. # Base images are pinned by digest (the tag stays for readability): a build never changes under you. Dependabot's # docker ecosystem proposes the new digests; both Dockerfiles of these skills move together (check_skills.py). -FROM ghcr.io/astral-sh/uv:0.13@sha256:af22a52f5eafef3d78e551599d405c02df61919d18028f0cea8eda93bc9986d0 AS uv +FROM ghcr.io/astral-sh/uv:0.13@sha256:96f40d3904aad8d0bd010539001d36c8e2188b981e1334471a90c4a1d93bb490 AS uv FROM python:3.13-slim@sha256:2d44738ebf4ce5f63b9d9ea871e9c7cfdc0426f7b0c97cac915fd88ded1d86bb AS builder COPY --from=uv /uv /bin/uv ENV UV_COMPILE_BYTECODE=1 UV_LINK_MODE=copy UV_PYTHON_DOWNLOADS=never diff --git a/skills/agentbase-build-scaffold/assets/backend/Dockerfile b/skills/agentbase-build-scaffold/assets/backend/Dockerfile index 5f3a02e..00b9a06 100644 --- a/skills/agentbase-build-scaffold/assets/backend/Dockerfile +++ b/skills/agentbase-build-scaffold/assets/backend/Dockerfile @@ -2,7 +2,7 @@ # Two stages: uv and its cache stay in the builder; the runtime image only gets Python, the venv and the code. # Base images are pinned by digest (the tag stays for readability): a build never changes under you. Dependabot's # docker ecosystem proposes the new digests; both Dockerfiles of these skills move together (check_skills.py). -FROM ghcr.io/astral-sh/uv:0.13@sha256:af22a52f5eafef3d78e551599d405c02df61919d18028f0cea8eda93bc9986d0 AS uv +FROM ghcr.io/astral-sh/uv:0.13@sha256:96f40d3904aad8d0bd010539001d36c8e2188b981e1334471a90c4a1d93bb490 AS uv FROM python:3.13-slim@sha256:2d44738ebf4ce5f63b9d9ea871e9c7cfdc0426f7b0c97cac915fd88ded1d86bb AS builder COPY --from=uv /uv /bin/uv