Skip to content

chore(deps): bump python from 3.12-slim to 3.14-slim#419

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/python-3.14-slim
Open

chore(deps): bump python from 3.12-slim to 3.14-slim#419
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/docker/python-3.14-slim

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps python from 3.12-slim to 3.14-slim.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Mar 2, 2026
@dependabot dependabot bot requested a review from vitali87 as a code owner March 2, 2026 00:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Mar 2, 2026
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Mar 2, 2026

Greptile Summary

This PR bumps the Python Docker base image from 3.12-slim to 3.14-slim in both the builder and runtime stages. While the Dockerfile changes are syntactically correct, this creates critical version inconsistencies across the project:

  • CI workflows (ci.yml, sonarcloud.yml, publish.yml, docs.yml, build-binaries.yml) still use Python 3.12, meaning tests validate 3.12 behavior while production Docker images run 3.14
  • pyproject.toml missing Python 3.14 classifier in the classifiers list (only declares 3.12 and 3.13 support)
  • Tool configurations in pyproject.toml need updates: ruff target-version still set to "py312" and ty python-version still set to "3.12"

Recommendation: Either update all Python version references to 3.14 across the codebase for consistency, or revert this PR until a coordinated multi-file update can be made.

Confidence Score: 2/5

  • This PR introduces version inconsistency between Docker runtime (3.14) and CI test environments (3.12), creating untested deployment risk
  • Score reflects the version mismatch between production Docker images (Python 3.14) and all CI workflows (Python 3.12). While the Dockerfile syntax is correct, this gap means potential Python 3.14-specific issues won't be detected in testing. Additionally, pyproject.toml configurations (classifiers, ruff target-version, ty python-version) still reference 3.12, creating further inconsistency.
  • Dockerfile requires corresponding updates to CI workflows and pyproject.toml before merging

Important Files Changed

Filename Overview
Dockerfile Updates Python base image from 3.12-slim to 3.14-slim, but creates version inconsistencies with CI workflows and project configuration

Last reviewed commit: 776ee96

Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, 3 comments

Edit Code Review Agent Settings | Greptile

FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv

FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder
FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

verify CI workflows (.github/workflows/*.yml) are updated to python-version: "3.14" - currently all use 3.12, creating a testing gap where Docker runs 3.14 but tests validate 3.12

Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3

Comment:
verify CI workflows (.github/workflows/*.yml) are updated to `python-version: "3.14"` - currently all use 3.12, creating a testing gap where Docker runs 3.14 but tests validate 3.12

How can I resolve this? If you propose a fix, please make it concise.

FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv

FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder
FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

add "Programming Language :: Python :: 3.14" to pyproject.toml classifiers (currently only lists 3.12 and 3.13)

Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3

Comment:
add `"Programming Language :: Python :: 3.14"` to `pyproject.toml` classifiers (currently only lists 3.12 and 3.13)

How can I resolve this? If you propose a fix, please make it concise.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv

FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder
FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

update pyproject.toml: change ruff target-version from "py312" to "py314" and ty python-version from "3.12" to "3.14"

Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3

Comment:
update `pyproject.toml`: change ruff `target-version` from `"py312"` to `"py314"` and ty `python-version` from `"3.12"` to `"3.14"`

How can I resolve this? If you propose a fix, please make it concise.

@codecov-commenter
Copy link

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

Bumps python from 3.12-slim to 3.14-slim.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/docker/python-3.14-slim branch from 776ee96 to 65b0450 Compare March 2, 2026 09:52
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 2, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

1 participant