chore(deps): bump python from 3.12-slim to 3.14-slim#419
chore(deps): bump python from 3.12-slim to 3.14-slim#419dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Greptile SummaryThis PR bumps the Python Docker base image from 3.12-slim to 3.14-slim in both the builder and runtime stages. While the Dockerfile changes are syntactically correct, this creates critical version inconsistencies across the project:
Recommendation: Either update all Python version references to 3.14 across the codebase for consistency, or revert this PR until a coordinated multi-file update can be made. Confidence Score: 2/5
Important Files Changed
Last reviewed commit: 776ee96 |
| FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv | ||
|
|
||
| FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder | ||
| FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder |
There was a problem hiding this comment.
verify CI workflows (.github/workflows/*.yml) are updated to python-version: "3.14" - currently all use 3.12, creating a testing gap where Docker runs 3.14 but tests validate 3.12
Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3
Comment:
verify CI workflows (.github/workflows/*.yml) are updated to `python-version: "3.14"` - currently all use 3.12, creating a testing gap where Docker runs 3.14 but tests validate 3.12
How can I resolve this? If you propose a fix, please make it concise.| FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv | ||
|
|
||
| FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder | ||
| FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder |
There was a problem hiding this comment.
add "Programming Language :: Python :: 3.14" to pyproject.toml classifiers (currently only lists 3.12 and 3.13)
Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3
Comment:
add `"Programming Language :: Python :: 3.14"` to `pyproject.toml` classifiers (currently only lists 3.12 and 3.13)
How can I resolve this? If you propose a fix, please make it concise.Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!
| FROM ghcr.io/astral-sh/uv:0.6@sha256:4a6c9444b126bd325fba904bff796bf91fb777bf6148d60109c4cb1de2ffc497 AS uv | ||
|
|
||
| FROM python:3.12-slim@sha256:f3fa41d74a768c2fce8016b98c191ae8c1bacd8f1152870a3f9f87d350920b7c AS builder | ||
| FROM python:3.14-slim@sha256:6a27522252aef8432841f224d9baaa6e9fce07b07584154fa0b9a96603af7456 AS builder |
There was a problem hiding this comment.
update pyproject.toml: change ruff target-version from "py312" to "py314" and ty python-version from "3.12" to "3.14"
Prompt To Fix With AI
This is a comment left during a code review.
Path: Dockerfile
Line: 3
Comment:
update `pyproject.toml`: change ruff `target-version` from `"py312"` to `"py314"` and ty `python-version` from `"3.12"` to `"3.14"`
How can I resolve this? If you propose a fix, please make it concise.|
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Bumps python from 3.12-slim to 3.14-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
776ee96 to
65b0450
Compare
|



Bumps python from 3.12-slim to 3.14-slim.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)