From 575a46596c53aa2d8ac7c784276e705d449460af Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 16:43:51 +0000 Subject: [PATCH] chore: bump python from 3.14-slim to 3.15-slim Bumps python from 3.14-slim to 3.15-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.15-slim dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index e98c148..cbd7c18 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # Pinned by digest (not just the moving 3.14-slim tag) so builds are reproducible; Dependabot bumps # the digest + comment on a new base release. Tag retained for readability. -FROM python:3.14-slim@sha256:ce40764625a4ff50df3548277632e7f96c4e77fe75fa848aae9885476e7df5a4 +FROM python:3.15-slim@sha256:65a65fc7b30b06cb6df4930fd4650697cb23f4c2698ab81fc87e4b031bc36928 # Non-root runtime user with a fixed uid/gid so the host can chown the bind-mounted /data # to match. The app writes only to /data (volume) and /tmp (tmpfs), so the rootfs is read-only.