From a854d98b818216db734d9fb943a214761c6551b1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 01:53:36 +0000 Subject: [PATCH] build(deps): bump the docker-base-images group across 3 directories with 1 update Bumps the docker-base-images group with 1 update in the /devpi directory: python. Bumps the docker-base-images group with 1 update in the /policy-sync directory: python. Bumps the docker-base-images group with 1 update in the /scripts directory: python. Updates `python` from `b877e50` to `d3400aa` Updates `python` from `b877e50` to `d3400aa` Updates `python` from `b877e50` to `d3400aa` --- updated-dependencies: - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production dependency-group: docker-base-images - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production dependency-group: docker-base-images - dependency-name: python dependency-version: 3.14-slim dependency-type: direct:production dependency-group: docker-base-images ... Signed-off-by: dependabot[bot] --- devpi/Dockerfile | 2 +- policy-sync/Dockerfile | 2 +- scripts/Dockerfile.bootstrap | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/devpi/Dockerfile b/devpi/Dockerfile index e283182..44c1988 100644 --- a/devpi/Dockerfile +++ b/devpi/Dockerfile @@ -1,7 +1,7 @@ # Artea devpi image: PyPI pull-through cache + Artea policy filtering. # Internal-only service; the gateway enforces auth (see docs/ARCHITECTURE.md). # Base = python:3.14-slim, digest-pinned (ADR-0004; bump procedure in policy-sync/Dockerfile). -FROM python:3.14-slim@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1 +FROM python:3.14-slim@sha256:d3400aa122fa42cf0af0dbe8ec3091b047eac5c8f7e3539f7135e86d855dc015 # Exact pins; the single source of truth for the devpi-server version. ARG DEVPI_SERVER_VERSION=6.20.2 diff --git a/policy-sync/Dockerfile b/policy-sync/Dockerfile index c5ad3f2..2182e3c 100644 --- a/policy-sync/Dockerfile +++ b/policy-sync/Dockerfile @@ -3,7 +3,7 @@ # devpi/README.md), so no pip dependencies at all. # Base = python:3.14-slim, digest-pinned (ADR-0004); bump procedure in # docs/guides/operations.md ("Base-image digest pins"). -FROM python:3.14-slim@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1 +FROM python:3.14-slim@sha256:d3400aa122fa42cf0af0dbe8ec3091b047eac5c8f7e3539f7135e86d855dc015 WORKDIR /app COPY policy_sync ./policy_sync diff --git a/scripts/Dockerfile.bootstrap b/scripts/Dockerfile.bootstrap index 931b47c..8fcb411 100644 --- a/scripts/Dockerfile.bootstrap +++ b/scripts/Dockerfile.bootstrap @@ -10,7 +10,7 @@ # No jq (the script parses JSON with python3) and no docker. # # Base = python:3.14-slim, digest-pinned (ADR-0004; bump procedure in policy-sync/Dockerfile). -FROM python:3.14-slim@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1 +FROM python:3.14-slim@sha256:d3400aa122fa42cf0af0dbe8ec3091b047eac5c8f7e3539f7135e86d855dc015 RUN apt-get update \ && apt-get install -y --no-install-recommends curl ca-certificates \