Skip to content

security(deps): bump python from 3.12-slim to 3.13.13-slim in /data-management/viewer/backend #596

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

security(deps): bump python from 3.12-slim to 3.13.13-slim in /data-management/viewer/backend #596

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion data-management/viewer/backend/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1

FROM python:3.12-slim@sha256:520153e2deb359602c9cffd84e491e3431d76e7bf95a3255c9ce9433b76ab99a AS base
FROM python:3.13.13-slim@sha256:d2462a6bed37b4fc6cabecf5a2132ae70df772fe03c7393c4d98a0c2fb48aa2e AS base
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot May 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Docker surface — Python 3.12 → 3.13.13-slim

The new digest sha256:d2462a6bed37b4fc6cabecf5a2132ae70df772fe03c7393c4d98a0c2fb48aa2e is pinned, maintaining supply-chain integrity. ✅

Python 3.13 crosses a CPython feature-release boundary. Compatibility notes:

  • pyproject.toml declares requires-python = ">=3.12" — Python 3.13 is within range ✅
  • uv.lock includes python_full_version >= '3.14' resolution markers, confirming multi-version flexibility ✅
  • Dataviewer Backend Pytest passed against this change ✅
  • No CUDA/GPU/Isaac Sim concerns — this is a standard Debian slim image ✅

No high-risk triggers apply. Standard validation: rebuild the container and smoke-run GET /health before deploying.


WORKDIR /app

Expand Down
Loading