[Snyk] Security upgrade python from 3.13.0a4-slim to 3.14.1-slim#51
[Snyk] Security upgrade python from 3.13.0a4-slim to 3.14.1-slim#51evildevill wants to merge 1 commit intomainfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN12-SYSTEMD-6277507 - https://snyk.io/vuln/SNYK-DEBIAN12-SYSTEMD-6277507 - https://snyk.io/vuln/SNYK-DEBIAN12-EXPAT-7855502 - https://snyk.io/vuln/SNYK-DEBIAN12-EXPAT-7855503 - https://snyk.io/vuln/SNYK-DEBIAN12-SQLITE3-10753055
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull request overview
This PR attempts to upgrade the Python Docker base image from 3.13.0a4-slim to 3.14.1-slim to address critical and high severity security vulnerabilities in the underlying Debian packages (systemd, expat, and sqlite3).
Key changes:
- Updates the base Python image from an alpha pre-release (3.13.0a4) to what appears to be version 3.14.1
- Applies the version change to both stages of the multi-stage Docker build
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
DockerfileWe recommend upgrading to
python:3.14.1-slim, as this image has only 22 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.Vulnerabilities that will be fixed with an upgrade:
SNYK-DEBIAN12-SYSTEMD-6277507
SNYK-DEBIAN12-SYSTEMD-6277507
SNYK-DEBIAN12-EXPAT-7855502
SNYK-DEBIAN12-EXPAT-7855503
SNYK-DEBIAN12-SQLITE3-10753055
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling