Skip to content

chore(deps): bump the containers group in /deploy with 2 updates #317

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the containers group in /deploy with 2 updates #317

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion deploy/Dockerfile.backend
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3.12.13-slim-bookworm@sha256:d50fb7611f86d04a3b0471b46d7557818d88983fc3136726336b2a4c657aa30b
FROM python:3.14.7-slim-bookworm@sha256:82bc3c539b8813ada9d68c63b40158fa002f7f33de9bf3312a3dfdc0620dff56

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep the backend on a supported Python version

Every backend image build now executes pip install --no-cache-dir --no-deps . under Python 3.14, but pyproject.toml declares requires-python = ">=3.12,<3.13"; pip therefore rejects the application package and the image cannot be built. Retain Python 3.12 here, or update the project metadata, lockfile, and compatibility baseline together before moving the image to 3.14.

Useful? React with 👍 / 👎.


ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
RUN apt-get update \
Expand Down
2 changes: 1 addition & 1 deletion deploy/Dockerfile.web
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ COPY apps/web ./apps/web
RUN pnpm install --frozen-lockfile
RUN pnpm --dir apps/web build

FROM caddy:2.11.4-alpine@sha256:6aeddd44c3078b0f9a35206472a11420648a79c184603ef95957d0a20044cb2b
FROM caddy:2.11.6-alpine@sha256:d44355d3c2149dc580ce2cac735955d1c08d3d00882c30489c241aa51a5c10d9

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Refresh the inventories for the new Caddy image

When CI runs scripts/validate_dependency_inventory.py, expected_container_ids() reads this new digest from the Dockerfile, but docs/supply-chain/dependency-inventory.json and the generated software inventories still contain Caddy 2.11.4 at digest 6aeddd44...; the exact container-set comparison therefore fails, and the image also ships a THIRD_PARTY_NOTICES.txt that identifies the previous Caddy base. Regenerate the dependency and software inventory artifacts for 2.11.6 as part of this update.

Useful? React with 👍 / 👎.

@chatgpt-codex-connector chatgpt-codex-connector Bot Oct 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Validate the configuration with the upgraded Caddy binary

After the runtime moves to Caddy 2.11.6 here, the Validate Caddy configuration and Verify effective internal route denial order steps in .github/workflows/ci.yml still execute Caddy 2.11.4 at digest 5f5c8640.... Both predeployment syntax and route-adaptation checks therefore exercise a different binary from the one shipped, allowing a 2.11.6-specific configuration or adapter regression to escape those checks; update the workflow pins to the corresponding 2.11.6 image as part of this bump.

Useful? React with 👍 / 👎.

COPY deploy/Caddyfile /etc/caddy/Caddyfile
COPY --from=build /src/apps/web/dist /srv
COPY --from=build /src/LICENSE /src/NOTICE /usr/share/licenses/pathlab-viewer/
Expand Down
Loading