[Snyk] Security upgrade python from 3.8-slim to 3.14.0-slim

[seigpe]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• build_tools/docker/py38.dockerfile

We recommend upgrading to python:3.14.0-slim, as this image has only 22 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-6965 SNYK-DEBIAN12-SQLITE3-10753055	714
	Resource Exhaustion SNYK-DEBIAN12-EXPAT-6227597	614
	Uncontrolled Recursion SNYK-DEBIAN12-EXPAT-9407503	614
	Heap-based Buffer Overflow SNYK-DEBIAN12-GNUTLS28-10690985	614
	Out-of-Bounds SNYK-DEBIAN12-SQLITE3-6139924	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Resource Exhaustion

[deepsource-io]

Here's the code health analysis summary for commits 6b0eb52..7f8bb96. View details on DeepSource ↗.

Analysis Summary

Analyzer	Status	Summary	Link
Python	✅ Success		View Check ↗
Shell	✅ Success		View Check ↗

---

💡 If you’re a repository administrator, you can configure the quality gates from the settings.