From 2467749b348e2362984bde87bed67c5a16055996 Mon Sep 17 00:00:00 2001 From: Simone Carolini Date: Fri, 23 Oct 2026 10:08:40 +0200 Subject: [PATCH] chore(deps): bump Python 3.14.2 to 3.14.8 .python-version, the three engine Dockerfiles and the template move together, as tests/test_python_version_consistency.py requires. Replaces dependabot #85, which bumped only the Dockerfiles. Co-Authored-By: Claude Sonnet 5.5 Claude-Session: https://claude.ai/code/session_01WbJuV948a1y7LyJG3YSXq9 Signed-off-by: Simone Carolini --- .python-version | 2 +- CHANGELOG.md | 2 ++ Dockerfile.duckdb | 2 +- Dockerfile.postgres | 2 +- Dockerfile.trino | 2 +- template/Dockerfile.pip | 2 +- template/README.md | 2 +- 7 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.python-version b/.python-version index 95ed564..9b8fe2f 100644 --- a/.python-version +++ b/.python-version @@ -1 +1 @@ -3.14.2 +3.14.8 diff --git a/CHANGELOG.md b/CHANGELOG.md index 1d060db..7175994 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,6 +11,8 @@ follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `TASK_ATTEMPT`, the 0-based number of the task's attempt, which the executor sets on every production Job. The harness does not read it; a node script may. Documentation only: no package changes. +- The engine images build on `python:3.14.8-slim` (was `3.14.2`), and + `.python-version` and the `template/` Dockerfile follow. ## [0.10.0] - 2026-10-22 diff --git a/Dockerfile.duckdb b/Dockerfile.duckdb index ba36972..5065e44 100644 --- a/Dockerfile.duckdb +++ b/Dockerfile.duckdb @@ -1,4 +1,4 @@ -FROM python:3.14.2-slim +FROM python:3.14.8-slim # One dual-role image per engine: the python-node runtime harness (default # command `run`) and the blue/green validation runner (`validation-op`). It # installs the PUBLISHED, versioned libraries, never the repo source: diff --git a/Dockerfile.postgres b/Dockerfile.postgres index 4635336..ab7d8e6 100644 --- a/Dockerfile.postgres +++ b/Dockerfile.postgres @@ -1,4 +1,4 @@ -FROM python:3.14.2-slim +FROM python:3.14.8-slim # One dual-role image per engine — the python-node runtime harness (default # command `run`) and the blue/green validation runner (`validation-op`). It # installs the PUBLISHED, versioned libraries, never the repo source: diff --git a/Dockerfile.trino b/Dockerfile.trino index 4443ede..9c7866d 100644 --- a/Dockerfile.trino +++ b/Dockerfile.trino @@ -1,4 +1,4 @@ -FROM python:3.14.2-slim +FROM python:3.14.8-slim # One dual-role image per engine — the python-node runtime harness (default # command `run`) and the blue/green validation runner (`validation-op`). It # installs the PUBLISHED, versioned libraries, never the repo source: diff --git a/template/Dockerfile.pip b/template/Dockerfile.pip index ecda31d..97ae559 100644 --- a/template/Dockerfile.pip +++ b/template/Dockerfile.pip @@ -3,7 +3,7 @@ # requirements file (regenerate with the command in template/README.md). # Shape 1 (FROM the engine image, see template/Dockerfile) is simpler; use this # only when you must control the base image. -FROM python:3.14.2-slim +FROM python:3.14.8-slim COPY requirements.lock /tmp/requirements.lock RUN pip install --no-cache-dir --require-hashes -r /tmp/requirements.lock \ && rm -f /tmp/requirements.lock diff --git a/template/README.md b/template/README.md index 01f198a..b2cee65 100644 --- a/template/README.md +++ b/template/README.md @@ -52,7 +52,7 @@ any extra dependency your script needs). Pin by tag or digest specific reason not to. **Shape 2 — `Dockerfile.pip`, your own base (hash-locked).** Builds -`FROM python:3.14.2-slim` (or another base you control) and installs +`FROM python:3.14.8-slim` (or another base you control) and installs `continuo-python-runtime` plus one `continuo--adapter` from PyPI via `pip install --require-hashes -r requirements.lock`. Use this when you must control the base image yourself — e.g. your org mandates a specific base,