[mortyops]

This PR contains the following updates:

Package	Update	Change
python (source)	digest	46a17be → 22caa05

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

✅ Automated recommendation: APPROVE

Analysis engine: pr-review-local (openai) · pr-reviewer-action v3.7.0

Recommendation

Approve. This is a pure digest bump of python:3.14 from sha256:46a17be to sha256:22caa05 in the repo-wiki HelmRelease. The change is scoped to a single line, the repository and tag prefix are unchanged, and the digest is pinned — exactly the pattern the repo's standards describe as "normally fine."

Change-by-change findings

• kubernetes/apps/base/ai/repo-wiki/app/helmrelease.yaml — Only the tag line changed (line 92). The repository (python) and tag prefix (3.14) are identical. No other fields were touched. The repo-wiki-gen CronJob uses this image to run generate.py against a local git repo; the digest change is a routine upstream rebuild with no semantic change to the container's entrypoint or env.

Required checks

• verify only image digests changed; repository and tag unchanged — satisfied. The diff shows exactly one line changed: the sha256: digest suffix. The repository field (python) and the tag prefix (3.14) are unchanged. No other manifest fields were modified.

Standards Compliance

• Renovate digest-only bump: The PR body confirms this is a Mend Renovate-generated digest update. The standards say "A pure digest or patch bump with nothing else in the diff is normally fine." ✓
• No secrets in diff: No secrets, tokens, or keys appear in the changed content. ✓
• No postRenderer with bash: Not applicable to this manifest. ✓
• Flux Kustomization layout: The file lives at the expected kubernetes/apps/base/ai/repo-wiki/app/helmrelease.yaml path. ✓
• Naming convention: helmrelease.yaml is kebab-case. ✓

Unknowns / Needs Verification

• OCI provenance: The image provenance tool could not resolve revision labels or source timestamps for either digest. The old and new digests are both from library/python (Docker Hub official), but without revision metadata we cannot confirm whether this is a rebuild or a code change. This is acceptable for a digest-only bump but worth noting if auditability is required.
• Python 3.14 compatibility: The repo-wiki-gen CronJob runs generate.py (a local script). No evidence in the corpus confirms that generate.py is tested against Python 3.14. If the script uses any stdlib APIs that changed between 3.14.x versions, this could cause a silent failure. The diff itself does not touch generate.py, so this is a pre-existing risk, not introduced by this PR.

Summary

Low-risk digest-only update. No structural, security, or Flux-substitution concerns. Approved.

[mortyops]

--- CronJob ai/repo-wiki-repo-wiki-gen
+++ CronJob ai/repo-wiki-repo-wiki-gen
@@ -54,7 +54,7 @@
             envFrom:
             - secretRef:
                 name: repo-wiki
-            image: python:3.14@sha256:46a17be7cf526995fbf12177b40c248de30b40c1a509a4c7e5da954226f6885b
+            image: python:3.14@sha256:22caa054c0d309b1eee6f448326a8821a674a75b98653247fe706db90491fc87
             name: app
             resources:
               limits:

[mortyops]

--- HelmRelease ai/repo-wiki
+++ HelmRelease ai/repo-wiki
@@ -84,7 +84,7 @@
                 name: repo-wiki
             image:
               repository: python
-              tag: 3.14@sha256:46a17be7cf526995fbf12177b40c248de30b40c1a509a4c7e5da954226f6885b
+              tag: 3.14@sha256:22caa054c0d309b1eee6f448326a8821a674a75b98653247fe706db90491fc87
             resources:
               limits:
                 memory: 2Gi