From 942ce05e120684cb3c9b926a0fc45afcd1e37f30 Mon Sep 17 00:00:00 2001 From: andig Date: Sat, 17 Oct 2026 14:36:04 +0200 Subject: [PATCH] chore: keep the docker image on python 3.13 while requires-python pins it The 3.14 image from #223 made uv download a managed 3.13 in the builder; the runtime stage copies only /app/.venv, whose python symlink then dangles and the cbc check fails with "/app/.venv/bin/python: not found". Dependabot leaves the python image minor alone from now on. --- .github/dependabot.yml | 4 ++++ Dockerfile | 4 ++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index f08be0c7c..cf5d8f08f 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -8,6 +8,10 @@ updates: directory: "/" schedule: interval: "monthly" + # the python minor follows requires-python in pyproject.toml, not the image tag + ignore: + - dependency-name: "python" + update-types: ["version-update:semver-major", "version-update:semver-minor"] - package-ecosystem: "uv" directory: "/" schedule: diff --git a/Dockerfile b/Dockerfile index 583a06e1d..d5e4450e5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # Install uv -FROM python:3.14-slim AS builder +FROM python:3.13-slim AS builder COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/ # Change the working directory to the `app` directory @@ -22,7 +22,7 @@ ADD --checksum=sha256:f551e7b843e25becee466a447118f6f44f219c4e46cfb4670829ecd3cf https://github.com/coin-or/Cbc/releases/download/releases%2F2.10.10/Cbc-releases.2.10.10-x86_64-ubuntu22-gcc1130-static.tar.gz \ /tmp/cbc.tar.gz -FROM python:3.14-slim +FROM python:3.13-slim # Create non-root user RUN groupadd -r app && useradd -r -g app -s /bin/false app