chore: keep the docker image on python 3.13 while requires-python pins it

.github/dependabot.yml

@@ -8,6 +8,10 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+    # the python minor follows requires-python in pyproject.toml, not the image tag
+    ignore:
+      - dependency-name: "python"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
   - package-ecosystem: "uv"
     directory: "/"
     schedule:

Dockerfile

@@ -1,5 +1,5 @@
 # Install uv
-FROM python:3.14-slim AS builder
+FROM python:3.13-slim AS builder
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
 
 # Change the working directory to the `app` directory
@@ -22,7 +22,7 @@ ADD --checksum=sha256:f551e7b843e25becee466a447118f6f44f219c4e46cfb4670829ecd3cf
     https://github.com/coin-or/Cbc/releases/download/releases%2F2.10.10/Cbc-releases.2.10.10-x86_64-ubuntu22-gcc1130-static.tar.gz \
     /tmp/cbc.tar.gz
 
-FROM python:3.14-slim
+FROM python:3.13-slim
 
 # Create non-root user
 RUN groupadd -r app && useradd -r -g app -s /bin/false app