Repository navigation
chore(deps): Bump hi/python from 3.14 to 3.15 - #27
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
|
||
| # Stage 1: builder — has dnf, bash, shadow-utils for installing native deps | ||
| FROM registry.access.redhat.com/hi/python:3.14-builder AS builder | ||
| FROM registry.access.redhat.com/hi/python:3.15-builder AS builder |
There was a problem hiding this comment.
HIGH (Constitution): The builder base image changes to Python 3.15, contradicting the constitution's explicit requirement that the builder use the Hummingbird Python image pinned to Python 3.14.
Suggestion: Restore the builder base image to registry.access.redhat.com/hi/python:3.14-builder.
Evidence:
FROM registry.access.redhat.com/hi/python:3.15-builder AS builder
|
|
||
| # Stage 2: distroless production image | ||
| FROM registry.access.redhat.com/hi/python:3.14 | ||
| FROM registry.access.redhat.com/hi/python:3.15 |
There was a problem hiding this comment.
HIGH (Constitution): The runtime base image changes to Python 3.15, contradicting the constitution's explicit requirement that the runtime use the Hummingbird Python image pinned to Python 3.14.
Suggestion: Restore the runtime base image to registry.access.redhat.com/hi/python:3.14.
Evidence:
FROM registry.access.redhat.com/hi/python:3.15
Bumps [hi/python](https://gitlab.com/redhat/hummingbird/containers) from 3.14 to 3.15. - [Commits](https://gitlab.com/redhat/hummingbird/containers/commits/main) --- updated-dependencies: - dependency-name: hi/python dependency-version: '3.15' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
5e2cb9a to
f61771d
Compare
|
|
||
| # Stage 1: builder — has dnf, bash, shadow-utils for installing native deps | ||
| FROM registry.access.redhat.com/hi/python:3.14-builder AS builder | ||
| FROM registry.access.redhat.com/hi/python:3.15-builder AS builder |
There was a problem hiding this comment.
HIGH (Constitution): The builder image now uses Python 3.15, contradicting the constitution's explicit requirement that the builder use the Python 3.14 Hummingbird image.
Suggestion: Restore the Python 3.14 builder image, or amend the constitution if the version change is intentional.
Evidence:
FROM registry.access.redhat.com/hi/python:3.15-builder AS builder
Warning
Cooldown could not be applied because no publication date was available from the registry.
Bumps hi/python from 3.14 to 3.15.
Commits