Skip to content

[Snyk] Security upgrade python from 3.11-slim to 3.14.0rc1-slim #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
KB01111 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade python from 3.11-slim to 3.14.0rc1-slim #11

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion agent/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM python:3.11-slim AS base
FROM python:3.14.0rc1-slim AS base
Copy link

@entelligence-ai-pr-reviews entelligence-ai-pr-reviews bot Jul 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

correctness: python:3.14.0rc1-slim is a release candidate, not a stable release; using it in production may cause runtime failures due to untested or unstable Python features.

🤖 AI Agent Prompt for Cursor/Windsurf

📋 Copy this prompt to your AI coding assistant (Cursor, Windsurf, etc.) to get help fixing this issue

In agent/Dockerfile, line 1, the base image was changed to 'python:3.14.0rc1-slim', which is a release candidate and not a stable version. This can cause runtime instability or unexpected failures in production. Please revert this line to use the latest stable Python 3.11 image: 'FROM python:3.11-slim AS base'.
📝 Committable Code Suggestion

‼️ Ensure you review the code suggestion before committing it to the branch. Make sure it replaces the highlighted code, contains no missing lines, and has no issues with indentation.

Suggested change
FROM python:3.14.0rc1-slim AS base
FROM python:3.11-slim AS base

Copy link

@gemini-code-assist gemini-code-assist bot Jul 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

Using a release candidate (rc1) version for a base Docker image is highly risky and not recommended for production environments. Release candidates are not stable releases and may contain bugs or breaking changes.

A better approach is to upgrade to the latest stable Python version that your project supports. Your pyproject.toml specifies compatibility with Python versions <3.14, which includes stable versions like 3.11, 3.12, and 3.13.

I suggest using the latest stable python:3.12-slim image instead. This will provide security patches while ensuring stability.

FROM python:3.12-slim AS base


# Set environment variables
ENV PYTHONDONTWRITEBYTECODE=1 \
Expand Down