From e7fbe0d77e8b00cb547fb354feb2157b2e2f1c1e Mon Sep 17 00:00:00 2001 From: Alexander Tarasov Date: Fri, 6 Nov 2026 09:01:48 +0100 Subject: [PATCH] build: Bump Python to 3.14.10 and uv to 0.13.7 3.14.10 is an expedited security release that blocks the compromised eMudhra intermediate CA keys in ssl. Refs VULN-3216 --- .python-version | 2 +- Dockerfile | 2 +- tests/e2e/Dockerfile.test-runner | 2 +- tests/e2e/mock-sentry-api/Dockerfile | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.python-version b/.python-version index 0104088a..6345df51 100644 --- a/.python-version +++ b/.python-version @@ -1 +1 @@ -3.14.4 +3.14.10 diff --git a/Dockerfile b/Dockerfile index 425f9dd7..9cb351dd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -42,7 +42,7 @@ ENV PYTHONUNBUFFERED=1 \ SENTRY_OPTIONS_DIR=/etc/sentry-options # Install uv -RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.5' +RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.7' # Create app user and group RUN groupadd --gid 1000 app && \ diff --git a/tests/e2e/Dockerfile.test-runner b/tests/e2e/Dockerfile.test-runner index 61c5068f..b6929260 100644 --- a/tests/e2e/Dockerfile.test-runner +++ b/tests/e2e/Dockerfile.test-runner @@ -1,7 +1,7 @@ FROM ghcr.io/getsentry/image-mirror-library-python:3.14.10-slim-bookworm # Install uv -RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.5' +RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.7' ENV PATH="/.venv/bin:$PATH" \ UV_PROJECT_ENVIRONMENT=/.venv \ diff --git a/tests/e2e/mock-sentry-api/Dockerfile b/tests/e2e/mock-sentry-api/Dockerfile index 331fc8ca..02cc724a 100644 --- a/tests/e2e/mock-sentry-api/Dockerfile +++ b/tests/e2e/mock-sentry-api/Dockerfile @@ -1,7 +1,7 @@ FROM ghcr.io/getsentry/image-mirror-library-python:3.14.10-slim-bookworm # Install uv -RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.5' +RUN python3 -m pip --no-cache-dir --disable-pip-version-check install 'uv==0.13.7' ENV PATH="/.venv/bin:$PATH" \ UV_PROJECT_ENVIRONMENT=/.venv \