Skip to content

fix(release): bump Dockerfile python:3.11-slim digest to 3.11.17 for Grype release gate - #285

Merged
Coding-Dev-Tools merged 4 commits into
mainfrom
fix/dockerfile-python-3-11-17
Oct 25, 2026
Merged

Coding-Dev-Tools merged 4 commits into
mainfrom
fix/dockerfile-python-3-11-17

Conversation

@Coding-Dev-Tools

Copy link
Copy Markdown
Owner

Updates the pinned python:3.11-slim digest in Dockerfile to Python 3.11.17 (sha256:b7a9e5f6a93d6d4a31f129bbd4bdee69efccb6ded0fb230d78aafaf37af98377) to remediate CVE-2026-19445 and CVE-2026-19553 in the Production image release gate, and enables pytest -n auto in Build distributions.

dependabot Bot and others added 2 commits October 25, 2026 10:20
Bumps [certifi](https://github.com/certifi/python-certifi) from 2026.7.22 to 2026.10.19.
- [Commits](certifi/python-certifi@2026.07.22...2026.10.19)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-10-25T10:31:15.825296Z
We couldn’t complete this review. Comment @codex review to try again.
3acc8c0 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

@Coding-Dev-Tools
Coding-Dev-Tools merged commit 0243e16 into main Oct 25, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant