-
Notifications
You must be signed in to change notification settings - Fork 3
chore(deps): update python docker tag #171
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
chore(native): 7z, to preserve attributes
chore(platform): update to latest openapi spec refactor(boot): reduce boot time docs: minor tweaks
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.3.0 to 6.3.1. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@445689e...bd01e18) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 6.3.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Helmut Hoffer von Ankershoffen né Oertel <helmut@aignostics.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
* fix(platform): Remove unused setting authorization_backoff_seconds * feat(platform): Auto-retry when retrieving JWKS set from auth0 * feat(platform): Cache JWKS set, TTL 24h, minimizing calls to auth0 on validating access tokens * feat(platform): Auto-retry when calling auth0 to exchange refresh token for access token * refactor(platform): Use proper error messages and logging on failure (of attempts) to exchange refresh token and validate access token * fix(utils): surface setting validation error on misconfigured api root * refactor(platform): consistently use HTTPStatus consts instead of 200, 500 etc. * refactor(platform): use proper constraints on settings * fix(platform): fix wrong exception handler in _perform_device_flow - was catching exception from urllib, not requests lib * feat(platform): configurable timeout for requesting platform health * feat(platform): introduce authentication aware operation cache * feat(platform): use authentication aware operation cache to cache /me result * chore(pytst): Add pytest-durations plugin to show durations of fixtures and tests * refactor(platform,system): optimize connection pooling * fix(platform): use dynamic user agent for requesting /me * style(utils): consistent log formatting for file and console, both including process id
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Helmut Hoffer von Ankershoffen né Oertel <helmut@aignostics.com>
Has to wait for general support for Python 3.14 which needs updates of some dependencies.
Pull Request Review: Python 3.14.0 Update
Summary
This PR updates Python from 3.13.7 to 3.14.0 in both .python-version and Dockerfile. This is an automated dependency update by Renovate.
Critical Issues
Python 3.14.0 is NOT officially released yet
Python 3.14 is currently in development and not yet stable. The final release is scheduled for October 2025 (approximately one year from now, based on PEP 719). As of today (2025年10月10日), Python 3.14.0 may be an alpha/beta release at best.
Recommendation: DO NOT MERGE this PR until Python 3.14.0 is officially released and stable.
Additional Concerns
1. Missing Python 3.14 in Test Matrix
The project currently tests against Python 3.11, 3.12, and 3.13:
- pyproject.toml:73 declares requires-python = '>=3.11, <4.0'
- pyproject.toml:60-62 lists classifiers for Python 3.11, 3.12, 3.13 only
- noxfile.py:25 defines TEST_PYTHON_VERSIONS = ['3.11', '3.12', '3.13']
- Makefile:40,44,48 hardcodes Python 3.13 for special test commands
Impact: Even when Python 3.14 is released, this PR doesn't add it to the test matrix, so the SDK won't actually be tested against 3.14.
Required changes when 3.14 is released:
- Add '3.14' to TEST_PYTHON_VERSIONS in noxfile.py:25
- Add Python 3.14 classifier to pyproject.toml:62
- Update dist_native target in Makefile:86 to use appropriate Python version
- Update hardcoded 3.13 references in Makefile test commands if needed
2. Incomplete Version Update
The PR only updates .python-version and Dockerfile, but misses other Python version references:
- noxfile.py:24 defines PYTHON_VERSION = '3.13' - used as default for various nox sessions
- Makefile:86 uses --python 3.13.6 for native builds
- Multiple test commands hardcode 3.13
Question: What is the intended purpose of updating .python-version? Is this for:
- Developer local environment setup?
- CI/CD default Python version?
- Docker container builds?
If only the Docker image should use 3.14, then .python-version should remain at 3.13.7 until all infrastructure is ready for 3.14.
3. Dependency Compatibility Unknown
The project has 50+ dependencies. Without testing against Python 3.14:
- No guarantee that all dependencies support Python 3.14
- Binary wheels may not be available yet for Python 3.14
- Some dependencies (like openslide-bin, pywin32, boto3) may need time to release 3.14-compatible versions
Security and Performance Considerations
- No security concerns with the changes themselves
- Using unreleased Python versions in production is a security/stability risk
- Python 3.14 may have breaking changes not yet documented
Recommended Action Plan
Short term (now):
- Close or hold this PR until Python 3.14.0 is officially released
- Configure Renovate to ignore Python versions still in alpha/beta
When Python 3.14.0 is officially released:
- Add Python 3.14 to test matrix (noxfile.py)
- Add Python 3.14 classifier to pyproject.toml
- Run full test suite against Python 3.14 on all platforms
- Verify all dependencies support Python 3.14
- Update all Python version references consistently
- Then merge a comprehensive Python 3.14 support PR
Code Quality
- Changes are clean and minimal
- No syntax issues
- Changes are premature and incomplete
Overall Recommendation: REJECT - Python 3.14.0 is not yet stable. Wait for official release and include comprehensive test coverage when adding Python 3.14 support.
Quality Gate Passed Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
66854fb to
cb18241
Compare
9905ef4 to
997dfe8
Compare
c10d0b2 to
b88bccd
Compare
This PR contains the following updates:
3.13.7->3.14.03.13-slim-bookworm->3.14-slim-bookwormWarning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.