Skip to content

ci(deps): hold Python base image minor at the .python-version pin - #187

Merged
jbouder merged 1 commit into
mainfrom
chore/dependabot-ignore-python-minor
Nov 1, 2026
Merged

jbouder merged 1 commit into
mainfrom
chore/dependabot-ignore-python-minor

Conversation

@jbouder

@jbouder jbouder commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

What changes

Adds a Dependabot ignore rule for python major/minor updates in the docker ecosystem, mirroring the existing node rule. The Python minor is pinned in api/.python-version and mcp/.python-version, and the "Pin files agree with the Dockerfiles" CI check fails when the image tag disagrees — which is what broke #185 (python:3.15-slim does not match pin 3.14). We're staying on 3.14; patch and digest updates still flow through.

After merge, comment @dependabot recreate on #185 so it regenerates without the Python 3.15 bump (keeping the golang, distroless, node and nginx digest updates).

Upgrade notes

None.

Testing

Parsed .github/dependabot.yml with PyYAML and confirmed the docker entry's ignore list.

Checklist

  • The title is a Conventional Commit subject
  • The Closes # line names the issue this resolves (no issue)
  • The quality gates for every component I touched pass locally
  • New or changed behavior has tests (config only)
  • The CRD and deepcopy code are regenerated, if operator/api/ changed (n/a)
  • Docs (docs/, README.md, skill/) describe the new behavior (n/a)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@jbouder
jbouder merged commit b0a8553 into main Nov 1, 2026
8 checks passed
@jbouder
jbouder deleted the chore/dependabot-ignore-python-minor branch November 1, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant