[Snyk] Security upgrade python from 3.14-slim to 3.15-rc-alpine

[kimocoder]

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to python:3.15-rc-alpine, as this image has only 10 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2026-8376 SNYK-DEBIAN13-PERL-16896261	193
	CVE-2005-2541 SNYK-DEBIAN13-TAR-5696683	187
	Out-of-Bounds SNYK-DEBIAN13-GLIBC-5681241	186
	Out-of-Bounds SNYK-DEBIAN13-GLIBC-5681241	186
	CVE-2026-42496 SNYK-DEBIAN13-PERL-17037434	175

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-Bounds

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e6401994fe

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Keep a Debian base for the apt-based build

The Alpine base does not provide /etc/apt or the apt package manager, while the first build step writes /etc/apt/sources.list and runs multiple apt commands. Consequently, every Docker build using this file now fails at the first RUN instruction; retain a Debian-based image or convert the entire dependency installation to Alpine-compatible apk packages.

Useful? React with 👍 / 👎.

[kimocoder]

Suggestions further?