From f917c649cefe8ad8d3d29e935cea505101375cb4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 07:19:48 +0000
Subject: [PATCH] chore(docker): bump python

Bumps python from 3.12.7-slim-bookworm to 3.14.5-slim-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.5-slim-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a186237..fb826e7 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -119,7 +119,7 @@ RUN set -eux; \
 # required because the scanners have mutually incompatible transitive
 # dependencies (e.g. semgrep pins tomli~=2.0.1, pip-audit pins >=2.2.1).
 
-FROM python:3.12.7-slim-bookworm@sha256:60d9996b6a8a3689d36db740b49f4327be3be09a21122bd02fb8895abb38b50d AS python-builder
+FROM python:3.14.5-slim-bookworm@sha256:a3974109d36f164ca70024bc0d0828ac706e4ccda849f8638d879e91f79e90ec AS python-builder
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \
@@ -158,7 +158,7 @@ RUN pip install --no-cache-dir pipx \
  && pipx install --python /usr/local/bin/python "pip-audit==2.10.0"
 
 # ── Stage 3: final runtime ───────────────────────────────────────────────────
-FROM python:3.12.7-slim-bookworm@sha256:60d9996b6a8a3689d36db740b49f4327be3be09a21122bd02fb8895abb38b50d
+FROM python:3.14.5-slim-bookworm@sha256:a3974109d36f164ca70024bc0d0828ac706e4ccda849f8638d879e91f79e90ec
 
 LABEL org.opencontainers.image.source="https://github.com/sameermohan-git/purplegate" \
       org.opencontainers.image.description="Red/blue-team CI gate for agentic-AI apps" \