Repository navigation
chore(deps): bump python from 3.14.6-slim to 3.15.0-slim in /backend - #1307
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps python from 3.14.6-slim to 3.15.0-slim. --- updated-dependencies: - dependency-name: python dependency-version: 3.15.0-slim dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| @@ -1,4 +1,4 @@ | |||
| FROM python:3.14.6-slim@sha256:b877e50bd90de10af8d82c57a022fc2e0dc731c5320d762a27986facfc3355c1 | |||
| FROM python:3.15.0-slim@sha256:f5b92f2a669a4c347044f29367f31983280b648250ca94dea66f98c53bc87e58 | |||
There was a problem hiding this comment.
🔴 Backend image cannot install locked dependencies
With Python 3.15, pip install cannot resolve the locked psycopg-binary release, which has no compatible wheel or source archive. The backend image fails to build, preventing both Compose deployments from starting the service.
Learn more
The backend image installs hash-locked packages from requirements.lock before copying the application. The pinned psycopg-binary==3.3.4 release has CPython wheels only through 3.14 and no source distribution, so pip cannot install it under 3.15. Other locked native dependencies, including asyncpg and pydantic-core, also lack 3.15 wheels; their source builds require build tooling absent from the slim image. Both production Compose and development Compose build this image.
Example: Run docker compose -f compose.prod.yaml up -d --build with the new base image. Pip reaches psycopg-binary==3.3.4, finds no CPython 3.15 distribution, and stops before creating a runnable backend image.
Recommended fix: Keep a supported Python base image until the pinned dependencies publish compatible artifacts, or update and relock all affected packages for Python 3.15. If upgrading, also revise the declared requires-python bound in project metadata and validate a full backend image build.
Was this helpful? React with 👍 or 👎 to provide feedback.
Bumps python from 3.14.6-slim to 3.15.0-slim.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)