Skip to content

SCALRCORE-38392 Upgrade python to 3.14.5#12

Open
mermoldy wants to merge 3 commits into
mainfrom
SCALRCORE-38392
Open

SCALRCORE-38392 Upgrade python to 3.14.5#12
mermoldy wants to merge 3 commits into
mainfrom
SCALRCORE-38392

Conversation

@mermoldy
Copy link
Copy Markdown
Member

@mermoldy mermoldy commented May 13, 2026 •
edited
Loading

Changes

  • Bump all bundled software versions to their latest (python to 3.14.5).
  • SHA256-pinned every downloaded binary (kubectl, gcloud, aws-cli, scalr-cli, python, aws-ssm-plugin).
  • Removed privilege-escalation surface from the base image: deletes su/sudo, mount/umount, passwd/chsh/etc.
  • Pinned AWS SSM Plugin to 1.2.814.0 (was unverifiable latest); moved into its own ARG-driven block.
  • Rewrote bump-versions.sh → bump-versions.py — stdlib only (urllib + hashlib).
  • Added .dockerignore (default-deny except Dockerfile).

mermoldy added 3 commits May 13, 2026 02:38
@mermoldy
SCALRCORE-38392 update tools:
14149ff 
- kubectl: v1.35.3 -> v1.36.1
- gcloud: 564.0.0 -> 568.0.0
- aws_cli: 2.34.29 -> 2.34.45
- azure_cli: 2.85.0 -> 2.86.0
- scalr_cli: 0.17.8 -> 0.18.0
- python: 3.14.4 -> 3.14.5
- python_release: 20260408 -> 20260510
@mermoldy
SCALRCORE-38392 update software versions; add checksums verification …
64daa8b 
…for build pipeline; delete su from images
@mermoldy
SCALRCORE-38392 pin debian base via versions file
4c71ee9
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mermoldy