fix(build): restore available Python for RL image

[svvarom]

Why

The RL base installs Python with uv python install. PR #1351 moved it to Python 3.13.15, but uv does not have managed 3.13.15 builds for Linux. That makes the RL container build fail before PR #1415 can be tested.

Change

Pin only the RL base back to Python 3.13.14. Other images remain on 3.13.15.

This is temporary and restores the previous RL security finding until uv publishes 3.13.15.

Validation

• uv lists Python 3.13.14 downloads for Linux AMD64 and ARM64
• make docker-print TARGET=nmp-rl-base-builder
• Focused Automodel/Unsloth/RL build: pending

Summary by CodeRabbit

• Chores
  • Updated the default Python version used by the runtime image.
  • Clarified documentation around supported Python builds and the uv networking dependency constraint.
  • Updated the NeMo-RL base image to a newer pinned release for improved compatibility and maintenance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 1f6d0820-a68d-48e1-9295-611895de84f8

📥 Commits

Reviewing files that changed from the base of the PR and between 7a29343 and 1fdc877.

📒 Files selected for processing (1)

• docker-bake.hcl

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

📝 Walkthrough

Walkthrough

The RL base image now pins Python 3.13.14, documents the uv constraint, and uses a newer pinned NeMo-RL commit.

Changes

RL base image versioning

Layer / File(s)	Summary
Base image version pins docker/rl/Dockerfile.nmp-rl-base, docker-bake.hcl	The default PYTHON_VERSION changes from 3.13.15 to 3.13.14. The comments document the uv and quinn-proto constraints. UV_VERSION remains 0.11.33. NEMO_RL_REF changes to commit cd42a71d6d4b2eeb6f3d2feef275c5795d2f008c.

Suggested reviewers: a2bondar

Merge Risk: ⚪ Minimal · up to 1fdc8

The change is limited to restoring a Linux-available Python version for the RL image, and no actionable merge-blocking risk remains at the current head.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the primary change: restoring the available Python version for the RL image.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch svvarom/fix-rl-python-pin

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Suite	Lines Covered	Line Rate	Branch Rate
Unit Tests	34424/43432	79.3%	64.1%
Integration Tests	20322/41231	49.3%	22.0%