Skip to content

SCALRCORE-38392 Upgrade python to 3.14.5 - #12

Merged
mermoldy merged 22 commits into
mainfrom
SCALRCORE-38392
May 25, 2026
Merged

SCALRCORE-38392 Upgrade python to 3.14.5#12
mermoldy merged 22 commits into
mainfrom
SCALRCORE-38392

Conversation

@mermoldy

@mermoldy mermoldy commented May 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Changes

  • Bump all bundled software versions to their latest (python to 3.14.5).
  • SHA256-pinned every downloaded binary (kubectl, gcloud, aws-cli, scalr-cli, python, aws-ssm-plugin).
  • Removed privilege-escalation surface from the base image: deletes su/sudo, mount/umount, passwd/chsh/etc.
  • Pinned AWS SSM Plugin to 1.2.814.0 (was unverifiable latest); moved into its own ARG-driven block.
  • Rewrote bump-versions.sh → bump-versions.py — stdlib only (urllib + hashlib).
  • Added .dockerignore (default-deny except Dockerfile).
  • Added slim image using docker-bake

mermoldy added 3 commits May 13, 2026 02:38
@mermoldy
SCALRCORE-38392 update tools:
14149ff 
- kubectl: v1.35.3 -> v1.36.1
- gcloud: 564.0.0 -> 568.0.0
- aws_cli: 2.34.29 -> 2.34.45
- azure_cli: 2.85.0 -> 2.86.0
- scalr_cli: 0.17.8 -> 0.18.0
- python: 3.14.4 -> 3.14.5
- python_release: 20260408 -> 20260510
@mermoldy
SCALRCORE-38392 update software versions; add checksums verification …
64daa8b 
…for build pipeline; delete su from images
@mermoldy
SCALRCORE-38392 pin debian base via versions file
4c71ee9
@mermoldy
mermoldy requested a review from artemvang May 25, 2026 12:10
@mermoldy mermoldy added the build-gar-images Push image to the Scalr's Google Artifacts Registry label May 25, 2026
@mermoldy
mermoldy merged commit 3f82eff into main May 25, 2026
2 checks passed
@mermoldy
mermoldy deleted the SCALRCORE-38392 branch May 25, 2026 16:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@penja penja penja approved these changes
@artemvang artemvang artemvang approved these changes

Assignees

No one assigned

Labels

build-gar-images Push image to the Scalr's Google Artifacts Registry

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mermoldy @penja @artemvang