From 39b9a9d3d59bf2dd089ddb403a4a8e39a8b96490 Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Tue, 21 Jul 2026 15:38:21 +0200 Subject: [PATCH] bump slim image Python to 3.12.13 to ship current pip (#10236) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * fix(docker): upgrade bundled pip in uv-managed Python runtimes uv-managed Python runtimes ship a pip that lags behind, and it gets baked into the full, slim, and EE slim images at build time. Add a pinned PIP_VERSION build arg and upgrade pip in every real managed runtime after `uv python install`, failing the build if any upgrade fails. Fixes part of #10219 Co-Authored-By: Claude Opus 4.8 (1M context) * fix(docker): simplify pip upgrade to native uv per-version install Replace the runtime-discovery loop with a single `uv pip install --python --system --break-system-packages --upgrade` per known Python version. uv resolves the managed interpreter by version, so no directory scan or symlink handling is needed; a plain RUN still fails the build if the pinned pip can't be installed. Co-Authored-By: Claude Opus 4.8 (1M context) * fix(docker): bump slim image Python patch to 3.12.13 for current pip The full image floats LATEST_STABLE_PY to 3.12 (→ 3.12.13), whose uv/python-build-standalone runtime already ships pip 26.1.2. The slim and EE-slim images pinned 3.12.12, which ships pip 26.0.1 — the only runtime actually behind. Align them to 3.12.13 so they inherit the current pip natively, instead of adding an explicit pip-upgrade build step. This supersedes the earlier pip-upgrade approach on this branch: the full image needed no change, and the slim gap was purely the stale patch pin. Co-Authored-By: Claude Opus 4.8 (1M context) --------- Co-authored-by: Claude Opus 4.8 (1M context) --- docker/DockerfileSlim | 2 +- docker/DockerfileSlimEe | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docker/DockerfileSlim b/docker/DockerfileSlim index 92138e8181..915815f935 100644 --- a/docker/DockerfileSlim +++ b/docker/DockerfileSlim @@ -26,7 +26,7 @@ RUN make FROM ${DEBIAN_IMAGE} ARG APP=/usr/src/app -ARG LATEST_STABLE_PY=3.12.12 +ARG LATEST_STABLE_PY=3.12.13 # UV configuration ENV UV_CACHE_DIR=/tmp/windmill/cache/uv diff --git a/docker/DockerfileSlimEe b/docker/DockerfileSlimEe index 63f121abb3..d4ac4bd21c 100644 --- a/docker/DockerfileSlimEe +++ b/docker/DockerfileSlimEe @@ -26,7 +26,7 @@ RUN make FROM ${DEBIAN_IMAGE} ARG APP=/usr/src/app -ARG LATEST_STABLE_PY=3.12.12 +ARG LATEST_STABLE_PY=3.12.13 # UV configuration ENV UV_CACHE_DIR=/tmp/windmill/cache/uv