chore(deps): Update remaining dependencies (closes #43, #50, #51)#54
chore(deps): Update remaining dependencies (closes #43, #50, #51)#54
Conversation
There was a problem hiding this comment.
Pull request overview
This PR resolves outstanding Dependabot merge conflicts by updating pinned dependency versions and bumping the Docker base image Python version used for the runtime container.
Changes:
- Bump
fastapifrom0.116.*→0.120.*inrequirements.txt. - Bump
pytest-asynciofrom1.1.*→1.2.*inrequirements-dev.txt. - Bump Docker base image from
python:3.13-slim-bookworm→python:3.14-slim-bookworm.
Reviewed changes
Copilot reviewed 2 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
requirements.txt |
Updates the FastAPI pin to the newer minor version. |
requirements-dev.txt |
Updates the pytest-asyncio pin for dev/test tooling. |
Dockerfile |
Moves the runtime container to Python 3.14. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| FROM python:3.14-slim-bookworm | ||
|
|
||
| # Install system dependencies | ||
| RUN apt-get update && apt-get install -y \ |
There was a problem hiding this comment.
With the base image bumped to Python 3.14, the build should fail if requirements installation fails. The Dockerfile currently ignores pip install -r /tmp/requirements.txt failures (|| true), which can produce an image missing runtime dependencies and make Python-version incompatibilities hard to detect. Remove the || true (or otherwise handle failures explicitly) so dependency install errors fail the build.
| @@ -1,4 +1,4 @@ | |||
| FROM python:3.13-slim-bookworm | |||
| FROM python:3.14-slim-bookworm | |||
There was a problem hiding this comment.
CI currently uses Python 3.9 in GitHub Actions workflows, while the runtime Docker image is being bumped to Python 3.14. To reduce risk of runtime-only breakages, consider adding CI coverage for 3.14 (or a version matrix including 3.14) and/or a job that builds the Docker image as part of the PR checks.
| FROM python:3.14-slim-bookworm | |
| FROM python:3.9-slim-bookworm |
Summary
Applies the 3 remaining dependabot updates that had merge conflicts:
Test plan