Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,3 +9,7 @@ updates:
- package-ecosystem: docker
directory: /
schedule: {interval: weekly}
ignore:
# PyTorch and this project currently support Python 3.10-3.12.
- dependency-name: python
update-types: ["version-update:semver-major"]

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Block unsupported Python minor bumps

This ignore only excludes semver-major Docker tag updates; Dependabot treats versions as major.minor.patch, so python:3.11-slim -> python:3.13-slim or 3.14-slim is a semver-minor update and will still be proposed. Since pyproject.toml declares requires-python = ">=3.10,<3.13", the next Docker Dependabot run can recreate the unsupported container upgrade this commit is trying to prevent. Use an ignored version range such as >=3.13 (or also ignore semver-minor if that is acceptable) instead of only version-update:semver-major.

Useful? React with 👍 / 👎.

4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
FROM python:3.14-slim AS builder
FROM python:3.11-slim AS builder

WORKDIR /build
COPY pyproject.toml README.md LICENSE ./
COPY src/ src/
RUN python -m pip install --no-cache-dir --upgrade pip build "setuptools>=83" && \
python -m build --wheel

FROM python:3.14-slim AS runtime
FROM python:3.11-slim AS runtime

ENV PYTHONUNBUFFERED=1 \
PYTHONDONTWRITEBYTECODE=1 \
Expand Down
Loading