security: Upgrade Python to v3.13

clemlesne · Oct 25, 2024 · 6f1c9ce · 6f1c9ce
1 parent 15d8f57
commit 6f1c9ce
Show file tree

Hide file tree

Showing 9 changed files with 39 additions and 39 deletions.
diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml
@@ -53,8 +53,8 @@ env:
   GIT_WIN_VERSION: 2.47.0
   # https://github.com/facebook/zstd/releases
   ZSTD_WIN_VERSION: 1.5.6
-  # https://www.python.org/downloads/windows
-  PYTHON_VERSION: 3.12.7
+  # https://www.python.org/downloads
+  PYTHON_VERSION: 3.13.0
   # https://nodejs.org/en/download/releases
   NODE_VERSION: 20.18.0
   # https://github.com/helm/helm/releases

diff --git a/docs/content/docs/advanced-topics/provided-software.md b/docs/content/docs/advanced-topics/provided-software.md
@@ -18,7 +18,7 @@ Softwares are operating system specific. The following table lists the softwares
   - [zsh](https://www.zsh.org)
 - Programming languages
   - [ASP.NET Core Runtime](https://github.com/dotnet/aspnetcore)
-  - [Python 3.12](https://docs.python.org/3/whatsnew/3.12.html)
+  - [Python 3.13](https://docs.python.org/3/whatsnew/3.13.html)
 - Tools
   - [git](https://github.com/git-for-windows/git)
   - [gzip](https://www.gnu.org/software/gzip)
@@ -43,7 +43,7 @@ Softwares are operating system specific. The following table lists the softwares
   - [Windows PowerShell](https://learn.microsoft.com/en-us/powershell/scripting/windows-powershell/install/installing-windows-powershell?view=powershell-7.3)
 - Programming languages
   - [.NET SDK](https://dotnet.microsoft.com)
-  - [Python 3.12](https://docs.python.org/3/whatsnew/3.12.html)
+  - [Python 3.13](https://docs.python.org/3/whatsnew/3.13.html)
   - [Visual Studio Build Tools](https://learn.microsoft.com/en-us/visualstudio/ide/?view=vs-2022) (with `AzureBuildTools`, `VCTools`, `WebBuildTools`, `ManagedDesktopBuildTools`, `OfficeBuildTools` workloads)
 - Tools
   - [git](https://github.com/git-for-windows/git)

diff --git a/src/docker/Dockerfile-bookworm b/src/docker/Dockerfile-bookworm
@@ -83,7 +83,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sharing=locked --mount=target=/var/cache,type=cache,id=var-cache-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -126,10 +126,10 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sh
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-bullseye b/src/docker/Dockerfile-bullseye
@@ -80,7 +80,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sharing=locked --mount=target=/var/cache,type=cache,id=var-cache-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -124,10 +124,10 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sh
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-focal b/src/docker/Dockerfile-focal
@@ -79,7 +79,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sharing=locked --mount=target=/var/cache,type=cache,id=var-cache-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -123,10 +123,10 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sh
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-jammy b/src/docker/Dockerfile-jammy
@@ -79,7 +79,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sharing=locked --mount=target=/var/cache,type=cache,id=var-cache-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -123,10 +123,10 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sh
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-noble b/src/docker/Dockerfile-noble
@@ -83,7 +83,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sharing=locked --mount=target=/var/cache,type=cache,id=var-cache-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -126,10 +126,10 @@ RUN --mount=target=/var/lib/apt/lists,type=cache,id=apt-lists-$TARGETPLATFORM,sh
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-ubi8 b/src/docker/Dockerfile-ubi8
@@ -76,7 +76,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/cache/yum,type=cache,id=yum-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -115,10 +115,10 @@ RUN --mount=target=/var/cache/yum,type=cache,id=yum-$TARGETPLATFORM,sharing=lock
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version
 

diff --git a/src/docker/Dockerfile-ubi9 b/src/docker/Dockerfile-ubi9
@@ -75,7 +75,7 @@ RUN git clone --depth 1 --branch v${ROOTLESSKIT_VERSION} https://github.com/root
 
 FROM base AS python
 
-# Build Python 3.12 from source, then verify installation
+# Build Python from source, then verify installation
 ARG PYTHON_VERSION
 ENV PYTHON_VERSION=${PYTHON_VERSION}
 RUN --mount=target=/var/cache/yum,type=cache,id=yum-$TARGETPLATFORM,sharing=locked --mount=target=/Python-$PYTHON_VERSION,type=cache,id=python-$PYTHON_VERSION-$TARGETPLATFORM,sharing=locked \
@@ -114,10 +114,10 @@ RUN --mount=target=/var/cache/yum,type=cache,id=yum-$TARGETPLATFORM,sharing=lock
 FROM base
 
 # Install Python, then verify installation
-COPY --from=python /usr/local/bin/python3.12 /usr/local/bin/python3.12
-COPY --from=python /usr/local/lib/python3.12 /usr/local/lib/python3.12
-RUN ln -s /usr/local/bin/python3.12 /usr/local/bin/python3 \
-    && ln -s /usr/local/bin/python3.12 /usr/local/bin/python \
+COPY --from=python /usr/local/bin/python3.13 /usr/local/bin/python3.13
+COPY --from=python /usr/local/lib/python3.13 /usr/local/lib/python3.13
+RUN ln -s /usr/local/bin/python3.13 /usr/local/bin/python3 \
+    && ln -s /usr/local/bin/python3.13 /usr/local/bin/python \
     && python3 --version \
     && python3 -m pip --version