[Snyk] Security upgrade python from 3.10-slim-bullseye to 3.12.7-slim-bullseye

[ab93]

Snyk has created this PR to fix 1 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• examples/block_pipeline/Dockerfile

We recommend upgrading to python:3.12.7-slim-bullseye, as this image has only 66 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Read SNYK-DEBIAN11-E2FSPROGS-2628459	614
	Out-of-bounds Read SNYK-DEBIAN11-E2FSPROGS-2628459	614
	Out-of-bounds Read SNYK-DEBIAN11-E2FSPROGS-2628459	614
	Out-of-bounds Read SNYK-DEBIAN11-E2FSPROGS-2628459	614
	Out-of-bounds Read SNYK-DEBIAN11-E2FSPROGS-2628459	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (main@4d05d95). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #417   +/-   ##
=======================================
  Coverage        ?   92.18%           
=======================================
  Files           ?       98           
  Lines           ?     4862           
  Branches        ?      442           
=======================================
  Hits            ?     4482           
  Misses          ?      279           
  Partials        ?      101           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[vigith]

make DCO pass?

[ab93]

make DCO pass?

I don't think the pipelines work with Python 3.12, especially with the current numaflow sdk version

[vigith]

I don't think the pipelines work with Python 3.12, especially with the current numaflow sdk version

In the next release we will bump up the Python version, https://github.com/numaproj/numaflow-python/blob/main/pyproject.toml#L24

[ab93]

Code wise it is fine. We saw errors in the protobuf. I believe proto generation needs to be updated. Moreover, it is recommended to not specify the patch version in the dockerfile.

…

On Sat, Oct 12, 2024 at 4:06 PM Vigith Maurice ***@***.***> wrote: I don't think the pipelines work with Python 3.12, especially with the current numaflow sdk version In the next release we will bump up the Python version, https://github.com/numaproj/numaflow-python/blob/main/pyproject.toml#L24 — Reply to this email directly, view it on GitHub <#417 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA2S54OJCM5SSYTLSCZQG23Z3GTPNAVCNFSM6AAAAABP2CWPWCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMBYG4ZTQMJWGQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>