Repository navigation
Conversation
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
The container image was still built on Alpine 3.21, which no longer receives new Python builds: python:3.13-alpine3.21 was last updated in December 2025. Move the base image to Alpine 3.24, the current Alpine release. There is no python:3.13.3-alpine3.24 tag, so PYTHON_VERSION moves from 3.13.3 to 3.13.16, the latest 3.13 patch release published for Alpine 3.24. The Python minor version stays at 3.13. All packages installed with apk are available in Alpine 3.24; openssh-client and procps are still resolved through the packages that provide them (openssh-client-default and procps-ng). Renovate never proposed an update for the base image. The dockerfile manager detects registry.osism.tech/dockerhub/python, but the Harbor proxy cache behind it returns an empty tag list, so the lookup finds nothing newer. Add a custom regex manager that reads PYTHON_VERSION and ALPINE_VERSION as one python:<version>-alpine<version> tag, looks it up on Docker Hub and writes both lines back. Regex versioning treats the Alpine version as part of the version instead of a fixed suffix, so Alpine releases are picked up as well. The dockerfile manager entry for the image is disabled, and separateMinorPatch keeps Python patch and Alpine updates apart from Python minor updates so they are not held back by an unmerged minor bump. Assisted-by: Claude:claude-opus-5-5 Signed-off-by: Christian Berendt <berendt@osism.tech>
berendt
force-pushed
the
update-alpine-3.24
branch
from
October 21, 2026 08:50
a6e8003 to
2415771
Compare
berendt
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The container image is still built on Alpine 3.21, which no longer gets new Python builds (
python:3.13-alpine3.21was last updated in December 2025). This moves the base image to Alpine 3.24, the current Alpine release, and lets Renovate keep it up to date from now on.Base image
ALPINE_VERSION: 3.21 → 3.24PYTHON_VERSION: 3.13.3 → 3.13.16. There is nopython:3.13.3-alpine3.24tag, so the Python patch version has to move as well. The minor version stays at 3.13.Every package installed with
apkis available in Alpine 3.24.openssh-clientandprocpsare still resolved through the packages that provide them (openssh-client-default,procps-ng).Renovate
Renovate already detects
registry.osism.tech/dockerhub/python 3.13.3-alpine3.21(see the Dependency Dashboard) but never proposed an update. The Harbor proxy cache behindregistry.osism.tech/dockerhubreturns an empty tag list, so the lookup finds nothing newer..github/renovate.jsonnow has a custom regex manager that:PYTHON_VERSIONandALPINE_VERSIONas one tag (3.13.16-alpine3.24) and writes both lines back,python) instead of the proxy cache,-alpine3.24would be a fixed suffix and Alpine releases would never be proposed.The
dockerfilemanager entry for the image is disabled so the image isn't tracked twice.separateMinorPatchkeeps Python patch and Alpine updates in their own PR, so an unmerged Python minor bump doesn't hold them back.A local
renovate --platform=local --dry-run=lookuprun confirms the behaviour:3.13.16/3.24(this PR)3.15.0-alpine3.243.13.14/3.23(simulated)3.13.16-alpine3.24(branch…-python-3.13.x), minor:3.15.0-alpine3.24(branch…-python-3.x)renovate-config-validatorpasses. Renovate's template engine renders the replacement asARG PYTHON_VERSION=3.13.16\nARG ALPINE_VERSION=3.24\n, which reads back as the new value.After this is merged, Renovate will open a PR for Python 3.15 (
3.15.0-alpine3.24). If Python minor upgrades of the image should stay manual, anallowedVersionsrule can pin them to 3.13.🤖 Generated with Claude Code