From 86f7cd00a1a82c4aa4b6a84af6b172274837c58d Mon Sep 17 00:00:00 2001
From: Peter Dave Hello <hsu@peterdavehello.org>
Date: Tue, 9 Dec 2025 04:43:24 +0800
Subject: [PATCH] Update Docker Python base images to 3.11.14 bookworm

Switch Docker base images to Python v3.11.14 slim-bookworm because the
official Python images no longer ship slim-bullseye. Keeps Python
3.11.12-3.11.14 security fixes (libexpat, tarfile filters, zip64,
setuptools CVEs) on a supported Debian base.

Refs:
- https://www.python.org/downloads/release/python-31114/
- https://www.python.org/downloads/release/python-31113/
- https://www.python.org/downloads/release/python-31112/
---
 docker/Dockerfile                   | 4 ++--
 docker/arm.Dockerfile               | 4 ++--
 docker/root-with-sshd.Dockerfile    | 4 ++--
 docker/user-with-api-key.Dockerfile | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index bb78e1c..7f18fd4 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11.11-slim-bullseye AS builder
+FROM python:3.11.14-slim-bookworm AS builder
 
 WORKDIR /app
 
@@ -21,7 +21,7 @@ RUN ./venv/bin/pip install Babel==2.12.1 && ./venv/bin/python scripts/compile_lo
   && ./venv/bin/pip install . \
   && ./venv/bin/pip cache purge
 
-FROM python:3.11.11-slim-bullseye
+FROM python:3.11.14-slim-bookworm
 
 ARG with_models=false
 ARG models=""
diff --git a/docker/arm.Dockerfile b/docker/arm.Dockerfile
index e9e7647..2f88e67 100644
--- a/docker/arm.Dockerfile
+++ b/docker/arm.Dockerfile
@@ -1,4 +1,4 @@
-FROM arm64v8/python:3.11.11-slim-bullseye as builder
+FROM arm64v8/python:3.11.14-slim-bookworm as builder
 
 WORKDIR /app
 
@@ -21,7 +21,7 @@ RUN ./venv/bin/pip install Babel==2.12.1 && ./venv/bin/python scripts/compile_lo
   && ./venv/bin/pip install . \
   && ./venv/bin/pip cache purge
 
-FROM arm64v8/python:3.11.11-slim-bullseye
+FROM arm64v8/python:3.11.14-slim-bookworm
 
 ARG with_models=false
 ARG models=""
diff --git a/docker/root-with-sshd.Dockerfile b/docker/root-with-sshd.Dockerfile
index 90b5579..aa4c50c 100644
--- a/docker/root-with-sshd.Dockerfile
+++ b/docker/root-with-sshd.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11.11-slim-bullseye AS builder
+FROM python:3.11.14-slim-bookworm AS builder
 
 WORKDIR /app
 
@@ -26,7 +26,7 @@ RUN <<EOF
   ./venv/bin/pip cache purge
 EOF
 
-FROM python:3.11.11-slim-bullseye
+FROM python:3.11.14-slim-bookworm
 
 ARG with_models=false
 ARG models=""
diff --git a/docker/user-with-api-key.Dockerfile b/docker/user-with-api-key.Dockerfile
index 228ad5b..1510fe5 100644
--- a/docker/user-with-api-key.Dockerfile
+++ b/docker/user-with-api-key.Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11.11-slim-bullseye AS builder
+FROM python:3.11.14-slim-bookworm AS builder
 
 WORKDIR /app
 
@@ -26,7 +26,7 @@ RUN <<EOF
   ./venv/bin/pip cache purge
 EOF
 
-FROM python:3.11.11-slim-bullseye
+FROM python:3.11.14-slim-bookworm
 
 ARG with_models=false
 ARG models=""