From 2dc56426900b17d529bc9cc6139ff392d2dfbd29 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 May 2026 20:36:10 +0000
Subject: [PATCH] chore(docker)(deps): bump the docker-all group across 1
 directory with 4 updates

Bumps the docker-all group with 4 updates in the /docker directory: node, python, [astral-sh/uv](https://github.com/astral-sh/uv) and nginx.


Updates `node` from 20-alpine to 26-alpine

Updates `python` from 3.12-slim-bookworm to 3.14-slim-bookworm

Updates `astral-sh/uv` from 0.5-python3.12-bookworm-slim to 0.9-python3.12-bookworm-slim
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.5.0...0.9.0)

Updates `nginx` from 1.27-alpine to 1.31-alpine

---
updated-dependencies:
- dependency-name: astral-sh/uv
  dependency-version: 0.9-python3.12-bookworm-slim
  dependency-type: direct:production
  dependency-group: docker-all
- dependency-name: nginx
  dependency-version: 1.31-alpine
  dependency-type: direct:production
  dependency-group: docker-all
- dependency-name: node
  dependency-version: 26-alpine
  dependency-type: direct:production
  dependency-group: docker-all
- dependency-name: python
  dependency-version: 3.14-slim-bookworm
  dependency-type: direct:production
  dependency-group: docker-all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 docker/all-in-one.Dockerfile | 6 +++---
 docker/api.Dockerfile        | 4 ++--
 docker/web.Dockerfile        | 4 ++--
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/docker/all-in-one.Dockerfile b/docker/all-in-one.Dockerfile
index fb3eff2..645f042 100644
--- a/docker/all-in-one.Dockerfile
+++ b/docker/all-in-one.Dockerfile
@@ -14,7 +14,7 @@
 #     -t cigarspace:demo .
 
 # --- 1. Build the SPA --------------------------------------------------------
-FROM node:20-alpine AS web-builder
+FROM node:26-alpine AS web-builder
 WORKDIR /web
 COPY web/package.json web/package-lock.json* web/.npmrc* ./
 RUN npm install --no-audit --no-fund
@@ -22,7 +22,7 @@ COPY web/. ./
 RUN npm run build
 
 # --- 2. Resolve Python deps + install package -------------------------------
-FROM python:3.12-slim AS py-builder
+FROM python:3.14-slim AS py-builder
 ENV PIP_NO_CACHE_DIR=1 PYTHONDONTWRITEBYTECODE=1
 RUN apt-get update && \
     apt-get install -y --no-install-recommends build-essential libpq-dev curl && \
@@ -37,7 +37,7 @@ RUN uv sync --no-dev --frozen --no-install-project && \
     uv pip install --no-deps -e .
 
 # --- 3a. Light runtime — API + worker + web (no embedded data services) -----
-FROM python:3.12-slim AS light
+FROM python:3.14-slim AS light
 ENV PYTHONUNBUFFERED=1 \
     PATH="/app/.venv/bin:$PATH" \
     APP_ENV=prod \
diff --git a/docker/api.Dockerfile b/docker/api.Dockerfile
index 83d81a4..d5d6448 100644
--- a/docker/api.Dockerfile
+++ b/docker/api.Dockerfile
@@ -3,7 +3,7 @@
 # ---------------------------------------------------------------------------
 # Stage 1 — Builder: install Python deps via uv into a virtualenv
 # ---------------------------------------------------------------------------
-FROM ghcr.io/astral-sh/uv:0.5-python3.12-bookworm-slim AS builder
+FROM ghcr.io/astral-sh/uv:0.9-python3.12-bookworm-slim AS builder
 
 ENV UV_COMPILE_BYTECODE=1 \
     UV_LINK_MODE=copy \
@@ -25,7 +25,7 @@ RUN --mount=type=cache,target=/root/.cache/uv \
 # ---------------------------------------------------------------------------
 # Stage 2 — Runtime: minimal slim image with the virtualenv copied in
 # ---------------------------------------------------------------------------
-FROM python:3.12-slim-bookworm AS runtime
+FROM python:3.14-slim-bookworm AS runtime
 
 ENV PYTHONUNBUFFERED=1 \
     PYTHONDONTWRITEBYTECODE=1 \
diff --git a/docker/web.Dockerfile b/docker/web.Dockerfile
index c7b72e2..413e2d1 100644
--- a/docker/web.Dockerfile
+++ b/docker/web.Dockerfile
@@ -1,5 +1,5 @@
 # --- Build stage -----------------------------------------------------------
-FROM node:20-alpine AS build
+FROM node:26-alpine AS build
 WORKDIR /app
 
 COPY package.json package-lock.json* .npmrc* ./
@@ -12,7 +12,7 @@ COPY public ./public
 RUN npm run build
 
 # --- Runtime stage ---------------------------------------------------------
-FROM nginx:1.27-alpine AS runtime
+FROM nginx:1.31-alpine AS runtime
 COPY --from=build /app/dist /usr/share/nginx/html
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 EXPOSE 80