[Snyk] Security upgrade python from 3.13.2-slim to 3.14.1-slim

[simcax]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/Dockerfile

We recommend upgrading to python:3.14.1-slim, as this image has only 23 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	CVE-2025-6965 SNYK-DEBIAN12-SQLITE3-10753055	714
	Heap-based Buffer Overflow SNYK-DEBIAN12-GNUTLS28-10690985	614
	Double Free SNYK-DEBIAN12-GNUTLS28-10690987	614
	Improper Certificate Validation SNYK-DEBIAN12-PERL-5489190	614
	Race Condition SNYK-DEBIAN12-SYSTEMD-10264074	514

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Heap-based Buffer Overflow
🦉 Double Free

[Copilot]

Pull request overview

This PR is an automated security upgrade created by Snyk to update the Python base image from 3.13.2-slim to 3.14.1-slim in the Dockerfile. The upgrade aims to fix 5 security vulnerabilities including a critical SQLite CVE and high-severity issues in gnutls28 and Perl. However, there are critical issues with this upgrade that will likely prevent it from working.

Key Issues:

• Python 3.14.1 does not appear to be a released version (as of January 2025, Python 3.14 has not been officially released)
• The project's pyproject.toml specifies requires-python = "~=3.11", which is incompatible with Python 3.14.x

Changes:

• Updated builder stage base image to python:3.14.1-slim
• Updated runtime stage base image to python:3.14.1-slim

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.