Skip to content

chore(deps): Bump python from 3.12-slim to 3.14-slim in /http - #2

Merged
mhaya merged 1 commit into
mainfrom
dependabot/docker/http/python-3.14-slim
Sep 1, 2026
Merged

chore(deps): Bump python from 3.12-slim to 3.14-slim in /http#2
mhaya merged 1 commit into
mainfrom
dependabot/docker/http/python-3.14-slim

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps python from 3.12-slim to 3.14-slim.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps python from 3.12-slim to 3.14-slim.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Aug 29, 2026
@mhaya

mhaya commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

手元で実際にイメージを建てて動かして確かめた。3.14 で問題なく動く。

ビルド — 依存はすべて 3.14 の wheel が揃っており、ソースからのビルドは発生しなかった。

mcp-1.26.0  pyjwt-2.13.0  cryptography-50.0.1  httpx-0.28.1  uvicorn-0.52.4
pydantic-2.13.5  pydantic-core-2.46.5  starlette-1.6.0  anyio-4.14.2

心配していたのは pyjwt[crypto] が引く cryptography だが、cryptography-50.0.1
wheel がそのまま入った(ビルドツールチェーンは要らない)。

起動python3 -VVPython 3.14.7。コンテナを起動して両方の入口を叩いた。

確認 結果
起動ログ(版・canonical URI・auth mode・監査ログ・/mcp-auth 3.12 と同一
GET /.well-known/oauth-protected-resource/mcp 200scopes_supported: ["mcp:read"]
未認証で tools/call whoami 401WWW-Authenticate: Bearer error="invalid_token", scope="mcp:read", resource_metadata=…

起動時の警告について — 3.14 では pydantic-settings が次を出す。

IncompleteFieldDefinitionWarning: Field 'lifespan' has an incomplete definition:
its annotation contains an unresolved forward reference …

これは 3.12 でも同じように出る(同じ pydantic-settings 2.15.0)ので、この更新が
持ち込んだものではない。出どころは mcp パッケージ側で、こちらのコードではない。

checks の fail について — この PR が立った時点の base に残っていた
.github/workflows/{check,docs} が、組織の課金で job が起動せず 2 秒で落ちているだけである。
9646ddf「CI を廃し、検査と公開を手元のスクリプトに一本化する」で main から削除済みなので、
rebase すればチェックごと消える。代わりに手元の bash tools/check.sh を実行した
(5 PASS / 0 FAIL / 1 SKIP、SKIP は mkdocs 未インストールによるサイトのビルド)。

🤖 Generated with Claude Code

https://claude.ai/code/session_01Q8JRRjYWae72L6ixTam46k

@mhaya
mhaya merged commit 3e1e0ad into main Sep 1, 2026
1 check failed
@mhaya
mhaya deleted the dependabot/docker/http/python-3.14-slim branch September 1, 2026 01:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update docker code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant