Update all the versions

Dockerfile

@@ -12,8 +12,7 @@ RUN apt-get -y update \
         protobuf-compiler \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone -b master --single-branch https://github.com/google/nsjail.git . \
-    && git checkout dccf911fd2659e7b08ce9507c25b2b38ec2c5800
+RUN git clone -b 3.4 --depth 1 https://github.com/google/nsjail.git .
 RUN make
 
 # ------------------------------------------------------------------------------
@@ -29,20 +28,23 @@ RUN apt-get -y update \
         tk-dev \
     && rm -rf /var/lib/apt/lists/*
 
-RUN git clone -b v2.6.5 --depth 1 https://github.com/pyenv/pyenv.git $PYENV_ROOT
+RUN git clone -b v2.6.7 --depth 1 https://github.com/pyenv/pyenv.git $PYENV_ROOT
 
 COPY --link scripts/build_python.sh /
 
 # ------------------------------------------------------------------------------
 FROM builder-py-base AS builder-py-3_13
-RUN /build_python.sh 3.13.5
+RUN /build_python.sh 3.13.6
 # ------------------------------------------------------------------------------
 FROM builder-py-base AS builder-py-3_13t
-# This can't be bumped to latest until https://github.com/python/cpython/issues/135734 is resolved.
-RUN /build_python.sh 3.13.2t
+# https://github.com/python/cpython/issues/135734 will be released in 3.13.8
+# until then test-modules cannot be disabled for free-threaded 3.13.
+ENV PYTHON_CONFIGURE_OPTS='--enable-optimizations --with-lto \
+    --with-system-expat --without-ensurepip'
+RUN /build_python.sh 3.13.6t
 # ------------------------------------------------------------------------------
 FROM builder-py-base AS builder-py-3_14
-RUN /build_python.sh 3.14.0rc1
+RUN /build_python.sh 3.14.0rc2
 # ------------------------------------------------------------------------------
 FROM python:3.13-slim-bookworm AS base
 

requirements/eval-deps.pip

@@ -11,7 +11,7 @@ forbiddenfruit~=0.1
 fuzzywuzzy~=0.18
 kaleido~=0.2
 lark~=1.2
-matplotlib~=3.10; python_version == "3.13"
+matplotlib~=3.10.5
 more-itertools~=10.7
 networkx~=3.5
 numpy~=2.3