Skip to content

Bump python from 3.12.8-slim-bookworm to 3.14.6-slim-bookworm - #91

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/docker/python-3.14.7-slim-bookworm
Open

Bump python from 3.12.8-slim-bookworm to 3.14.6-slim-bookworm#91
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/docker/python-3.14.7-slim-bookworm

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps python from 3.12.8-slim-bookworm to 3.14.6-slim-bookworm.

@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: docker. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 17, 2026
@dependabot dependabot Bot changed the title Bump python from 3.12.8-slim-bookworm to 3.14.7-slim-bookworm Bump python from 3.12.8-slim-bookworm to 3.14.6-slim-bookworm Aug 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/docker/python-3.14.7-slim-bookworm branch from 7e5b2c0 to a65e837 Compare August 25, 2026 13:33
Bumps python from 3.12.8-slim-bookworm to 3.14.6-slim-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.14.7-slim-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/docker/python-3.14.7-slim-bookworm branch from a65e837 to beb4731 Compare August 25, 2026 13:35
blspy 2.0.3 ships wheels only up to cp312 and its C++ bindings no longer
compile on CPython >= 3.13 (`_PyLong_AsByteArray` gained a `flags`
argument); upstream Chia-Network/bls-signatures is declared unmaintained,
so the python:3.14 bump broke the docker build at `pip install`.

pyblst (bindings to supranational blst) ships cp310–cp314 wheels and
exposes the primitives drand quicknet's min-sig verification needs:
uncompress, hash_to_group with the standard DST, miller_loop and
final_verify. `_verify_bls` now computes the same pairing check
e(sig, G2_gen) == e(H(msg), pk) through those, keeping the graceful
degradation when the module is absent. Verified against live quicknet
beacons on 3.14.6 (valid round -> True, wrong round -> False, ~1–5 ms).

Dockerfile: drop cmake from the builder deps (only blspy needed it);
keep build-essential because asyncpg 0.30.0 has no cp314 wheel and
compiles from source.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants