From 788b8bb46119e6374e717fd3f1f132230d53e219 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 14 Nov 2026 10:58:15 +0000
Subject: [PATCH] build(deps): bump python in /packaging

Bumps python from 3.12-slim-bookworm to 3.15-slim-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-version: 3.15-slim-bookworm
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packaging/Dockerfile       | 2 +-
 packaging/Dockerfile.proxy | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packaging/Dockerfile b/packaging/Dockerfile
index b7e25ce..f4a7574 100644
--- a/packaging/Dockerfile
+++ b/packaging/Dockerfile
@@ -7,7 +7,7 @@
 # and it does NOT run ClamAV on-access (fanotify) protection. Optional container
 # monitoring reads the Docker API through the separate GET-only proxy image
 # (packaging/Dockerfile.proxy, docker-compose.container.yml).
-FROM python:3.12-slim-bookworm
+FROM python:3.15-slim-bookworm
 
 # Build-time Debian mirror override, e.g.
 #   docker compose build --build-arg DEBIAN_MIRROR=http://mirrors.ustc.edu.cn
diff --git a/packaging/Dockerfile.proxy b/packaging/Dockerfile.proxy
index c4a8961..e1ffa10 100644
--- a/packaging/Dockerfile.proxy
+++ b/packaging/Dockerfile.proxy
@@ -2,7 +2,7 @@
 #
 # A deliberately tiny image. It receives the Docker socket and exposes only an
 # allowlisted GET API to lsec over an internal-only network.
-FROM python:3.12-slim-bookworm
+FROM python:3.15-slim-bookworm
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
     PYTHONUNBUFFERED=1 \