From 369be700e77e6381bfd22f34b85803fd0859ecc5 Mon Sep 17 00:00:00 2001 From: ethernet Date: Fri, 9 Oct 2026 13:29:27 -0400 Subject: [PATCH] ci(docker): pin Python 3.14 in the build and test image job The install stamp and profile boundary scripts ran on whatever python3 the runner image shipped. Set it up explicitly with actions/setup-python. --- .github/workflows/docker.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 4f8207c97f..5b0e29dcdf 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -170,6 +170,12 @@ jobs: # release, so the stamp needs both its ancestry and release tags. fetch-depth: 0 + # The stamp and boundary scripts run on the runner's python3, whose + # version depends on the runner image. Pin it instead of trusting it. + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + with: + python-version: "3.14" + - name: Write install stamp env: RELEASE_VERSION: ${{ needs.mode.outputs.release == 'true' && inputs.version || '' }}