You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Upgrading from the python:3.8.3-alpine3.12 image to python:3.8.4-alpine3.12 results in a major upgrade of the provided setuptools from 47.1.1 to 49.2.0
This means that this "bugfix" release upgrade which includes security patches also makes a backwards incompatible change making it difficult for consumers of this image to perform security updates.
The text was updated successfully, but these errors were encountered:
Further, it occurs to me that if I was simply using the python:3.8-alpine3.12 or python:3.8-alpine tags then this would have manifested even worse, as a silent breakage of my builds without changing anything.
Hmm, we don't update setuptools directly, but it seems that get-pip.py just pulls the newest regardless of pip version being installed (the two images are installing the same version of pip).
Upgrading from the
python:3.8.3-alpine3.12
image topython:3.8.4-alpine3.12
results in a major upgrade of the providedsetuptools
from47.1.1
to49.2.0
This means that this "bugfix" release upgrade which includes security patches also makes a backwards incompatible change making it difficult for consumers of this image to perform security updates.
The text was updated successfully, but these errors were encountered: