chore(deps): update docker.io/library/python docker tag to v3.15

Reviewed-on: #66

.gitea/workflows/tag.yaml

@@ -96,11 +96,22 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           pull: true
 
+  release:
+    # Publishes the Gitea release for this tag (body = commits since the previous
+    # tag). Renovate copies that body into the bump PR in
+    # perso_private/tf-depl-kubernetes under "Release Notes"; without a release
+    # that section stays empty (bare "Compare Source" link).
+    needs: [build-push]
+    uses: perso/gitea-pipelines/.gitea/workflows/gitea-release.yaml@main
+    with:
+      image: jcabillot/mcp-maildir
+    secrets: inherit
+
   trigger-renovate:
     # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
     # Renovate instance only scans hourly, so this dispatch opens the image bump
     # PR within minutes of the release instead of up to an hour later.
-    needs: [build-push]
+    needs: [build-push, release]
     runs-on: ubuntu-latest
     steps:
       - name: Trigger Renovate on perso_private/tf-depl-kubernetes

pkg/Dockerfile

@@ -1,5 +1,5 @@
 # 3.13, because with 3.14 it requires gcc (wheels not available)
-FROM docker.io/library/python:3.14-slim
+FROM docker.io/library/python:3.15-slim
 
 # Set environment variables
 ENV PYTHONDONTWRITEBYTECODE=1