chore(deps): update docker.io/library/python docker tag to v3.15

.gitea/workflows/cron.yaml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run unit tests
@@ -57,7 +57,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run integration tests

.gitea/workflows/docker-build.yaml

@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: |
           pip install -r requirements.txt pytest
@@ -61,7 +61,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: |
           pip install -r requirements.txt pytest

.gitea/workflows/main.yaml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest ruff==0.17.1
       - name: Lint (undefined names)
@@ -74,7 +74,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run integration tests

.gitea/workflows/pr.yaml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run unit tests

.gitea/workflows/tag.yaml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run unit tests
@@ -57,7 +57,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
         with:
-          python-version: "3.15"
+          python-version: "3.14"
       - name: Install dependencies
         run: pip install -r requirements.txt pytest
       - name: Run integration tests
@@ -95,22 +95,3 @@ jobs:
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           pull: true
-
-  trigger-renovate:
-    # The deployment repo perso_private/tf-depl-kubernetes pins this image; its
-    # Renovate instance only scans hourly, so this dispatch opens the image bump
-    # PR within minutes of the release instead of up to an hour later.
-    needs: [build-push]
-    runs-on: ubuntu-latest
-    steps:
-      - name: Trigger Renovate on perso_private/tf-depl-kubernetes
-        # needs: build-push — Renovate reads Docker Hub, so a scan started before
-        # the push lands would only see the previous release.
-        # RENOVATE_TOKEN is the org-level secret of this organisation.
-        run: |
-          curl -sS -f -X POST \
-            -u "renovate:${{ secrets.RENOVATE_TOKEN }}" \
-            -H "Content-Type: application/json" \
-            -d '{{"ref":"main"}}' \
-            "https://scm.cabillot.eu/api/v1/repos/perso_private/tf-depl-kubernetes/actions/workflows/renovate.yaml/dispatches"
-          echo "Renovate dispatched on perso_private/tf-depl-kubernetes"

pkg/Dockerfile

@@ -1,5 +1,5 @@
 # 3.13, because with 3.14 it requires gcc (wheels not available)
-FROM docker.io/library/python:3.14-slim
+FROM docker.io/library/python:3.15-slim
 
 # Set environment variables
 ENV PYTHONDONTWRITEBYTECODE=1