bito-code-review[bot] commented on PR #42045: URL: https://github.com/apache/superset/pull/42045#issuecomment-4976622928
<!-- Bito Reply --> The flagged issue is correct. Using a floating tag like `3.11-slim-trixie` in a Dockerfile used for release builds introduces non-determinism, as the underlying image can change over time, leading to unreproducible artifacts. To resolve this, you should pin the base image to a specific patch version, matching the approach used in the main `Dockerfile`. Since I do not have access to the actual `RELEASING/Dockerfile.from_local_tarball` file in this environment, I cannot apply the fix directly. However, you should update line 17 of that file to use a pinned version, for example: ```dockerfile # Change this: FROM python:3.11-slim-trixie # To this (using the specific version pinned in your main Dockerfile): FROM python:3.11.14-slim-trixie ``` Regarding other comments on this PR: I have checked the provided `pr_comments.csv` file, but it appears to be empty (containing only the header row). Therefore, there are no other comments to address. **RELEASING/Dockerfile.from_local_tarball** ``` FROM python:3.11.14-slim-trixie ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
