chore(docker): bump python from 3.14.7-slim to 3.15.0rc3-slim in /docker

[dependabot]

Bumps python from 3.14.7-slim to 3.15.0rc3-slim.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Summary by cubic

Reverts the dependabot bump to python:3.15.0rc3-slim, leaving the Docker base image on the stable python:3.14.7-slim in docker/Dockerfile. No effective changes remain in this PR.

^{Written for commit 5c6ebf0. Summary will update on new commits.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: JWEB0689/coderabbit/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 1f68717d-db81-42c9-8502-e28f5ed5f87b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Failed to generate code suggestions for PR

[kilo-code-bot]

🔥 The Roast: This PR swaps the production base image to python:3.15.0rc3-slim — a release candidate. "RC" stands for "release candidate", as in "not actually released yet". Dependabot filed this as version-update:semver-minor, because nothing says minor like replacing the entire Python runtime underneath every downstream stage (github_app, gitlab_webhook, test, cli...). And since cp315 wheels won't exist until 3.15 final, uv sync --frozen will fall back to source builds on a slim image with no compiler, so CI gets to discover 3.15 incompatibilities the hard way. I've written this exact "just bump the tag" diff and I'm still ashamed.

🩹 The Fix: Hold the base image on the 3.14.x stable line until 3.15.0 final ships, then let Dependabot re-bump to the stable tag; if the RC must be exercised now, do it on a throwaway branch with a green CI run, not in the image every server stage inherits.

Suggested change

	FROM python:3.15.0rc3-slim AS base
	FROM python:3.14.7-slim AS base

📏 Severity: warning

---

Reply with @kilocode-bot fix it to have Kilo Code address this issue.

[JWEB0689]

Fixed in 5c6ebf0.

[kilo-code-bot]

Code Review Roast 🔥

Verdict: No Issues Found | Recommendation: Merge

Oh wait, this PR is actually clean. I need to sit down. I had my flamethrower warmed up and everything.

The previous review flagged python:3.15.0rc3-slim as a pre-release base image, and commit 5c6ebf0a reverted it back to the stable python:3.14.7-slim line. The only changed line in this incremental diff is line 1 of docker/Dockerfile, and it's now a stable tag — no RC, no moving target, no wheel-ecosystem roulette. Dependabot can go bump itself.

📊 Overall: Like finding a unicorn in production — I didn't think clean PRs existed anymore, but here we are.

Files Reviewed (1 files)

• docker/Dockerfile - 0 issues

Previous Review Summary (commit 96b4ec0)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 96b4ec0)

Verdict: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
🚨 critical	0
⚠️ warning	1
💡 suggestion	0
🤏 nitpick	0

Issue Details (click to expand)

File	Line	Roast
docker/Dockerfile	1	Production base image pinned to Python 3.15.0rc3 — a release candidate whose ABI and wheel ecosystem aren't stable yet, inherited by every downstream stage

---

🏆 Best part: The LITELLM_LOCAL_MODEL_COST_MAP hardening and per-file COPY layering in this Dockerfile show genuine reproducibility discipline — too good to be underpinned by an RC tag.

💀 Worst part: FROM python:3.15.0rc3-slim — a moving-target release candidate as the foundation of every image, filed as a cozy version-update:semver-minor.

📊 Overall: Like swapping a house's foundation under a "minor renovation" permit — structurally bold, timing questionable.

Files Reviewed (1 files)

• docker/Dockerfile - 1 issue

Fix these issues in Kilo Cloud

---

_{Reviewed by free · Input: 69.4K · Output: 1.5K · Cached: 122.4K}

[JWEB0689]

/review

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

⚠️ Risk level: Medium

✅ Merge recommendation: Needs review

📂 Priority files docker/Dockerfile

🏅 Score: 75

🧪 No relevant tests

🔒 No security concerns identified

✅ No TODO sections

🔀 No multiple PR themes

[JWEB0689]

/improve

[JWEB0689]

@cubic-dev-ai review