fix: rollback to python 3.13 (#7269)

ferrarimarco · web-flow · commit 10265f11c890 · 2025-12-09T19:45:16.000+01:00
- rollback to python 3.13 to fix cfn-lint runtime errors
- add npm-groovy-lint to the npm dependabot group
- fix clang-format stage build errors after updating to alpine 3.23
- explicitly cache the python-base stage to avoid that stages use an old
  cached version of that stage
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -53,6 +53,7 @@ updates:
           - "commitlint"
           - "eslint-config*"
           - "eslint-plugin*"
+          - npm-groovy-lint
           - "react*"
           - "stylelint*"
           - "textlint*"
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -23,6 +23,7 @@ jobs:
       fail-fast: false
       matrix:
         stages:
+          - stage-name: python-base
           - stage-name: base_image
           - stage-name: clang-format
           - stage-name: python-builder
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -88,6 +88,7 @@ jobs:
       fail-fast: false
       matrix:
         stages:
+          - stage-name: python-base
           - stage-name: base_image
           - stage-name: clang-format
           - stage-name: python-builder
diff --git a/Dockerfile b/Dockerfile
@@ -32,21 +32,21 @@ FROM composer/composer:2.9.1 AS php-composer
 FROM ghcr.io/aquasecurity/trivy:0.67.2 AS trivy
 FROM ghcr.io/yannh/kubeconform:v0.7.0 AS kubeconform
 
-FROM python:3.14.0-alpine3.22 AS python-base
+FROM python:3.13.11-alpine3.23 AS python-base
 
 FROM python-base AS clang-format
 
 RUN apk add --no-cache \
   build-base \
-  clang20 \
+  clang21 \
   cmake \
   git \
-  llvm20-dev \
+  llvm21-dev \
   ninja-is-really-ninja
 
 WORKDIR /tmp
 RUN git clone \
-  --branch "llvmorg-$(llvm-config  --version)" \
+  --branch "llvmorg-$(llvm21-config  --version)" \
   --depth 1 \
   https://github.com/llvm/llvm-project.git
 
