chore: update Python version

Author: matiasb

.github/actions/setup-python/action.yml

@@ -18,9 +18,14 @@ runs:
       env:
         PYTHON_REQUIREMENTS_PATHS: ${{ inputs.python-requirements-paths }}
       with:
-        python-version: "3.12.11"
+        python-version: "3.13.11"
         cache: "pip"
         cache-dependency-path: ${{ env.PYTHON_REQUIREMENTS_PATHS }}
+    - name: Install system dependencies
+      shell: bash
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y libxml2-dev libxslt1-dev python3-dev
     - name: Install Python dependencies
       if: ${{ inputs.install-dependencies == 'true' }}
       shell: bash

engine/Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.12.11-alpine3.21@sha256:aed27d7387bcf51a8f43b4a5b998857591c7933caa405920267ad42fb609a6d5 AS base
+FROM python:3.13.11-alpine3.22 AS base
 ARG TARGETPLATFORM
 
 # Create a group and user to run an app
@@ -13,22 +13,18 @@ RUN apk add bash \
     pcre-dev \
     mariadb-connector-c-dev \
     libffi-dev \
+    libxslt-dev \
+    libxml2-dev \
     git \
     postgresql-dev
 
 WORKDIR /etc/app
 COPY ./requirements.txt ./
-COPY ./grpcio-1.64.1-cp312-cp312-linux_aarch64.whl ./
-
-# grpcio is not available for arm64 on pypi, so we need to install it from a local wheel
-# this can be removed once https://github.com/grpc/grpc/issues/34998 is resolved
-RUN if [ "$TARGETPLATFORM" = "linux/arm64" ]; then \
-    pip install grpcio-1.64.1-cp312-cp312-linux_aarch64.whl  \
-    && rm grpcio-1.64.1-cp312-cp312-linux_aarch64.whl; \
-    fi
 
 RUN pip install -U uv setuptools pip
 
+RUN uv python pin 3.13.11
+
 # TODO: figure out how to get this to work.. see comment in .github/workflows/e2e-tests.yml
 # https://stackoverflow.com/a/71846527
 # RUN --mount=type=cache,target=/root/.cache/pip,from=pip_cache pip install -r requirements.txt

engine/grpcio-1.64.1-cp312-cp312-linux_aarch64.whl

@@ -25,9 +25,7 @@ djangorestframework==3.15.2
 factory-boy<3.0
 drf-spectacular==0.28.0
 emoji==2.4.0
-# If the version of grpcio is changed
-# upload a new arm64 wheel instead of /engine/grpcio-1.57.0-cp311-cp311-linux_aarch64.whl
-grpcio==1.64.1
+grpcio==1.76.0
 fcm-django @ https://github.com/grafana/fcm-django/archive/refs/tags/v1.0.12r1.tar.gz#sha256=7ec7cd9d353fc9edf19a4acd4fa14090a31d83d02ac986c5e5e081dea29f564f
 hiredis==2.2.3
 humanize==4.10.0
@@ -46,7 +44,7 @@ opentelemetry-instrumentation-django==0.47b0
 phonenumbers==8.10.0
 prometheus_client==0.16.0
 psutil==5.9.4
-psycopg2==2.9.3
+psycopg2==2.9.11
 pymdown-extensions==10.0
 PyMySQL==1.1.1
 python-telegram-bot==22.5
@@ -59,7 +57,7 @@ slack_sdk==3.21.3
 social-auth-app-django==5.4.1
 twilio~=6.37.0
 urllib3==2.6.3
-uwsgi==2.0.28
+uwsgi==2.0.31
 whitenoise==5.3.0
 google-api-python-client==2.122.0
 google-auth-httplib2==0.2.0

engine/requirements.in

@@ -202,7 +202,7 @@ googleapis-common-protos==1.70.0
     #   opentelemetry-exporter-otlp-proto-grpc
 gprof2dot==2025.4.14
     # via django-silk
-grpcio==1.64.1
+grpcio==1.76.0
     # via
     #   -r requirements.in
     #   google-api-core
@@ -350,7 +350,7 @@ protobuf==4.25.8
     #   proto-plus
 psutil==5.9.4
     # via -r requirements.in
-psycopg2==2.9.3
+psycopg2==2.9.11
     # via -r requirements.in
 pyasn1==0.6.1
     # via
@@ -481,7 +481,7 @@ urllib3==2.6.3
     #   botocore
     #   django-anymail
     #   requests
-uwsgi==2.0.28
+uwsgi==2.0.31
     # via -r requirements.in
 vine==5.1.0
     # via

engine/requirements.txt

@@ -1,4 +1,4 @@
-FROM python:3.12.11-alpine3.21@sha256:aed27d7387bcf51a8f43b4a5b998857591c7933caa405920267ad42fb609a6d5
+FROM python:3.13.11-alpine3.22
 
 ENV PYTHONUNBUFFERED=1
 WORKDIR /app

tools/migrators/Dockerfile

@@ -60,7 +60,7 @@ six==1.17.0
     # via
     #   kubernetes
     #   python-dateutil
-urllib3==2.6.0
+urllib3==2.6.3
     # via
     #   kubernetes
     #   pdpyras