[Snyk] Security upgrade python from 3.10-alpine to 3.12.3-alpine

CHANGES.rst

@@ -9,6 +9,12 @@ Changes
 
 Features / Changes
 ~~~~~~~~~~~~~~~~~~~~~
+* Pin ``crim-ca/pyramid_celery==5.0.0a`` fork
+  (`crim-ca/pyramid_celery@5.0.0a <https://github.com/crim-ca/pyramid_celery/tree/5.0.0a>`_)
+  to support Python 3.12 and other package cross-dependency improvements
+  (relates to `sontek/pyramid_celery#102 <https://github.com/sontek/pyramid_celery/pull/102>`_).
+* Pin ``threddsclient==0.4.6`` to support Python 3.12
+  (relates to `bird-house/threddsclient#17 <https://github.com/bird-house/threddsclient/pull/17>`_).
 * Pin ``urllib3>=2.2.2`` to address CVE-2024-37891.
 * Pin ``gunicorn>=22`` to address CVE-2024-1135.
 * Pin Docker base to ``python:3.11-alpine3.19`` for various security fixes.

docker/Dockerfile-base

@@ -1,4 +1,4 @@
-FROM python:3.11-alpine3.19
+FROM python:3.12.3-alpine
 LABEL description.short="Cowbird base"
 LABEL description.long="Cowbird middleware to manage interactions between various birds of the bird-house stack."
 LABEL Maintainer="Ouranos, CRIM"

requirements.txt

@@ -12,14 +12,15 @@ pastedeploy
 pymongo[srv]>=4.4,<5  # required to work with pinned celery
 pyramid>=1.10.2,<2
 pyramid_mako>=1.0.2
-pyramid_celery
+# see https://github.com/sontek/pyramid_celery/pull/102 to fix Python 3.12 support and other improvements
+pyramid_celery @ git+https://github.com/crim-ca/pyramid_celery.git@5.0.0a
 python-dotenv
 pyyaml>=5.1
 requests
 requests_file
 schema
 simplejson
-threddsclient==0.4.4
+threddsclient==0.4.6
 typing_extensions
 urllib3>=2.2.2
 watchdog>=4