⬆️(docker) upgrade backend image to python 3.13

Python 3.13 is now stable, our libraries are compatible with it. We also
upgrade the alpine version used in order to fix CVE related to libxml2

.github/workflows/crowdin_upload.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Install Python
         uses: actions/setup-python@v3
         with:
-          python-version: "3.12.6"
+          python-version: "3.13.3"
       - name: Upgrade pip and setuptools
         run: pip install --upgrade pip setuptools
       - name: Install development dependencies

.github/workflows/impress.yml

@@ -91,7 +91,7 @@ jobs:
       - name: Install Python
         uses: actions/setup-python@v3
         with:
-          python-version: "3.12.6"
+          python-version: "3.13.3"
       - name: Upgrade pip and setuptools
         run: pip install --upgrade pip setuptools
       - name: Install development dependencies
@@ -186,7 +186,7 @@ jobs:
       - name: Install Python
         uses: actions/setup-python@v3
         with:
-          python-version: "3.12.6"
+          python-version: "3.13.3"
 
       - name: Install development dependencies
         run: pip install --user .[dev]

CHANGELOG.md

@@ -20,6 +20,8 @@ and this project adheres to
 
 - 📝(frontend) Update documentation
 - ✅(frontend) Improve tests coverage
+- ⬆️(docker) upgrade backend image to python 3.13 #973
+
 
 ### Removed
 

Dockerfile

@@ -1,7 +1,7 @@
 # Django impress
 
 # ---- base image to inherit from ----
-FROM python:3.12.6-alpine3.20 AS base
+FROM python:3.13.3-alpine AS base
 
 # Upgrade pip to its latest release to speed up dependencies installation
 RUN python -m pip install --upgrade pip setuptools
@@ -30,7 +30,7 @@ RUN mkdir /install && \
 
 
 # ---- mails ----
-FROM node:20 AS mail-builder
+FROM node:24 AS mail-builder
 
 COPY ./src/mail /mail/app
 
@@ -139,6 +139,9 @@ CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
 # ---- Production image ----
 FROM core AS backend-production
 
+# Remove apk cache, we don't need it anymore
+RUN rm -rf /var/cache/apk/*
+
 ARG IMPRESS_STATIC_ROOT=/data/static
 
 # Gunicorn

src/backend/core/tests/documents/test_api_documents_attachment_upload.py

@@ -410,5 +410,9 @@ def test_api_documents_attachment_upload_unsafe():
         "is_unsafe": "true",
         "status": "processing",
     }
-    assert file_head["ContentType"] == "application/octet-stream"
+    # Depending the libmagic version, the content type may change.
+    assert file_head["ContentType"] in [
+        "application/x-dosexec",
+        "application/octet-stream",
+    ]
     assert file_head["ContentDisposition"] == 'attachment; filename="script.exe"'