[Snyk] Security upgrade python from 3.13.1-alpine to 3.14.2-alpine

[kevin-benton]

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• docker/python-plotting/Dockerfile

We recommend upgrading to python:3.14.2-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Integer Overflow or Wraparound SNYK-ALPINE321-SQLITE-12675067	264
	CVE-2025-6965 SNYK-ALPINE321-SQLITE-11191065	263
	Integer Overflow or Wraparound SNYK-ALPINE321-SQLITE-9712340	161
	CVE-2025-26519 SNYK-ALPINE321-MUSL-8720634	139
	CVE-2025-26519 SNYK-ALPINE321-MUSL-8720634	139

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Integer Overflow or Wraparound

[kevin-benton]

This upgrade to Python 3.14 introduces a significant breaking change.

Highlights:

• Breaking Change: Code using return, break, or continue to exit a finally block will now raise a SyntaxError. This is part of PEP 765 and will require code modification. [5, 6]
• Other Changes: The release also officially supports free-threaded (no-GIL) Python, defers the evaluation of type annotations, and adds a new zstd compression module. [1, 2, 5]

Source: Python 3.14 Release Notes
Recommendation: Before merging, search your codebase for any return, break, or continue statements within finally blocks and refactor them.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[Copilot]

Pull request overview

This PR upgrades the Python base image in the plotting Dockerfile from version 3.13.1-alpine to 3.14.2-alpine to address critical and high severity security vulnerabilities in Alpine Linux dependencies (sqlite and musl).

Changes:

• Updates the Python Docker base image version to resolve 4 security vulnerabilities with severity scores ranging from 139 to 264

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[adthrasher]

The corresponding package.json needs to have the version updated. All references to the image also need to be bumped to the new version.