Skip to content

Commit ed2d440

Browse files
committed
fix: unpin uv version — install latest via pip
uv is a single static binary with no OS dependencies, so pinning provides little security value while requiring periodic bumps. Confidence: high Scope-risk: narrow
1 parent b42d661 commit ed2d440

4 files changed

Lines changed: 5 additions & 5 deletions

File tree

docs/container-builds.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ app/MyAgent/
4040
## Generated Dockerfile
4141

4242
The template uses `public.ecr.aws/docker/library/python:3.12-slim` as the base image (with `uv` installed via
43-
`pip install uv==0.11.14`) with these design choices:
43+
`pip install uv`) with these design choices:
4444

4545
- **Layer caching**: Dependencies (`pyproject.toml`) are installed before copying application code
4646
- **Non-root**: Runs as `bedrock_agentcore` (UID 1000)

src/assets/__tests__/__snapshots__/dockerfile-render.test.ts.snap

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
exports[`Dockerfile enableOtel rendering > renders opentelemetry-instrument CMD when enableOtel is true > Dockerfile-enableOtel-true 1`] = `
44
"FROM public.ecr.aws/docker/library/python:3.12-slim-bookworm
55
6-
RUN pip install --no-cache-dir uv==0.11.14
6+
RUN pip install --no-cache-dir uv
77
88
ARG UV_DEFAULT_INDEX
99
ARG UV_INDEX
@@ -43,7 +43,7 @@ CMD ["opentelemetry-instrument", "python", "-m", "main"]
4343
exports[`Dockerfile enableOtel rendering > renders plain python CMD when enableOtel is false > Dockerfile-enableOtel-false 1`] = `
4444
"FROM public.ecr.aws/docker/library/python:3.12-slim-bookworm
4545
46-
RUN pip install --no-cache-dir uv==0.11.14
46+
RUN pip install --no-cache-dir uv
4747
4848
ARG UV_DEFAULT_INDEX
4949
ARG UV_INDEX

src/assets/container/python/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
FROM public.ecr.aws/docker/library/python:3.12-slim-bookworm
22

3-
RUN pip install --no-cache-dir uv==0.11.14
3+
RUN pip install --no-cache-dir uv
44

55
ARG UV_DEFAULT_INDEX
66
ARG UV_INDEX

src/cli/commands/import/actions.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -384,7 +384,7 @@ export async function handleImport(options: ImportOptions): Promise<ImportResult
384384
destDockerfile,
385385
[
386386
'FROM public.ecr.aws/docker/library/python:3.12-slim-bookworm',
387-
'RUN pip install --no-cache-dir uv==0.11.14',
387+
'RUN pip install --no-cache-dir uv',
388388
'WORKDIR /app',
389389
'',
390390
'ENV UV_SYSTEM_PYTHON=1 \\',

0 commit comments

Comments
 (0)