[Snyk] Security upgrade python from 3.10.4 to 3.14.3

[ashmuck]

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile

We recommend upgrading to python:3.14.3, as this image has only 293 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-DEBIAN11-GLIBC-5927133	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	Out-of-bounds Write SNYK-DEBIAN11-LIBWEBP-5893094	829
	CVE-2023-44487 SNYK-DEBIAN11-NGHTTP2-5953384	829

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-bounds Write

---

Note

Medium Risk
Changes the Docker base image Python runtime, which can affect dependency compatibility and runtime behavior despite being a small diff.

Overview
Updates the Dockerfile to use python:3.14.3 instead of python:3.10.4, primarily to pick up upstream security fixes in the base image.

^{Written by Cursor Bugbot for commit 1ab69d8. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[cursor]

Major Python version jump to untested 3.14 runtime

High Severity

The base image jumps from python:3.10.4 to python:3.14.3, skipping four minor versions. The project's pyproject.toml classifiers only declare support up to Python 3.13, and tox.ini only tests through py313 — meaning Python 3.14 has never been validated in CI. Python 3.14 removed several deprecated APIs (in asyncio, importlib.abc, ast, etc.) that could cause runtime failures. Additionally, the pinned dependency msgpack-numpy==0.4.4.3 (from 2019) was never tested against Python 3.14 and may break at runtime despite installing cleanly as a pure-Python wheel.