From e0c1ea484e11b2d69b1772b54ed32ca11c413846 Mon Sep 17 00:00:00 2001
From: pedrooot <pedromarting3@gmail.com>
Date: Thu, 5 Nov 2026 12:46:17 +0100
Subject: [PATCH 1/3] ci(renovate): cap Docker Python per requires-python

---
 .github/renovate.json | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/.github/renovate.json b/.github/renovate.json
index 78caaff479..f1769d2fe5 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -92,6 +92,32 @@
       ],
       "allowedVersions": "<3.14"
     },
+    {
+      "description": "SDK Docker base image - stay within the SDK requires-python range (<3.14)",
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchDepNames": [
+        "python"
+      ],
+      "matchFileNames": [
+        "Dockerfile"
+      ],
+      "allowedVersions": "<3.14"
+    },
+    {
+      "description": "API Docker base image - stay within the API requires-python range (<3.13)",
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchDepNames": [
+        "python"
+      ],
+      "matchFileNames": [
+        "api/Dockerfile"
+      ],
+      "allowedVersions": "<3.13"
+    },
     {
       "description": "Docker images - single grouped PR, no changelog, scope=docker",
       "matchManagers": [

From 9fea8cc1418732f3e1ced210a700924adf8b8cac Mon Sep 17 00:00:00 2001
From: pedrooot <pedromarting3@gmail.com>
Date: Thu, 5 Nov 2026 13:37:10 +0100
Subject: [PATCH 2/3] ci(renovate): use regex caps for Docker Python tags

---
 .github/renovate.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index f1769d2fe5..a4b905a244 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -103,7 +103,7 @@
       "matchFileNames": [
         "Dockerfile"
       ],
-      "allowedVersions": "<3.14"
+      "allowedVersions": "/^3\\.(?:[0-9]|1[0-3])\\./"
     },
     {
       "description": "API Docker base image - stay within the API requires-python range (<3.13)",
@@ -116,7 +116,7 @@
       "matchFileNames": [
         "api/Dockerfile"
       ],
-      "allowedVersions": "<3.13"
+      "allowedVersions": "/^3\\.(?:[0-9]|1[0-2])\\./"
     },
     {
       "description": "Docker images - single grouped PR, no changelog, scope=docker",

From 8145c14d3de9503213b85e173bf1825c52378136 Mon Sep 17 00:00:00 2001
From: pedrooot <pedromarting3@gmail.com>
Date: Thu, 5 Nov 2026 13:38:03 +0100
Subject: [PATCH 3/3] ci(renovate): pin Docker Python images to current minor

---
 .github/renovate.json | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index a4b905a244..07ccb66b23 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -93,7 +93,7 @@
       "allowedVersions": "<3.14"
     },
     {
-      "description": "SDK Docker base image - stay within the SDK requires-python range (<3.14)",
+      "description": "SDK and API Docker base images - patches only; the pip cleanup hardcodes python3.12 paths, so a minor bump must be done by hand",
       "matchDatasources": [
         "docker"
       ],
@@ -101,12 +101,13 @@
         "python"
       ],
       "matchFileNames": [
-        "Dockerfile"
+        "Dockerfile",
+        "api/Dockerfile"
       ],
-      "allowedVersions": "/^3\\.(?:[0-9]|1[0-3])\\./"
+      "allowedVersions": "/^3\\.12\\./"
     },
     {
-      "description": "API Docker base image - stay within the API requires-python range (<3.13)",
+      "description": "MCP server Docker base image - patches only; the pip cleanup hardcodes python3.13 paths, so a minor bump must be done by hand",
       "matchDatasources": [
         "docker"
       ],
@@ -114,9 +115,9 @@
         "python"
       ],
       "matchFileNames": [
-        "api/Dockerfile"
+        "mcp_server/Dockerfile"
       ],
-      "allowedVersions": "/^3\\.(?:[0-9]|1[0-2])\\./"
+      "allowedVersions": "/^3\\.13\\./"
     },
     {
       "description": "Docker images - single grouped PR, no changelog, scope=docker",