build(deps): bump python from 3.12-slim-bookworm to 3.13-slim-bookworm

Bumps python from 3.12-slim-bookworm to 3.13-slim-bookworm.

---
updated-dependencies:
- dependency-name: python
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Changelog.md

@@ -1,5 +1,13 @@
 # [ghcr.io/]kineticcafe/ansible Changelog
 
+## 6.0.0 / 2024-11-01
+
+- Upgraded to Python 3.13
+
+- Upgraded to Ansible 10.5.0
+
+- Changed PDM lock strategy.
+
 ## 5.1.0 / 2024-02-27
 
 - Upgraded to Ansible 8.7.0
@@ -12,8 +20,8 @@
 
 - Renamed the `run` script to `kineticcafe-ansible` and fixed several issues:
 
-  - Bash 4 or later is required for associative array support. Ensured that
-    this would be respected on macOS by using `/usr/bin/env bash` instead of
+  - Bash 4 or later is required for associative array support. Ensured that this
+    would be respected on macOS by using `/usr/bin/env bash` instead of
     `/bin/bash`.
 
   - Updated the script to use the current version of the image.
@@ -43,13 +51,13 @@
 
 - Upgraded to Ansible 8.2.0
 
-- Changed from [pipenv][] to [pdm][] and `pyproject.toml` because of ongoing
-  issues with Dependabot not detecting dependencies in `Pipfile.lock` as
+- Changed from [pipenv][pipenv] to [pdm][pdm] and `pyproject.toml` because of
+  ongoing issues with Dependabot not detecting dependencies in `Pipfile.lock` as
   opposed to only in `requirements.txt` (the inverse of
   dependabot/dependabot-core#6200). After trying Poetry (predates the latest
-  Python packaging PEPs), rye (experimental), and hatch (no lock file), [pdm][]
-  seems to fit the bill best for the limited needs that we have with this
-  project.
+  Python packaging PEPs), rye (experimental), and hatch (no lock file),
+  [pdm][pdm] seems to fit the bill best for the limited needs that we have with
+  this project.
 
 - Experimentally removed the generated `requirements.txt` file. It isn't used,
   but it has been valuable in getting update notifications from Dependabot,
@@ -77,7 +85,7 @@
 - Upgraded from Debian Buster (slim) to Debian Bullseye (slim) as the base
   image. Using Python 3.10 instead of Python 3.9.
 
-- Changed from `requirements.txt` to `Pipfile` with [pipenv][].
+- Changed from `requirements.txt` to `Pipfile` with [pipenv][pipenv].
 
 - Fixed issues for running the Ansible scripts in a non-interactive environment.
 

Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM python:3.12-slim-bookworm AS builder
+FROM python:3.13-slim-bookworm AS builder
 
 ENV LC_ALL=C.UTF-8 \
     LANG=C.UTF-8 \
@@ -41,7 +41,7 @@ python3 -m pip install --user pdm
 /home/ansible/.local/bin/pdm sync --clean --production --no-editable
 BUILD_PROJECT
 
-FROM python:3.12-slim-bookworm AS runtime
+FROM python:3.13-slim-bookworm AS runtime
 
 RUN <<SETUP
 set -eux

README.md

@@ -1,17 +1,16 @@
 # [ghcr.io/]kineticcafe/ansible: Ansible in Docker
 
-This is a simple Docker container that contains [Ansible][]. It has been created
-so that it's easier to work with `ansible-playbook` without going through the
-effort of installing it on various systems.
+This is a simple Docker container that contains [Ansible][Ansible]. It has been
+created so that it's easier to work with `ansible-playbook` without going
+through the effort of installing it on various systems.
 
 The image is based on Debian Bookworm (slim) and includes:
 
-- Ansible 8.7.0
-- Python 3.12
+- Ansible 10.5.0
+- Python 3.13
 
-These images can be pulled either from Docker Hub
-(`kineticcafe/ansible:5.0`) or the GitHub Container Registry
-(`ghcr.io/kineticcafe/ansible:5.0`).
+These images can be pulled either from Docker Hub (`kineticcafe/ansible:6.0`) or
+the GitHub Container Registry (`ghcr.io/kineticcafe/ansible:6.0`).
 
 ## Support
 
@@ -24,7 +23,7 @@ Because of recent changes to cryptographic packages in Python, support for
 
 The `kineticcafe-ansible` script is recommended for running everything as it
 manages environment variable configuration for each run. The
-`kineticcafe-ansible` script will pull from `ghcr.io/kineticcafe/ansible:5.0` by
+`kineticcafe-ansible` script will pull from `ghcr.io/kineticcafe/ansible:6.0` by
 default; this can be overridden by using `$IMAGE`:
 
 ```sh
@@ -53,14 +52,15 @@ links to locations _other_ than `TARGET/kineticcafe-ansible`.
 
 `--no-symlinks` (`-S`) may be specified to skip symbolic link creation entirely.
 
-`--force` (`-f`) may be specified to install `kineticcafe-ansible` even if it already
-exists, and to overwrite files and non-`TARGET/kineticcafe-ansible` symbolic links.
+`--force` (`-f`) may be specified to install `kineticcafe-ansible` even if it
+already exists, and to overwrite files and non-`TARGET/kineticcafe-ansible`
+symbolic links.
 
 `--verbose` (`-v`) will turn on trace output of commands.
 
 ## Maintenance/Upgrade Instructions
 
-1. Install [pdm][]: `pipx install pdm`.
+1. Install [pdm][pdm]: `pipx install pdm`.
 
 2. Edit the `Dockerfile` to update the Python version, if required.