3.13 (#8)

Makefile

@@ -12,7 +12,7 @@ DEBIAN_CODENAME = bookworm
 OPENSSL_VERSION = 3.0.9
 OPENSSL_VERSION_SUFFIX = ak-fips
 # https://www.python.org/doc/versions/
-PYTHON_VERSION = 3.12.7
+PYTHON_VERSION = 3.13.0
 # https://www.aleksey.com/xmlsec/
 XMLSEC_VERSION = 1.3.5
 

debian-fips/Dockerfile

@@ -1,4 +1,4 @@
-ARG DEBIAN_CODENAME
+ARG DEBIAN_CODENAME=bookworm
 
 FROM docker.io/library/debian:${DEBIAN_CODENAME}-slim AS equivs-builder
 
@@ -67,6 +67,6 @@ RUN mkdir -p $build_root && \
     echo "\n[algorithm_sect]\ndefault_properties = fips=yes" >> /usr/local/ssl/openssl.cnf
 
 RUN apt-get update && \
-    apt-get install -y --no-install-recommends ca-certificates && \
+    apt-get install -y --no-install-recommends ca-certificates wget && \
     rm -rf /var/lib/apt/lists/*
 ENV SSL_CERT_DIR=/etc/ssl/certs

python-fips/Dockerfile

@@ -136,10 +136,10 @@ RUN set -eux; \
 	done
 
 # if this is called "PIP_VERSION", pip explodes with "ValueError: invalid truth value '<VERSION>'"
-ENV PYTHON_PIP_VERSION 24.0
+ENV PYTHON_PIP_VERSION 24.1.1
 # https://github.com/pypa/get-pip
-ENV PYTHON_GET_PIP_URL https://github.com/pypa/get-pip/raw/dbf0c85f76fb6e1ab42aa672ffca6f0a675d9ee4/public/get-pip.py
-ENV PYTHON_GET_PIP_SHA256 dfe9fd5c28dc98b5ac17979a953ea550cec37ae1b47a5116007395bfacff2ab9
+ENV PYTHON_GET_PIP_URL https://github.com/pypa/get-pip/raw/def4aec84b261b939137dd1c69eff0aabb4a7bf4/public/get-pip.py
+ENV PYTHON_GET_PIP_SHA256 bc37786ec99618416cc0a0ca32833da447f4d91ab51d2c138dd15b7af21e8e9a
 
 RUN set -eux; \
 	\

xmlsec1-fips/Dockerfile

@@ -1,11 +1,10 @@
-ARG BUILD_IMAGE
+ARG BUILD_IMAGE=ghcr.io/goauthentik/fips-debian:bookworm-slim-fips
 
 FROM ${BUILD_IMAGE}
 
 ARG XMLSEC_VERSION
 
 ENV build_root="/build"
-ENV xmlsec_gpg_key="00FDD6A7DFB81C88F34B9BF0E63ECDEF9E1D829E"
 
 RUN mkdir -p ${build_root} && \
     cd ${build_root} && \