[neteler]

• update to Ubuntu 26.04
• update related dependencies
• made the stage fully self-contained by shifting definitions (tested on podman)

[echoix]

Related: #7552 where I was stuck that the build didn’t work anymore

[echoix]

Ok, there's something with the 2604 asset that might be different of the 2404 one, so use something like this instead (with the url):

&& PY_TAG=$(python3 -c "import sys; print(f'cp{sys.version_info.major}{sys.version_info.minor}')") \
&& python3 -m pip install -U --break-system-packages --no-cache-dir \
    "https://github.com/wxWidgets/Phoenix/releases/download/wxPython-${WXPYTHON_VERSION}/wxpython-${WXPYTHON_VERSION}%2Bubuntu2604-${PY_TAG}-${PY_TAG}-linux_x86_64.whl" \

We'll fix it some way later

[neteler]

Thanks for the suggestion, @echoix
Updated in 55cf0c9

[neteler]

Not sure what to do with

E Failed: Timeout (>300.0s) from pytest-timeout.

Seems to be unrelated?

[echoix]

Ya, unrelated. We could just merge. But I launched a rerun anyways

[ninsbl]

Will Ubuntu 24.04 images be still available after merge? Or will upstream images have to adapt?

[echoix]

Will Ubuntu 24.04 images be still available after merge? Or will upstream images have to adapt?

We only publish one version per type, anyways, so yes, downstream images will need to adapt themselves as they usually do, but anyways, this will only be released with grass 8.6, so there are no guarantees for the development versions

[metzm]

@echoix An important reason for the change to Ubuntu 26.04 was to reduce the number of warnings about known vulnerabilities coming from Ubuntu 24.04. Wouldn't that be appropriate for the Docker builds of GRASS 8.5 as well, combining the latest stable release of GRASS with the latest stable release of Ubuntu?

[echoix]

@neteler had added the backport label, but removed it. Usually it is when it got backported, but it isn't in the releasebranch_8_5 yet

[echoix]

But it seems weird to change the meaning of the docker image in a patch version of 8.5, or in the rolling release branch.

[neteler]

I'm all in favor to backport this PR.

[neteler]

Will Ubuntu 24.04 images be still available after merge? Or will upstream images have to adapt?

I don't this that we should keep outdated base docker images. It is also a responsibility of the GRASS project to not provide docker images full of known security issues.
Is keeping Ubuntu 24.04 important for you, @ninsbl ?

[echoix]

Which vulns are we talking about? Are some resolved after I merged the latest monthly respin of 24.04 (that had been skipped for a while to avoid having dependency PRs).

[ninsbl]

If you install any go based stuff there are critical CVEs for go-lang, and a buch of others. I will have to adapt our actinia build. But being able to fix some critical CVEs are a good argument for doing so...
But are we fully Python 3.14 compatible in 8.5?

[neteler]

Which vulns are we talking about? Are some resolved after I merged the latest monthly respin of 24.04 (that had been skipped for a while to avoid having dependency PRs).

Excerpt of a GH repo we maintain (I won't advertise the URL publicly, can share per DM):

Example CVE Info:

=> `ubuntu:distro:ubuntu:24.04`

[neteler]

But are we fully Python 3.14 compatible in 8.5?

I am using python 3.14 (which was release in Oct 2025, almost a year ago) on Fedora 44 for a while (see also https://repology.org/project/python/versions) . Didn't encounter any issue so far.

[echoix]

Well, our tests still can't pass for 3.14, even on Linux, see my newest refresh run: echoix#301

That support was supposed to be tracked here: #6104