From e6f7c73f543ea5c2e5ffdab8e9e01ec87fd94322 Mon Sep 17 00:00:00 2001
From: boenshao <65853605+boenshao@users.noreply.github.com>
Date: Sat, 24 Jun 2023 01:23:51 +0800
Subject: [PATCH] build(docker): pin the underlying debain base image (#24497)

---
 .github/workflows/docker_build_push.sh | 2 +-
 Dockerfile                             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker_build_push.sh b/.github/workflows/docker_build_push.sh
index 642b9b53db6de..55ccf51767a1d 100755
--- a/.github/workflows/docker_build_push.sh
+++ b/.github/workflows/docker_build_push.sh
@@ -63,7 +63,7 @@ docker build --target lean \
   -t "${REPO_NAME}:${SHA}-py310" \
   -t "${REPO_NAME}:${REFSPEC}-py310" \
   -t "${REPO_NAME}:${LATEST_TAG}-py310" \
-  --build-arg PY_VER="3.10-slim"\
+  --build-arg PY_VER="3.10-slim-bookworm"\
   --label "sha=${SHA}" \
   --label "built_at=$(date)" \
   --label "target=lean310" \
diff --git a/Dockerfile b/Dockerfile
index ee42877288934..494bf90bd19cb 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -18,7 +18,7 @@
 ######################################################################
 # Node stage to deal with static asset construction
 ######################################################################
-ARG PY_VER=3.9.16-slim
+ARG PY_VER=3.9-slim-bookworm
 
 # if BUILDPLATFORM is null, set it to 'amd64' (or leave as is otherwise).
 ARG BUILDPLATFORM=${BUILDPLATFORM:-amd64}