chore: update Dockerfile

* use uv Docker image
* bump Python patch versions

JIRA: TRIVIAL
risk: low

Author: hkad98

Dockerfile

@@ -1,23 +1,23 @@
 # (C) 2021 GoodData Corporation
 ARG PY_TAG
+FROM ghcr.io/astral-sh/uv:0.10 AS uv
 FROM python:${PY_TAG}
 
 ARG PY_TAG
 ARG ENV_TAG
-ARG UV_VERSION=0.10.0
 
 # tox defines all python targets, makefile recognizes TEST_ENVS and forces
 # tox to execute only tests for installed python
 ENV TEST_ENVS=${ENV_TAG}
 
+# copy uv binary from official image; version is guarded by required-version in pyproject.toml
+COPY --from=uv /uv /usr/local/bin/uv
+
 # install make and gosu
-# install uv using pip
-# UV_VERSION should match pyproject.toml [tool.uv] required-version (currently ~=0.10.0)
 ENV GOSU_VERSION=1.14
 RUN set -x \
   && apt-get update \
   && apt-get install -y --no-install-recommends make curl gnupg \
-  && pip install --no-cache-dir "uv==${UV_VERSION}" \
   && curl -sSLo /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \
   && curl -sSLo /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \
   && export GNUPGHOME="$(mktemp -d)" \
@@ -40,14 +40,11 @@ WORKDIR /data
 COPY pyproject.toml uv.lock ./
 
 # Install tox and tox-uv as system packages so they're available globally
-# This matches the original behavior where tox was installed via pip
 # We use uv pip install to install packages from the tox dependency group in pyproject.toml
 # by reading from the lock file which ensures consistent versions
-# Reinstall uv after pip install to ensure correct version (uv pip install may install a different version)
 # Clean up dependency files after installation to reduce image size
 RUN set -x \
   && uv pip install --system --group tox \
-  && pip install --no-cache-dir --force-reinstall "uv==${UV_VERSION}" \
   && rm -f pyproject.toml uv.lock \
   && true
 

ci_tests.mk

@@ -37,23 +37,23 @@ endif
 # Targets to build docker file for each python version
 .PHONY: test-ci-py310-build
 test-ci-py310-build: Dockerfile
-	docker build --build-arg "PY_TAG=3.10.15-slim-bookworm" --build-arg "ENV_TAG=py310" -t python-sdk:py310 .
+	docker build --build-arg "PY_TAG=3.10.19-slim-bookworm" --build-arg "ENV_TAG=py310" -t python-sdk:py310 .
 
 .PHONY: test-ci-py311-build
 test-ci-py311-build: Dockerfile
-	docker build --build-arg "PY_TAG=3.11.10-slim-bookworm" --build-arg "ENV_TAG=py311" -t python-sdk:py311 .
+	docker build --build-arg "PY_TAG=3.11.14-slim-bookworm" --build-arg "ENV_TAG=py311" -t python-sdk:py311 .
 
 .PHONY: test-ci-py312-build
 test-ci-py312-build: Dockerfile
-	docker build --build-arg "PY_TAG=3.12.6-slim-bookworm" --build-arg "ENV_TAG=py312" -t python-sdk:py312 .
+	docker build --build-arg "PY_TAG=3.12.12-slim-bookworm" --build-arg "ENV_TAG=py312" -t python-sdk:py312 .
 
 .PHONY: test-ci-py313-build
 test-ci-py313-build: Dockerfile
-	docker build --build-arg "PY_TAG=3.13.1-slim-bookworm" --build-arg "ENV_TAG=py313" -t python-sdk:py313 .
+	docker build --build-arg "PY_TAG=3.13.12-slim-bookworm" --build-arg "ENV_TAG=py313" -t python-sdk:py313 .
 
 .PHONY: test-ci-py314-build
 test-ci-py314-build: Dockerfile
-	docker build --build-arg "PY_TAG=3.14.0-slim-bookworm" --build-arg "ENV_TAG=py314" -t python-sdk:py314 .
+	docker build --build-arg "PY_TAG=3.14.3-slim-bookworm" --build-arg "ENV_TAG=py314" -t python-sdk:py314 .
 
 # test-ci target triggers unit tests for each requested environment
 .PHONY: test-ci