chore(deps): bump the docker-base-images group across 3 directories with 1 update

[dependabot]

Bumps the docker-base-images group with 1 update in the /docker/backend directory: python.
Bumps the docker-base-images group with 1 update in the /docker/base-image directory: python.
Bumps the docker-base-images group with 1 update in the /docker/scheduler directory: python.

Updates python from 3.13-slim to 3.14-slim

Updates python from 3.13-slim to 3.14-slim

Updates python from 3.13-slim to 3.14-slim

Updates python from 3.13-slim-bookworm to 3.14-slim-bookworm

Updates python from 3.13-slim-bookworm to 3.14-slim-bookworm

Updates python from 3.13-slim-bookworm to 3.14-slim-bookworm

Updates python from 3.13-slim to 3.14-slim

Updates python from 3.13-slim to 3.14-slim

Updates python from 3.13-slim to 3.14-slim

[github-actions]

⚠️ Nightly unit-suite found regressions when this PR is merged into dev (3 of 3 seeds).

Regression details (head_sha: `316eb8728d4435f62e8c0a12b213b2af3a1640f2`)

Seed 12345

Backend unit-suite regression diff

Per-XML totals

Side	Path	Total	Pass	Fail	Error	Skip
base	junit-base-pr2632-12345.xml	17945	17912	0	0	33
head	junit-head-pr2632-12345.xml	17945	17911	1	0	33

❌ New failures introduced by HEAD (1)

Tests failing under HEAD that did not fail under BASE in any seed:

• [F] test_1891_python_version_parity::test_ci_python_version_matches_the_shipped_image

Legend: [F] = assertion failure, [E] = collection or fixture error.
Identity = (classname, name, kind); union taken across all input XMLs.

---

Seed 67890

Backend unit-suite regression diff

Per-XML totals

Side	Path	Total	Pass	Fail	Error	Skip
base	junit-base-pr2632-67890.xml	17945	17912	0	0	33
head	junit-head-pr2632-67890.xml	17945	17911	1	0	33

❌ New failures introduced by HEAD (1)

Tests failing under HEAD that did not fail under BASE in any seed:

• [F] test_1891_python_version_parity::test_ci_python_version_matches_the_shipped_image

Legend: [F] = assertion failure, [E] = collection or fixture error.
Identity = (classname, name, kind); union taken across all input XMLs.

---

Seed 99999

Backend unit-suite regression diff

Per-XML totals

Side	Path	Total	Pass	Fail	Error	Skip
base	junit-base-pr2632-99999.xml	17945	17912	0	0	33
head	junit-head-pr2632-99999.xml	17945	17911	1	0	33

❌ New failures introduced by HEAD (1)

Tests failing under HEAD that did not fail under BASE in any seed:

• [F] test_1891_python_version_parity::test_ci_python_version_matches_the_shipped_image

Legend: [F] = assertion failure, [E] = collection or fixture error.
Identity = (classname, name, kind); union taken across all input XMLs.

Reproduce locally: git merge dev && ( cd tests && python -m pytest unit/ -m "not slow" -p randomly --randomly-seed=12345 )

[AndriiPasternak31]

/validate-pr — ❌ Recommend closing (plus a Dependabot config fix)

This is a Python 3.13 → 3.14 runtime migration (3.13.15 → 3.14.7), not a digest refresh. It's the same change as #2477, which was closed.

• Tags:
  • backend and scheduler: python:3.13-slim → 3.14-slim
  • agent base: 3.13-slim-bookworm → 3.14-slim-bookworm
• Debian and tzdata are unchanged (trixie / bookworm), so the bug: legacy IANA timezone aliases (Europe/Kiev et al.) crash schedule creation with a 500 — pytz accepts, APScheduler's zoneinfo lookup can't resolve them inside the shipped image #1823 alias class doesn't recur; test_1823_tz_capability_parity passes.

Why it can't merge

1. The backend image doesn't build. psycopg2-binary==2.9.10 has no cp314 wheel, and the source build fails with pg_config executable not found. Reproduced locally (arm64) and in CI (amd64); verify-non-root, prod-image-smoke and journey-smoke are red.
2. More pins lack cp314 wheels: pyyaml==6.0.2 and Pillow==11.1.0.
3. Import still fails after fixing those. With psycopg2-binary 2.9.11 / pyyaml 6.0.3 / Pillow 11.3.0 in a scratch build, import main fails on a typing.Union TypeError in sqlalchemy==2.0.36 (fixed upstream in 2.0.41). With 2.0.41 as well, import main succeeds. These four are a lower bound for a 3.14 migration, not proof it's complete.
4. The bug: CI validates on Python 3.11 while every shipped image runs 3.13 #1891 guard fails. test_1891_python_version_parity fails because 14 python-version: 3.13 pins in workflows no longer match the images. pytest (head) is only green because the runner is on 3.13, which is exactly the gap bug: CI validates on Python 3.11 while every shipped image runs 3.13 #1891 guards.

What does work on 3.14:

• Scheduler image: builds; runs as uid 1000; ZoneInfo("Europe/Kiev") and an APScheduler CronTrigger construct fine.
• Agent base image: builds; /health 200 with claude_available: true.

Root cause: #2534's ignore rule only covers version-update:semver-major, and Dependabot parses Docker tags as major.minor.patch, so 3.13 → 3.14 is a minor update and slips through. It will reopen after every close until the config is fixed; see #2998.