chore(deps): update python:3.12-slim docker digest to f77ac9e

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
python (source)	final	digest	78387bc → f77ac9e
python (source)	stage	digest	78387bc → f77ac9e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Current-main integration and validation

Merged main ac5240a39f24dc86dbfe0680e1f52ebdc43487d6 additively after #1855 and #1851 so this digest update is validated with the current dependency and Rust lockfiles. The complete PR diff against main remains the original single-line Dockerfile.tensorflow digest change; Python stays on 3.12-slim.

• Ruff formatting/checks passed (425 files); Mypy passed (480 files).
• All 38 Docker workflow tests passed in three independent native review passes, with no findings. Registry manifests retain Python 3.12.14, Debian trixie, and the supported architectures.
• The required local fast-suite selection ran using the existing Python 3.10 environment, with imports verified from the isolated candidate. It reached 10,611 passed / 636 skipped / zero failures before a deliberate SIGINT at critically low host disk capacity (exit 2). This was an incomplete run, not a full-suite pass.
• No local Docker build or dependency installation was attempted under the capacity limit. Current-head Docker CI passed both TensorFlow/lightweight builds, runtime smoke tests (including TensorFlow 2.21.0 and UID 10001), and configured HIGH/CRITICAL vulnerability checks. The jobs checked out merge-test 8c0c3d8248872ab11d5c476f06d43bf0ff88b978, whose parents are current main ac5240a3 and PR head 73a5169d.
• Current-head Python CI passed: Python 3.10 21,398 passed / 770 skipped; Python 3.12 21,402 passed / 766 skipped; Python 3.13 20,617 passed / 948 skipped. All three lanes had zero failures. The 15 skipped workflow jobs match the existing Docker-only path filters.
• Current-head repository Codex code review and security review completed without findings; zero unresolved review threads.

[mldangelo-oai]

@codex review current head 73a5169. This additive merge integrates current main ac5240a; the complete diff remains the one-line Python 3.12-slim Docker digest update. Please review this current head.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-29T18:44:50.304535Z	73a5169	Manual request
🔒 Security Review	✅ Completed 2026-09-29T18:46:21.268667Z	73a5169	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: 73a5169d0e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

🛡️ Codex Security Review · Automatically triggered

Security review completed. No security issues were found in this pull request.

Reviewed commit: 73a5169d0e

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

[mldangelo-oai]

Reviewed exact head 73a5169 against current main ac5240a. The complete diff is the pinned Python 3.12-slim digest used by both TensorFlow image stages; security settings and dependency locks are unchanged. Three fresh native reviews, an independent verifier, and current-head Codex code/security reviews found no issues. Current-head CI has 16 successful checks and 15 expected path-based skips, with no failures or pending jobs. Both Docker builds, runtime/CLI checks, configured vulnerability scans, and Python 3.10/3.12/3.13 test lanes passed. The documented local full-suite capacity limit remains disclosed. Approved for this dependency update.