From 31f0b3e35d3f52e175d011e8b85dbc9d56be038c Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 17 Nov 2025 07:39:28 +0000
Subject: [PATCH 1/2] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Update=20python/cpytho?=
 =?UTF-8?q?n=20to=20v3.14.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 base/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/base/Dockerfile b/base/Dockerfile
index 135d01f..a8f2fcd 100644
--- a/base/Dockerfile
+++ b/base/Dockerfile
@@ -11,7 +11,7 @@ ENV \
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 # Install base system
-ARG PYTHON_VERSION="v3.13.7"
+ARG PYTHON_VERSION="v3.14.0"
 ARG PYTHON_PIP_VERSION="25.3"
 ARG PYTHON_SETUPTOOLS_VERSION="80.9.0"
 # hadolint ignore=DL3003,DL4006,SC2155

From 3fa5e08a9378cf75770a4a1be1e1db41d226a07f Mon Sep 17 00:00:00 2001
From: Franck Nijhof <git@frenck.dev>
Date: Mon, 17 Nov 2025 18:40:15 +0100
Subject: [PATCH 2/2] Adjust build

---
 base/Dockerfile | 22 ++++++----------------
 1 file changed, 6 insertions(+), 16 deletions(-)

diff --git a/base/Dockerfile b/base/Dockerfile
index a8f2fcd..935fe41 100644
--- a/base/Dockerfile
+++ b/base/Dockerfile
@@ -3,17 +3,17 @@ ARG BUILD_FROM=ghcr.io/hassio-addons/base:19.0.0
 FROM ${BUILD_FROM}
 
 # Environment variables
-ENV \
-    PATH="/usr/local/bin:$PATH" \
-    GPG_KEY="7169605F62C751356D054A26A821E680E5FA6305"
+ENV PATH="/usr/local/bin:$PATH"
 
 # Set shell
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
 # Install base system
 ARG PYTHON_VERSION="v3.14.0"
+ARG PYTHON_SHA256="2299dae542d395ce3883aca00d3c910307cd68e0b2f7336098c8e7b7eee9f3e9"
 ARG PYTHON_PIP_VERSION="25.3"
 ARG PYTHON_SETUPTOOLS_VERSION="80.9.0"
+
 # hadolint ignore=DL3003,DL4006,SC2155
 RUN \
     apk add --no-cache --virtual .build-dependencies \
@@ -24,7 +24,6 @@ RUN \
         findutils=4.10.0-r0 \
         gcc=14.2.0-r6 \
         gdbm-dev=1.24-r0 \
-        gnupg=2.4.7-r0 \
         libffi-dev=3.4.8-r0 \
         libnsl-dev=2.0.1-r1 \
         libtirpc-dev=1.3.5-r0 \
@@ -44,21 +43,12 @@ RUN \
         xz-dev=5.8.1-r0 \
         xz=5.8.1-r0 \
         zlib-dev=1.3.1-r2 \
+        zstd-dev=1.5.7-r0 \
     \
     && curl -J -L -o /tmp/python.tar.xz \
         "https://www.python.org/ftp/python/${PYTHON_VERSION#v}/Python-${PYTHON_VERSION#v}.tar.xz" \
-    && curl -J -L -o /tmp/python.tar.xz.asc \
-        "https://www.python.org/ftp/python/${PYTHON_VERSION#v}/Python-${PYTHON_VERSION#v}.tar.xz.asc" \
     \
-    && export GNUPGHOME="$(mktemp -d)" \
-    && gpg \
-        --batch \
-        --keyserver hkps://keys.openpgp.org \
-        --recv-keys "$GPG_KEY" \
-    && gpg \
-        --batch \
-        --verify /tmp/python.tar.xz.asc /tmp/python.tar.xz \
-    && { command -v gpgconf > /dev/null && gpgconf --kill all || :; } \
+    && echo "$PYTHON_SHA256 /tmp/python.tar.xz" | sha256sum -c - \
     \
     && mkdir -p /usr/src/python \
     && tar -xJC /usr/src/python --strip-components=1 -f /tmp/python.tar.xz \
@@ -79,6 +69,7 @@ RUN \
         EXTRA_CFLAGS="-DTHREAD_STACK_SIZE=0x100000" \
         LDFLAGS="-Wl,--strip-all" \
         PROFILE_TASK="" \
+        EXTRA_CFLAGS="-fno-omit-frame-pointer -mno-omit-leaf-frame-pointer" \
     && make install \
     \
     && find /usr/local \
@@ -113,7 +104,6 @@ RUN \
     && apk del --no-cache --purge .build-dependencies \
     && rm -f -r \
         /usr/src \
-        "$GNUPGHOME" \
         /tmp/* \
     \
     && python3 --version \