allthingslinux · kzndotsh · Jan 23, 2026 · Jan 22, 2026 · Jan 22, 2026 · Jan 22, 2026
diff --git a/.github/actions/setup-python/action.yml b/.github/actions/setup-python/action.yml
@@ -5,7 +5,7 @@ inputs:
   python-version:
     description: Python version to use
     required: false
-    default: 3.13.8
+    default: 3.13.11
   uv-version:
     description: Uv version to install (empty = latest or from pyproject.toml)
     required: false

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 env:
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   REVIEWDOG_LEVEL: warning
   REVIEWDOG_REPORTER: github-pr-review
   REVIEWDOG_FILTER_MODE: file

diff --git a/.github/workflows/docker-push.yml b/.github/workflows/docker-push.yml
@@ -15,7 +15,7 @@ env:
   IMAGE_NAME: ${{ github.repository }}
   DOCKER_BUILD_SUMMARY: true
   DOCKER_BUILD_CHECKS_ANNOTATIONS: true
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   SHA_PREFIX_LENGTH: 7
   VALIDATE_TIMEOUT_MINUTES: 10
   BUILD_TIMEOUT_MINUTES: 15

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -15,7 +15,7 @@ env:
   DOCKER_BUILD_SUMMARY: true
   DOCKER_BUILD_CHECKS_ANNOTATIONS: true
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   SHA_PREFIX_LENGTH: 7
   VALIDATE_TIMEOUT_MINUTES: 10
   BUILD_TIMEOUT_MINUTES: 15

diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -29,7 +29,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 env:
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   ARTIFACT_RETENTION_DAYS: 7
 jobs:
   changes:

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -13,7 +13,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 env:
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   SAFETY_SEVERITY: HIGH,CRITICAL
   ARTIFACT_RETENTION_DAYS: 30
   REVIEWDOG_REPORTER: github-pr-review

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -21,7 +21,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 env:
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   COVERAGE_THRESHOLD: 80
   ARTIFACT_RETENTION_DAYS: 7
 jobs:
@@ -76,7 +76,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: [3.13.8]
+        python-version: [3.13.11]
     steps:
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6

diff --git a/.python-version b/.python-version
@@ -1 +1 @@
-3.13.8
+3.13.11
diff --git a/Containerfile b/Containerfile
@@ -1,7 +1,7 @@
 # ============================================================================
 # STAGE 1: Common Setup (shared by base and production stages)
 # ============================================================================
-FROM python:3.13.8-slim@sha256:087a9f3b880e8b2c7688debb9df2a5106e060225ebd18c264d5f1d7a73399db0 AS common
+FROM python:3.13.11-slim AS common
 
 # Common labels (shared across all final images)
 LABEL org.opencontainers.image.source="https://github.com/allthingslinux/tux" \

diff --git a/assets/branding/help_banner.png b/assets/branding/help_banner.png
diff --git a/docs/content/developer/best-practices/ci-cd.md b/docs/content/developer/best-practices/ci-cd.md
@@ -271,7 +271,7 @@ jobs:
 # Matrix builds for multiple Python versions
 strategy:
   matrix:
-    python-version: [3.13.8]
+    python-version: [3.13.11]
   fail-fast: false
 ```
 
@@ -328,7 +328,7 @@ concurrency:  # Prevent conflicts
 ```yaml
 # Centralized configuration
 env:
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
   COVERAGE_THRESHOLD: 80
   REVIEWDOG_LEVEL: warning
 ```

diff --git a/docs/content/reference/docker-production.md b/docs/content/reference/docker-production.md
@@ -149,7 +149,7 @@ security_opt:
 
 ### Base image
 
-Uses `python:3.13.8-slim` with pinned digest, minimal packages, and regular security updates.
+Uses `python:3.13.11-slim` with pinned digest, minimal packages, and regular security updates.
 
 ## Related documentation
 

diff --git a/docs/content/reference/renovate.md b/docs/content/reference/renovate.md
@@ -416,7 +416,7 @@ Renovate detects and updates version variables in GitHub Actions workflows:
 ```yaml
 env:
   # renovate: datasource=python-version depName=python
-  PYTHON_VERSION: 3.13.8
+  PYTHON_VERSION: 3.13.11
 ```
 
 **Custom Manager for `.python-version`**:

diff --git a/docs/content/selfhost/config/database.md b/docs/content/selfhost/config/database.md
@@ -18,7 +18,7 @@ Configure database connection settings for Tux. For installation instructions, s
 The `compose.yaml` file includes a PostgreSQL service (`tux-postgres`) that uses the Alpine-based `postgres:17-alpine` image with optimized settings (256MB shared buffers, 100 max connections, UTC timezone).
 
 !!! note "Base Images"
-    The Tux application uses `python:3.13.8-slim` (Debian-based), while PostgreSQL uses `postgres:17-alpine` (Alpine-based) for a smaller database image size.
+    The Tux application uses `python:3.13.11-slim` (Debian-based), while PostgreSQL uses `postgres:17-alpine` (Alpine-based) for a smaller database image size.
 
 **Default connection details:**
 

diff --git a/docs/content/selfhost/manage/docker.md b/docs/content/selfhost/manage/docker.md
@@ -202,7 +202,7 @@ docker run --rm \
 ```
 
 !!! note "Utility Container"
-    The `alpine:latest` image is used here as a lightweight utility container for running tar commands. It's not related to the Tux application image, which uses `python:3.13.8-slim` (Debian-based).
+    The `alpine:latest` image is used here as a lightweight utility container for running tar commands. It's not related to the Tux application image, which uses `python:3.13.11-slim` (Debian-based).
 
 **Restore volume:**
 

diff --git a/mise.toml b/mise.toml
@@ -0,0 +1,2 @@
+[tools]
+python = "3.13.11"
diff --git a/scripts/db/__init__.py b/scripts/db/__init__.py
@@ -10,6 +10,7 @@
     current,
     dev,
     downgrade,
+    fix_sequences,
     health,
     history,
     init,
@@ -44,6 +45,7 @@
 app.add_typer(downgrade.app)
 app.add_typer(nuke.app)
 app.add_typer(version.app)
+app.add_typer(fix_sequences.app)
 
 
 def main() -> None:
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		3.13.8
		3.13.11
kzndotsh marked this conversation as resolved. Show resolved Hide resolved