chore(deps): update public.ecr.aws/lambda/python:3.14 docker digest to 1238927

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
public.ecr.aws/lambda/python	final	digest	10caad7 → 1238927

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • "after 10am every weekday,before 4pm every weekday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[wiz-2986343e2e]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	1
SAST Findings	-
Software Management Findings	-
Total	1

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.

Pull Request Developer Guidance

If the link to the Wiz scan details doesn't work, please ensure you are using the right role in Wiz and that the repository is assigned to the correct project within our Wiz Terraform. Or, you can ask for help in #tna-cloud-security on Slack.

[wiz-2986343e2e]

 IaC Finding

Missing Version Specification In dnf install
on resource FROM public.ecr.aws/lambda/python:3.14@sha256:12389272ad28512f684231b35534ef91bad755ffe27e3f1582b5e455d0b449a4 AS base.RUN microdnf install -y tar-2:1.34-1.amzn2023.0.4 gzip-1.12-1.amzn2023.0.1 wget-1.21.3-1.amzn2023.0.4 poppler-utils-22.08.0-3.amzn2023.0.1 libXinerama-1.1.5-6.amzn2023.0.1 cups-libs-2.4.14-1.amzn2023.0.2 dbus-glib-0.110-11.amzn2023.0.2 libxslt-1.1.43-1.amzn2023.0.3 openssl nss-3.90.0-6.amzn2023.0.1 cairo-1.18.0-4.amzn2023.0.2 libX11-xcb-1.8.10-2.amzn2023.0.1 perl-4:5.32.1-477.amzn2023.0.7 make-1:4.3-5.amzn2023.0.2 golang-1.25.10-1.amzn2023.0.1 qpdf-10.6.3-4.amzn2023.0.5 && microdnf clean all

More Details

Specifying a package version allows to reduce failures due to unanticipated changes in required packages.

Expected

Package version should be specified when using 'dnf install'

Found

Package version should be pinned when running ´dnf install´

Rule ID: 6d81147f-c854-4867-8046-264c78136942

To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).

To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate