[Snyk] Security upgrade python from 3.11-slim-buster to 3.11.10-slim-bookworm

[ntindle]

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• autogpt_platform/market/Dockerfile

We recommend upgrading to python:3.11.10-slim-bookworm, as this image has only 41 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Resource Exhaustion SNYK-DEBIAN10-EXPAT-6227596	614
	Out-of-bounds Write SNYK-DEBIAN10-NCURSES-1655739	614
	Out-of-bounds Write SNYK-DEBIAN10-NCURSES-1655739	614
	Out-of-bounds Write SNYK-DEBIAN10-NCURSES-5421196	614
	Out-of-bounds Write SNYK-DEBIAN10-NCURSES-5421196	614

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Resource Exhaustion

[qodo-merge-pro]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Version Compatibility Ensure that the new Python version (3.11.10) and the new base image (slim-bookworm) are compatible with all dependencies and the application code.

[github-actions]

This PR targets the master branch but does not come from dev or a hotfix/* branch.

Automatically setting the base branch to dev.

[netlify]

✅ Deploy Preview for auto-gpt-docs canceled.

Name	Link
🔨 Latest commit	296784b
🔍 Latest deploy log	https://app.netlify.com/sites/auto-gpt-docs/deploys/672971fd3c0b440008c0910d

[Pwuts]

Is it necessary to pin the patch version? Otherwise using 3.11-slim-bookworm would be more practical.

[Swiftyos]

Agreed, we can use 3.11-slim-bookworm. However, feel free to merge as is if you'd rather get this in faster or modify it and merge without waiting for re-approval

[ntindle]

This one has been validated for security so specificially chosen, we should target moving to 3.12/3.13 anyway soon