Upgrading docker images debian from version 12(bookworm) to 13(trixie).
- Dominant language
- Python
- Stars
- 46.9k
- Forks
- 17.8k
- Avg merge
- 2d 9h
- Merged PRs (30d)
- 472
Description
### Description
Bookworm regular support ended 11 Jul 2026; Airflow’s own policy is to switch ~6 months before that — so this is overdue by policy, even though Bookworm LTS runs to 2028.
Trixie has been stable since Aug 2025 (~1 year).
### Use case/motivation
I noticed 3 critical vulnerabilities related to the unbound package: CVE-2026-42960, CVE-2026-33278, CVE-2026-50252 that for bookworm have no upgrade. Would be much easier to jump forward with the version instead.
### Related issues
_No response_
### Are you willing to submit a PR?
- [ ] Yes I am willing to submit a PR!
### Code of Conduct
- [x] I agree to follow this project's [Code of Conduct](https://github.com/apache/airflow/blob/main/CODE_OF_CONDUCT.md)
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by locating the Debian 12/bookworm references in the repository's Docker image definitions and checking the related image build or CI entry points; done means the images use Debian 13/trixie and the builds and relevant checks pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- debian, docker
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 50/100