Upgrade to Python 3.13 (#714)

Author: nmgaston

docker-compose-dev/Dockerfile.cloudadapter

@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 ARG HTTP_PROXY
 ARG HTTPS_PROXY

docker-compose-dev/Dockerfile.configuration

@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 ARG HTTP_PROXY
 ARG HTTPS_PROXY

docker-compose-dev/Dockerfile.diagnostic

@@ -4,7 +4,7 @@ WORKDIR /go/src/app
 COPY inbm/trtl .
 RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o trtl .
 
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 ARG HTTP_PROXY
 ARG HTTPS_PROXY

docker-compose-dev/Dockerfile.dispatcher

@@ -4,7 +4,7 @@ WORKDIR /go/src/app
 COPY inbm/trtl .
 RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o trtl .
 
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 ARG HTTP_PROXY
 ARG HTTPS_PROXY

docker-compose-dev/Dockerfile.telemetry

@@ -1,4 +1,4 @@
-FROM python:3.12-slim
+FROM python:3.13-slim
 
 ARG HTTP_PROXY
 ARG HTTPS_PROXY

docs/In-Band Manageability User Guide - ThingsBoard.md

@@ -1156,7 +1156,7 @@ Events Log in the dashboard below the OTA buttons.
 Results of Configuration Get update can be seen in the ThingsBoard
 Events Log in the dashboard below the OTA buttons.
 
-#### Configuration Load 
+#### Configuration Load
 
 **Required Fields**: Command and Fetch
 
@@ -1175,8 +1175,9 @@ Events Log in the dashboard below the OTA buttons.
 Note: ubuntuAptSource tag is no longer used.
 
 **NOTE:**
+
 > - Append is only applicable to three configuration tags i.e
-> `trustedRepositories` and `sotaSW` 
+> `trustedRepositories` and `sotaSW`
 >
 > - Path takes in key value pair format, example:
 > `trustedRepositories:https://abc.com/`
@@ -1188,16 +1189,18 @@ Note: ubuntuAptSource tag is no longer used.
 
 **Required Fields**: Command and Path
 
-**NOTE:** 
+**NOTE:**
+
 > - Remove is only applicable to three configuration tags i.e
 > `trustedRepositories`, `sotaSW` and `ubuntuAptSource`
-> -   Path takes in key value pair format, example: `trustedRepositories:https://abc.com/`
+> - Path takes in key value pair format, example: `trustedRepositories:https://abc.com/`
 
 <p align="center">
 <img src="media/In-Band Manageability User Guide - ThingsBoard/media/image47.PNG" alt="P978#yIS2" style="width:4.10995in;height:4.74167in" />
 </p>
 
 ### Configuration Update Via Manifest
+
 [Configuration Command Manifests and Examples](Manifest%20Parameters.md)
 
 ### Power Management
@@ -1273,6 +1276,7 @@ The query command capabilities are also supported via manifest.
 ## Telemetry Data
 
 In-Band Manageability provides two types of telemetry data.  Telemetry can be viewed under Dashboard as displayed below:
+
 - 1 - Static Telemetry
 - 2 - Dynamic Telemetry.  The telemetry data will indicate the health of each endpoint.
 
@@ -1302,6 +1306,7 @@ This contains the following information
 Each endpoint publishes the following Dynamic Telemetry Data in 5-minute intervals.
 
 The following are displayed in the data chart and also appear in the New Event Log:
+
 - Available-memory
 - Core-temp-Celsius
 - Percent-disk-used
@@ -1318,6 +1323,7 @@ The device must be connected in order to view the telemetry information
 on the ThingsBoard.
 
 #### Static Telemetry
+
 To view the device`s static telemetry, click the Static Telemetry window.
 
 <img src="media/In-Band Manageability User Guide - ThingsBoard/media/image55.png" style="width:5.65625in;height:3.58333in" />
@@ -1334,6 +1340,7 @@ see the below
 [General Troubleshooting](Issues%20and%20Troubleshooting.md)
 
 ### OTA Error Status
+
 [Error Messages](Error%20Messages.md)
 
 ### Acquiring Debug Messages from Agents

inbm/Changelog.md

@@ -9,7 +9,10 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/).
 ### Changed
 
 ### Security
+
 - Updated urllib3 version to 2.50.  Resolves CVE-2025-50181
+- Updated Python version to 3.13.  Resolves CVE-2020-1171, CVE-2024-49050,
+   CVE-2020-1192, CVE-2020-17163, CVE-2025-49714
 
 ## 4.2.8.7 - 2025-07-10
 

inbm/cloudadapter-agent/README.md

@@ -16,6 +16,7 @@
   - [Run the agent](#run-the-agent)
   - [Test the agent](#test-the-agent)
 - [Debian package (DEB)](#debian-package-deb)
+
 </details>
 
 ## Overview
@@ -31,31 +32,37 @@
 The agent supports MQTT for communication with cloud services.
 
 There are two supported cloud services:
-  - [Azure IoT Central](../../docs/In-Band%20Manageability%20User%20Guide%20-%20Azure.md)
-  - [ThingsBoard](../../docs/In-Band%20Manageability%20User%20Guide%20-%20ThingsBoard.md)
+
+- [Azure IoT Central](../../docs/In-Band%20Manageability%20User%20Guide%20-%20Azure.md)
+- [ThingsBoard](../../docs/In-Band%20Manageability%20User%20Guide%20-%20ThingsBoard.md)
 
 ### Intel Manageability
 
 The agent uses MQTT for communication with other agents.
 
 #### Publish channels
+
 The agent publishes to the following topics:
-  - cloudadapter-agent state: `cloudadapter/state` when dead/running
-  - Manifest install requests: `manageability/request/`
+
+- cloudadapter-agent state: `cloudadapter/state` when dead/running
+- Manifest install requests: `manageability/request/`
 
 #### Subscribe channels
+
 The agent subscribes to the following topics:
-  - Agent states: `+/state`
-  - Agent events: `manageability/event`
-  - Responses: `manageability/response`
-  - Device telemetry: `manageability/telemetry`
-  - Update from scheduled requests: `manageability/nodeupdate`
+
+- Agent states: `+/state`
+- Agent events: `manageability/event`
+- Responses: `manageability/response`
+- Device telemetry: `manageability/telemetry`
+- Update from scheduled requests: `manageability/nodeupdate`
 
 ❗`+` is a wild-card indicating single level thus matching `diagnostic/state` or `<another-agent>/state`
 
 Events or responses sent to the agent are logged or published to the cloud as-is.
 
 Device telemetry sent to the agent should have the following schema:
+
 ```json
 {
     "type": "object",
@@ -79,7 +86,9 @@ Device telemetry sent to the agent should have the following schema:
     }
 }
 ```
+
 For example:
+
 ```json
 {
     "type": "dynamic_telementry",
@@ -91,46 +100,51 @@ For example:
 ```
 
 ## Install from Source
-❗ Use a Python version greater than 3.12 is installed
+
+❗ Use a Python version greater than 3.13 is installed
 
 - [Build INBM](#../../README.md#build-instructions)
 - [Install INBM](#../../docs/In-Band%20Manageability%20Installation%20Guide%20Ubuntu.md)
 
 ## Usage
+
 ❗Ensure Mosquitto broker is installed and configured for Intel(R) In-Band Manageability.  
 ❗Some commands will require root privileges (sudo)  
 ❗Run commands in the `inbm/cloudadapter-agent` directory
 
+### Setup
 
-### Setup:
 - Run: `make config`
 - Refer to the following documents for cloud setup:
   - [Azure](#../../docs/In-Band%20Manageability%20User%20Guide%20-%20Azure.md)
   - [Thingsboard](#../../docs/In-Band%20Manageability%20User%20Guide%20-%20ThingsBoard.md)
 
-### Changing the logging level:
+### Changing the logging level
 
 - Run: `make logging LEVEL=DEBUG`
 - Valid values for `LEVEL`:
   - `DEBUG`
   - `ERROR`
   - `INFO`
 
-### Run the agent:
+### Run the agent
 
 - Run: `make run`
 
-### Test the agent:
+### Test the agent
 
 - Run: `make tests`
 
 ## Debian package (DEB)
 
 ### Install (For Ubuntu)
+
 After building the above package, if you only want to install the cloudadpater-agent, you can do so by following these steps:
+
 - `cd dist/inbm`
 - Unzip package: `sudo tar -xvf Intel-Manageability.preview.tar.gz`
 - Install package: `dpkg -i cloudadapter-agent<latest>.deb`
 
 ### Uninstall (For Ubuntu)
+
 - `dpkg --purge cloudadapter-agent`

inbm/cloudadapter-agent/cloudadapter/cloudadapter.py

@@ -55,9 +55,9 @@ def start(self) -> None:
 
         fileConfig(path, disable_existing_loggers=False)
         logger = logging.getLogger(__name__)
-        if sys.version_info[0] < 3 or sys.version_info[0] == 3 and sys.version_info[1] < 12:
+        if sys.version_info[0] < 3 or sys.version_info[0] == 3 and sys.version_info[1] < 13:
             logger.error(
-                "Python version must be 3.12 or higher. Python interpreter version: " + sys.version)
+                "Python version must be 3.13 or higher. Python interpreter version: " + sys.version)
             sys.exit(1)
         logger.info('Cloud Adapter agent is running')
 

inbm/cloudadapter-agent/fpm-template/etc/apparmor.d/usr.bin.inbm-cloudadapter

@@ -25,7 +25,6 @@
   /tmp/ rw,
   /tmp/** mrw,
   /usr/bin/gcc-5 rix,
-  /usr/bin/python2.7 ix,
   /usr/bin/inbm-cloudadapter rix,
   /etc/intel-manageability/public/cloudadapter-agent/** r,
   /etc/intel-manageability/secret/cloudadapter-agent/** r,