From 963ee89528ec36fd60b1ea0ad8407cd14669aa4d Mon Sep 17 00:00:00 2001
From: Tim Wojtulewicz <tim@corelight.com>
Date: Tue, 19 Aug 2025 09:35:49 -0700
Subject: [PATCH] CI: Update CentOS 9 to Python 3.13

---
 NEWS                          |  2 ++
 ci/centos-stream-9/Dockerfile | 10 +++++++---
 2 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/NEWS b/NEWS
index f6d562464d..7b21393a74 100644
--- a/NEWS
+++ b/NEWS
@@ -11,6 +11,8 @@ We would like to thank ... for their contributions to this release.
 Breaking Changes
 ----------------
 
+- Python 3.10 is now required for Zeek and all of its associated subprojects.
+
 - The ``&optional`` script attribute will now error when applied to anything that's
   not a record field. Previously, this would have surprising behavior.
 
diff --git a/ci/centos-stream-9/Dockerfile b/ci/centos-stream-9/Dockerfile
index ad8b6e7a70..0c0451f06c 100644
--- a/ci/centos-stream-9/Dockerfile
+++ b/ci/centos-stream-9/Dockerfile
@@ -34,9 +34,9 @@ RUN dnf -y --nobest install \
     openssl \
     openssl-devel \
     procps-ng \
-    python3 \
-    python3-devel \
-    python3-pip\
+    python3.13 \
+    python3.13-devel \
+    python3.13-pip\
     sqlite \
     swig \
     tar \
@@ -47,4 +47,8 @@ RUN dnf -y --nobest install \
 # Set the crypto policy to allow SHA-1 certificates - which we have in our tests
 RUN dnf -y --nobest install crypto-policies-scripts && update-crypto-policies --set LEGACY
 
+# Override the default python3.9 installation paths with 3.13
+RUN alternatives --install /usr/bin/python3 python3 /usr/bin/python3.13 10
+RUN alternatives --install /usr/bin/pip3 pip3 /usr/bin/pip3.13 10
+
 RUN pip3 install websockets junit2html