use strict version

.gitlab-ci.yml

@@ -27,7 +27,7 @@ audit:
     - pushes
   needs: []
   before_script:
-    - pip install --upgrade pip
+    - pip install pip==25.3
     - pip install poetry==2.1.1
     - poetry config virtualenvs.create false
     - poetry install --no-interaction --no-ansi
@@ -49,7 +49,7 @@ test:
     DATABASE_URL: "postgresql://postgres:postgres@postgres:5432/$POSTGRES_DB"
     DB_HOST: postgres
   before_script:
-    - pip install --upgrade pip
+    - pip install pip==25.3
     - pip install poetry==2.1.1
     - poetry config virtualenvs.create false
     - poetry install --no-interaction --no-ansi

Dockerfile

@@ -1,10 +1,8 @@
 FROM python:3.12.9-slim-bullseye AS builder
 ENV PYTHONUNBUFFERED 1
 COPY . ./
-
 ENV POETRY_VERSION=2.1.1
-
+RUN pip install pip==25.3
-RUN pip install --upgrade pip
 RUN pip install "poetry==$POETRY_VERSION"
 RUN poetry self add poetry-plugin-export
 RUN poetry export --without-hashes --format=requirements.txt --output requirements.txt
@@ -24,7 +22,7 @@ ENV PYTHONUNBUFFERED=1 \
     PIP_DEFAULT_TIMEOUT=100
 
 RUN apt-get update && apt-get install --no-install-recommends -y build-essential
-RUN pip install --upgrade pip
+RUN pip install pip==25.3
 RUN pip install --no-deps -r requirements.txt
 
 RUN python manage.py collectstatic --noinput