build(training): standardize on Python 3.12 across manifests, containers, and runtime scripts

.devcontainer/devcontainer.json

@@ -3,7 +3,7 @@
 {
 	"name": "physical-ai-toolchain-devcontainer",
 	// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
-	"image": "mcr.microsoft.com/devcontainers/python:3.11-bookworm",
+	"image": "mcr.microsoft.com/devcontainers/python:3.12-bookworm",
 	// Features to add to the dev container. More info: https://containers.dev/features.
 	"features": {
 		"ghcr.io/devcontainers/features/common-utils:2": {},
@@ -98,8 +98,8 @@
 		"actionlint": "ACTIONLINT_VERSION=1.7.10 && ACTIONLINT_SHA256=f4c76b71db5755a713e6055cbb0857ed07e103e028bda117817660ebadb4386f && curl -sSfL \"https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VERSION}/actionlint_${ACTIONLINT_VERSION}_linux_amd64.tar.gz\" -o /tmp/actionlint.tar.gz && echo \"${ACTIONLINT_SHA256} /tmp/actionlint.tar.gz\" | sha256sum -c --quiet - && sudo tar -xzf /tmp/actionlint.tar.gz -C /usr/local/bin actionlint && rm /tmp/actionlint.tar.gz",
 		"golangci-lint": "GOLANGCI_LINT_VERSION=2.11.4 && GOLANGCI_LINT_SHA256=200c5b7503f67b59a6743ccf32133026c174e272b930ee79aa2aa6f37aca7ef1 && curl -fsSL \"https://github.com/golangci/golangci-lint/releases/download/v${GOLANGCI_LINT_VERSION}/golangci-lint-${GOLANGCI_LINT_VERSION}-linux-amd64.tar.gz\" -o /tmp/golangci-lint.tar.gz && echo \"${GOLANGCI_LINT_SHA256}  /tmp/golangci-lint.tar.gz\" | sha256sum -c --quiet - && sudo tar -xzf /tmp/golangci-lint.tar.gz -C /usr/local/bin --strip-components=1 \"golangci-lint-${GOLANGCI_LINT_VERSION}-linux-amd64/golangci-lint\" && rm /tmp/golangci-lint.tar.gz",
 		"update-bashrc": "echo 'export PATH=\"${containerWorkspaceFolder}/scripts:${containerWorkspaceFolder}/node_modules/.bin:$PATH\"' | sudo tee -a  ~/.bashrc",
-		"osmo-cli": "OSMO_VERSION=v6.2.10 && OSMO_INSTALLER_SHA256=744c671bf56e1ed875dfdcca686f8ec5cfc7fc94258bacdb0dce46fedc514604 && curl -fsSL \"https://raw.githubusercontent.com/NVIDIA/OSMO/refs/tags/${OSMO_VERSION}/install.sh\" -o /tmp/osmo_install.sh && echo \"${OSMO_INSTALLER_SHA256}  /tmp/osmo_install.sh\" | sha256sum -c --quiet - && bash /tmp/osmo_install.sh && rm /tmp/osmo_install.sh",
-		"ngc-cli": "NGC_CLI_VERSION=3.41.4 && NGC_CLI_SHA256=2c86681048ab8e2980bdd6aa6c17f086eff988276ad90a28f1307b69fdb50252 && curl -fsSL \"https://api.ngc.nvidia.com/v2/resources/nvidia/ngc-apps/ngc_cli/versions/${NGC_CLI_VERSION}/files/ngccli_linux.zip\" -o /tmp/ngccli.zip && echo \"${NGC_CLI_SHA256}  /tmp/ngccli.zip\" | sha256sum -c --quiet - && sudo unzip -o /tmp/ngccli.zip -d /usr/local/bin && rm /tmp/ngccli.zip && sudo chmod u+x /usr/local/bin/ngc",
+		"osmo-cli": "OSMO_VERSION=6.2.10 && OSMO_INSTALLER_SHA256=3f78389902fe74926bfe5a56093adb001bf82df214ee3219ea8f795ed788bf19 && curl -fsSL \"https://github.com/NVIDIA/OSMO/releases/download/${OSMO_VERSION}/osmo-client-installer-${OSMO_VERSION}-linux-x86_64.sh\" -o /tmp/osmo_install.sh && echo \"${OSMO_INSTALLER_SHA256}  /tmp/osmo_install.sh\" | sha256sum -c --quiet - && sudo bash /tmp/osmo_install.sh && rm /tmp/osmo_install.sh",
+		"ngc-cli": "NGC_CLI_VERSION=3.41.4 && NGC_CLI_SHA256=2c86681048ab8e2980bdd6aa6c17f086eff988276ad90a28f1307b69fdb50252 && curl -fsSL \"https://api.ngc.nvidia.com/v2/resources/nvidia/ngc-apps/ngc_cli/versions/${NGC_CLI_VERSION}/files/ngccli_linux.zip\" -o /tmp/ngccli.zip && echo \"${NGC_CLI_SHA256}  /tmp/ngccli.zip\" | sha256sum -c --quiet - && sudo unzip -o /tmp/ngccli.zip -d /usr/local && rm /tmp/ngccli.zip && sudo chmod u+x /usr/local/ngc-cli/ngc && sudo ln -sf /usr/local/ngc-cli/ngc /usr/local/bin/ngc",
 		"az-ml": "az extension add -n ml --yes || true"
 	},
 

.github/copilot-instructions.md

@@ -47,7 +47,7 @@ Conventions, domain knowledge, and non-obvious patterns for agents working in th
 
 * Do not modify files in `external/`
 * Version: managed by release-please across `pyproject.toml` and `package.json`
-* Python: >=3.11, managed by `uv` (not pip); `hatchling` builds `training/rl` into wheel
+* Python: >=3.12, managed by `uv` (not pip); `hatchling` builds `training/rl` into wheel
 * Linting: `npm run lint:md` (markdownlint-cli2), `npm run spell-check` (cspell), `npm run lint:yaml` (yaml-lint)
 
 ## Terraform Conventions
@@ -104,7 +104,7 @@ Detailed template and structure in `.github/instructions/shell-scripts.instructi
 
 ## Python Conventions
 
-* Package management: `uv` (not pip); `hatchling` builds; Python >=3.11
+* Package management: `uv` (not pip); `hatchling` builds; Python >=3.12
 * Child configs extend root ruff config: `extend = "../../pyproject.toml"`
 * `from __future__ import annotations` required as the first import in every module
 
@@ -184,7 +184,7 @@ Always %-style formatting: `_LOGGER.warning("Invalid %s, using default (%d)", ar
 ### Ruff Configuration
 
 ```toml
-target-version = "py311"
+target-version = "py312"
 line-length = 120
 select = ["E", "W", "F", "I", "UP", "B", "SIM", "RUF"]
 quote-style = "double"

.github/workflows/aw-dependabot-pr-review.lock.yml

@@ -428,7 +428,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: '3.11'
+          python-version: '3.12'
       - name: Setup uv
         uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
       - name: Create gh-aw temp directory

.github/workflows/dataviewer-backend-pytests.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Setup uv
         uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

.github/workflows/fuzz-regression-tests.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Setup uv
         uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b  # v8.1.0

.github/workflows/pytest-tests.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Setup Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Setup uv
         uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b  # v8.1.0

.github/workflows/validate-config-schema.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
-          python-version: '3.11'
+          python-version: '3.12'
 
       - name: Setup uv
         uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b  # v8.1.0

.python-version

@@ -1 +1 @@
-3.11.13
+3.12.13

data-management/viewer/backend/Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM python:3.14-slim@sha256:bc389f7dfcb21413e72a28f491985326994795e34d2b86c8ae2f417b4e7818aa AS base
+FROM python:3.12-slim AS base
 
 WORKDIR /app
 

data-management/viewer/backend/pyproject.toml

@@ -2,7 +2,7 @@
 name = "lerobot-annotation-api"
 version = "0.1.0"
 description = "API for LeRobot episode annotation system"
-requires-python = ">=3.11"
+requires-python = ">=3.12"
 dependencies = [
     "fastapi==0.136.0",
     "uvicorn[standard]==0.44.0",

data-management/viewer/backend/tests/storage/conftest.py

@@ -1,6 +1,6 @@
 """Shared test fixtures for storage adapter tests."""
 
-from datetime import datetime
+from datetime import UTC, datetime
 
 from src.api.models.annotations import (
     AnomalyAnnotation,
@@ -19,7 +19,7 @@
 
 def create_test_annotation(episode_index: int, user_id: str = "test-user") -> EpisodeAnnotationFile:
     """Create a test annotation file."""
-    now = datetime.utcnow()
+    now = datetime.now(UTC)
     annotation = EpisodeAnnotation(
         annotator_id=user_id,
         timestamp=now,