Update Python stack versions: 3.13.12, 3.14.3

[Copilot]

Patch version bumps for Python 3.13 (3.13.11 → 3.13.12) and 3.14 (3.14.2 → 3.14.3). Versions 3.10.20, 3.11.15, and 3.12.13 are already current.

Changes

• platforms/python/versions/{bullseye,bookworm}/versionsToBuild.txt — Added 3.13.12 (GPG: 7169605F62C751356D054A26A821E680E5FA6305) and 3.14.3 (SHA256: A97D5549...D902B)
• platforms/python/versions/noble/versionsToBuild.txt — Added 3.14.3
• images/constants.yml — Updated python313Version and python314Version
• src/BuildScriptGenerator/PythonVersions.cs — Updated Python313Version; added Python314Version = "3.14.3"

Python 3.14 continues to use SHA256 verification (no GPG, consistent with Sigstore adoption in 3.14+), while 3.13 uses the existing GPG key.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• blog.python.org
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• java.sun.com
  • Triggering command: /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/tools/linux64/java/bin/java -jar /opt/hostedtoolcache/CodeQL/2.25.1/x64/codeql/xml/tools/xml-extractor.jar --fileList=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/working/files-to-index10925957640158625251.list --sourceArchiveDir=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/src --outputDir=/tmp/codeql-scratch-4f4c92147983937e/dbs/csharp/trap/csharp (dns block)
• www.python.org
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
  • Triggering command: /usr/bin/curl curl -s --max-time 15 REDACTED 20' --output-dircredential.helper (dns block)
  • Triggering command: /usr/bin/curl curl -sv --max-time 30 REDACTED 20' --output-dircredential.username (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)