diff --git a/Dockerfile b/Dockerfile
index e23b7eb..a6abc69 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,9 @@
-FROM python:3.8.6-slim-buster
+FROM python:3.10.6-slim-buster
+
+# data-solutions gha works without this, but the glovebox code validation fails
+RUN apt-get update && apt-get install -y --no-install-recommends make curl
+
 COPY requirements.txt /requirements.txt
 RUN pip install -r /requirements.txt
 
-WORKDIR /data-challenges
+WORKDIR /workspace
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..566b563
--- /dev/null
+++ b/README.md
@@ -0,0 +1,62 @@
+
+# release
+
+- create `py-${PYTHON_VERSION}-${YEAR}-${QUARTER}` branch
+- update `Dockerfile` source image python version
+- update `requirements.txt` from [data-setup specs/releases/glovebox.txt](https://github.com/lewagon/data-setup/blob/master/specs/releases/glovebox.txt)
+- push branch
+- draft a `release` (which triggers the `ghcr_publish_on_release_tag` GHA)
+- update `data-solutions` glovebox image
+- update `active_admin` programs to use the image
+
+## draft a `release`
+
+[draft a new release](https://github.com/lewagon/data-runner/releases):
+- choose a tag: use `${BRANCH_NAME}-v1` (ignore branch/tag naming confusion warning) / create
+- choose a target: use `${BRANCH_NAME}`
+- release title: use `${BRANCH_NAME}-v1`
+- description: ...
+- publish release
+
+list container images:
+
+``` bash
+gh release list --repo lewagon/data-runner
+```
+
+## update `data-solutions` glovebox image
+
+[edit data-solutions/test-solutions-action/Dockerfile](https://github.com/lewagon/data-solutions/blob/master/test-solutions-action/Dockerfile):
+- replace `FROM ghcr.io/lewagon/data-runner:$TAG_NAME`
+
+## update `active_admin` programs to use the image
+
+[edit data program](https://kitt.lewagon.com/active_admin/programs/10/edit)
+- runner tag: use `${BRANCH_NAME}-v1`
+- update program
+
+# release update
+
+- push branch
+- edit `release` (which triggers the `ghcr_publish_on_release_tag` GHA)
+- update `data-solutions` glovebox image
+- update `active_admin` programs to use the image
+
+## edit `release`
+
+[edit release](https://github.com/lewagon/data-runner/releases):
+- edit the release
+- choose a tag: `${BRANCH_NAME}-v2` / create
+- release title: `${BRANCH_NAME}-v2`
+- update release
+
+# files
+
+``` bash
+.github/workflows/ghcr_publish_on_release_tag.yml           # publication GHA
+.github/workflows/ghcr_build_latest_on_push.yml             # unused ? (no push/merge on master)
+```
+
+# source
+
+requirements.txt    [data-setup specs/releases/past/2022_Q4/glovebox.txt](https://github.com/lewagon/data-setup/blob/setup-2022-q4/specs/releases/past/2022_Q4/glovebox.txt)
diff --git a/requirements.txt b/requirements.txt
index ca88bd5..4a6c415 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,14 +1,68 @@
-pytest
-pylint
-ipdb
-pyyaml
-nbresult
-autopep8
-flake8
-lxml
-requests
-bs4
-pandas==1.2
-matplotlib
-numpy
-scikit-learn
+appnope==0.1.3
+astroid==2.11.7
+asttokens==2.0.8
+attrs==22.1.0
+autopep8==1.6.0
+backcall==0.2.0
+beautifulsoup4==4.11.1
+certifi==2022.9.24
+charset-normalizer==2.1.1
+cycler==0.11.0
+decorator==5.1.1
+dill==0.3.6
+executing==1.1.1
+flake8==4.0.1
+fonttools==4.38.0
+idna==3.4
+iniconfig==1.1.1
+ipdb==0.13.9
+ipython==8.5.0
+isort==5.10.1
+jedi==0.18.1
+joblib==1.1.1
+kiwisolver==1.4.4
+lazy-object-proxy==1.7.1
+lxml==4.9.1
+matplotlib==3.5.3
+matplotlib-inline==0.1.6
+mccabe==0.6.1
+memoized-property==1.0.3
+nbresult==0.0.8
+numpy==1.23.4
+packaging==21.3
+pandas==1.4.4
+parso==0.8.3
+pexpect==4.8.0
+pickleshare==0.7.5
+Pillow==9.1.1
+platformdirs==2.5.2
+pluggy==1.0.0
+prompt-toolkit==3.0.31
+ptyprocess==0.7.0
+pure-eval==0.2.2
+py==1.11.0
+pycodestyle==2.8.0
+pyflakes==2.4.0
+Pygments==2.13.0
+pylint==2.14.5
+pyparsing==3.0.9
+pytest==7.1.3
+python-dateutil==2.8.2
+pytz==2022.1
+PyYAML==5.4.1
+requests==2.28.1
+scikit-learn==1.1.2
+scipy==1.8.1
+setuptools-scm==6.4.2
+six==1.16.0
+soupsieve==2.3.2.post1
+stack-data==0.5.1
+threadpoolctl==3.1.0
+toml==0.10.2
+tomli==2.0.1
+tomlkit==0.11.5
+traitlets==5.5.0
+Unidecode==1.3.6
+urllib3==1.26.12
+wcwidth==0.2.5
+wrapt==1.14.1