Merge pull request #24 from redhat-chai-bot/fix/dependabot-security-bumps

fix: bump urllib3 and pydantic to resolve 7 CVEs, drop Python 3.9, add Python 3.14

Author: asafbennatan

.github/workflows/python.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
 
     steps:
       - uses: actions/checkout@v4

pyproject.toml

@@ -8,12 +8,12 @@ authors = [
 license = { text = "Apache 2.0" }
 readme = "README.md"
 keywords = ["OpenAPI", "OpenAPI-Generator", "Flight Control API"]
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 
 dependencies = [
-  "urllib3 (>=2.1.0,<3.0.0)",
+  "urllib3 (>=2.7.0,<3.0.0)",
   "python-dateutil (>=2.8.2)",
-  "pydantic (>=2)",
+  "pydantic (>=2.4.0)",
   "typing-extensions (>=4.7.1)",
 ]
 

requirements.txt

@@ -1,4 +1,4 @@
-urllib3 >= 2.1.0, < 3.0.0
+urllib3 >= 2.7.0, < 3.0.0
 python_dateutil >= 2.8.2
-pydantic >= 2
+pydantic >= 2.4.0
 typing-extensions >= 4.7.1

setup.py

@@ -23,11 +23,11 @@
 # http://pypi.python.org/pypi/setuptools
 NAME = "flightctl-client"
 VERSION = "1.3.0"
-PYTHON_REQUIRES = ">= 3.9"
+PYTHON_REQUIRES = ">= 3.10"
 REQUIRES = [
-    "urllib3 >= 2.1.0, < 3.0.0",
+    "urllib3 >= 2.7.0, < 3.0.0",
     "python-dateutil >= 2.8.2",
-    "pydantic >= 2",
+    "pydantic >= 2.4.0",
     "typing-extensions >= 4.7.1",
 ]