Repository navigation
chore(python)!: drop support for 3.10 and some maintenance - #22
Merged
Merged
Conversation
cjumel
changed the title
cjumel
force-pushed
the
cj/maintenance
branch
from
October 22, 2026 10:33
54ed8db to
1b32b77
Compare
marchelbling
previously approved these changes
Oct 22, 2026
As of 2026-10-01 Python 3.10 has reached its end of life state, hence we're removing it from the supported version of this SDK.
This commit performs several different changes to address some critical vulnerabilities recently found in the python ecosystem, which are described [here](https://www.reddit.com/r/Python/comments/1xb1lcf/info_for_python_users_regarding_emudhra_emsign_ca/): - require uv >= 0.13.5 - upgrade a few lockfile dependencies: certifi, aiohttp, anyio, langraph-sdk, setuptool, urllib3 (some of those required bypassing the exclude-newer uv setting) - upgrade the gh-action-pypi-publish to patch the same kind of vulnerabilities that have been identified - switch the release workflow from using the semantic-release github action to using the local environment, as the latter is more controlled and the former did suffer from the same potential vulnerability
cjumel
force-pushed
the
cj/maintenance
branch
from
October 22, 2026 10:36
1b32b77 to
5e2c1d2
Compare
marchelbling
approved these changes
Oct 22, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
chore(python)!: drop 3.10
As of 2026-10-01 Python 3.10 has reached its end of life state, hence
we're removing it from the supported version of this SDK.
chore(deps): bump or replace deps with vulnerabilities
This commit performs several different changes to address some
critical vulnerabilities recently found in the python ecosystem, which
are described here:
langraph-sdk, setuptool, urllib3 (some of those required bypassing
the exclude-newer uv setting)
vulnerabilities that have been identified
action to using the local environment, as the latter is more
controlled and the former did suffer from the same potential
vulnerability
chore(deps): bump GH actions