[cjumel]

• chore(python)!: drop 3.10 and test in 3.15
  As of 2026-10-01 Python 3.10 as reached its end of life state, hence
  we're removing it from the supported version of this SDK. Additionally,
  2026-10-09 marked Python 3.15's first release, hence we're adding it to
  the text matrix in place of 3.14.

• chore(deps): bump or replace deps with vulnerabilities
  This commit performs several different changes to address some
  critical vulnerabilities recently found in the python ecosystem, which
  are described here:

  • require uv >= 0.13.5
  • upgrade a few lockfile dependencies: certifi, aiohttp, multidict,
    urllib3 (some of those required bypassing the exclude-newer uv
    setting)
  • upgrade the gh-action-pypi-publish to patch the same kind of
    vulnerabilities that have been identified
  • switch the release workflow from using the semantic-release github
    action to using the local environment, as the latter is more
    controlled and the former did suffer from the same potential
    vulnerability

• chore(deps): bump GH actions

[marchelbling]

Let's require certifi>=2026.10.19 in the published dependencies so installing or upgrading the SDK pulls the patched CA bundle. Pin setup-uv to v10.3.2 (07a047e608db84b3d8c06cd9a7c7dcc9c355c18e) in both workflows, with version: 0.13.5, and set required-version to >=0.13.5,<0.14.0. 0.13.5 is the release that rejects the compromised intermediate keys and ships the patched managed CPython builds.

[marchelbling]

👍 checked the CI logs to ensure that it installs uv 0.13.5.
Thank you!