Skip to content

fix: resolve open dependabot security alerts #110

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jonathannorris wants to merge 7 commits into
base: main
Choose a base branch
from
Open

fix: resolve open dependabot security alerts #110

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
3effda5
fix: bump black and django to resolve dependabot security alerts
jonathannorris Mar 15, 2026
d2c7acf
fix: split lint deps into requirements.lint.txt for Python 3.10+ compat
jonathannorris Mar 15, 2026
ca0d0d9
fix: resolve remaining dependabot security alerts
jonathannorris Apr 22, 2026
a84133c
fix: drop Python 3.9 from CI matrix
jonathannorris Apr 22, 2026
1fd802f
fix: update type stub versions and django example README
jonathannorris Apr 24, 2026
be56616
chore: merge main into branch, keep security-fix versions for django/…
jonathannorris Apr 24, 2026
5d4b46d
fix: address Copilot review feedback on python version and dep pinning
jonathannorris Apr 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/unit_test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
runs-on: ${{matrix.os}}
strategy:
matrix:
python-version: ["3.12", "3.9"]
python-version: ["3.12", "3.10"]
Comment thread
jonathannorris marked this conversation as resolved.
os: [ubuntu-latest, windows-latest]

steps:
Expand Down
2 changes: 1 addition & 1 deletion example/django-app/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ To find Python SDK usage documentation, visit our [docs](https://docs.devcycle.c

## Requirements.

Python 3.7+ and Django 4.2+
Python 3.10+ and Django 6.0.4+

## Installation

Expand Down
2 changes: 1 addition & 1 deletion example/django-app/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,2 +1,2 @@
django >= 4.2.29
django >= 6.0.4
Comment thread
jonathannorris marked this conversation as resolved.
-e ../../
2 changes: 1 addition & 1 deletion requirements.lint.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,5 +4,5 @@ black~=26.3.1
mypy~=1.15.0
mypy-extensions~=1.0.0
ruff~=0.9.0
types-requests~=2.32.0
types-requests~=2.33.0
types-urllib3~=1.26.25.14
6 changes: 3 additions & 3 deletions requirements.test.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
-r requirements.txt

pytest~=7.4.0
pytest~=9.0.3
pytest-benchmark~=4.0.0
Comment on lines +3 to 4
Copy link

Copilot AI Apr 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

requirements.test.txt now requires pytest~=9.0.3, but pyproject.toml’s [tool.pytest.ini_options] minversion is still set to 7.0. This mismatch can cause confusing failures depending on how pytest is invoked; update the configured minversion to match the dependency (or keep pytest in the 7.x/8.x range if that’s the intended minimum).

Copilot uses AI. Check for mistakes.
responses~=0.25.6
types-requests~=2.32.0
types-urllib3~=1.26.25.14
types-requests>=2.32.0
types-urllib3>=1.26.0
2 changes: 1 addition & 1 deletion requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
setuptools >= 21.0.0
urllib3 >= 1.15.1
requests >= 2.32
requests >= 2.33.0
wasmtime ~= 30.0.0
protobuf >= 4.23.3
openfeature-sdk ~= 0.8.0
Expand Down
2 changes: 1 addition & 1 deletion setup.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,7 @@
url="https://github.com/devcycleHQ/python-server-sdk",
keywords=["DevCycle"],
install_requires=REQUIRES,
python_requires=">=3.9",
python_requires=">=3.10",
packages=find_packages(),
Comment on lines +27 to 28
Copy link

Copilot AI Apr 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

python_requires is bumped from >=3.9 to >=3.10, which is a breaking support-policy change and is not mentioned in the PR description (which frames this as dependency bumps only). If dropping 3.9 support is intentional, please also update the repo’s documented/checked minimums (e.g., README Requirements and pyproject’s tool configs currently reference 3.9) and consider whether a major version bump/release note is needed; otherwise revert this to keep 3.9 support.

Copilot uses AI. Check for mistakes.
package_data={
"": ["VERSION.txt"],
Expand Down
Loading