Skip to content

🛡️ bump requests 2.34.2 & urllib3 2.7.0; drop Python 3.8/3.9 #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
VanDelinea merged 2 commits into from
Jul 23, 2026
Merged

🛡️ bump requests 2.34.2 & urllib3 2.7.0; drop Python 3.8/3.9 #96

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
5e8925f
🛡️ bump requests 2.34.2 & urllib3 2.7.0; drop Python 3.8/3.9
VanDelinea Jul 23, 2026
e176656
Merge branch 'feature/server-detection' of https://github.com/Delinea…
VanDelinea Jul 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/workflows/run_tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,8 @@ jobs:
environment: testing
strategy:
matrix:
python: [3.8, 3.9, "3.10", "3.11"]
# Python 3.8/3.9 dropped: fixed requests/urllib3 pins require Python >= 3.10 (work item 741117)
python: ["3.10", "3.11", "3.12"]

steps:
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -207,7 +207,7 @@ When using a self-signed certificate for SSL, the `REQUESTS_CA_BUNDLE` environme

## Create a Build Environment (optional)

The SDK requires [Python 3.8](https://www.python.org/downloads/) or higher.
The SDK requires [Python 3.10](https://www.python.org/downloads/) or higher.

First, ensure Python is in `$PATH`, then run:

Expand Down
16 changes: 11 additions & 5 deletions pyproject.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,14 +9,20 @@ author-email = "GitHub@delinea.com"
classifiers = [
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3.8",
"Programming Language :: Python :: 3.9",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11"
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12"
]
description-file = "README.md"
# BREAKING (consumer-facing): the requests floor was raised from 2.12.5 to 2.34.2
# to clear CVE-2026-25645 (requests) and its transitive urllib3 advisories for
# downstream installs, not just CI. requests 2.34.2 requires Python >= 3.10.
requires = [
"requests >= 2.12.5"
"requests >= 2.34.2"
]
requires-python=">=3.8"
# BREAKING (consumer-facing): minimum Python raised from 3.8 to 3.10. The fixed
# requests/urllib3 releases that clear the flagged CVEs dropped 3.8/3.9 support
# (both EOL). Consumers on Python 3.8/3.9 must stay on an older SDK release or
# upgrade their runtime. See work item 741117.
requires-python=">=3.10"
dist-name = "python-tss-sdk"
3 changes: 2 additions & 1 deletion tox.ini
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,8 @@
# Docs for tox config -> https://tox.readthedocs.io/en/latest/config.html

[tox]
envlist = 3.8, 3.9, 3.10, 3.11, 3.12
# Python 3.8/3.9 dropped: fixed requests/urllib3 pins require Python >= 3.10 (work item 741117)
envlist = 3.10, 3.11, 3.12
isolated_build = True
skipsdist = True

Expand Down
Loading