fix: update SDK security dependencies

Require Python 3.10 so the universal lock uses patched releases for every supported interpreter.

Update the setup action to install the patched Hatch and virtualenv toolchain, and document the support boundary.

Assisted-by: Codex:GPT-6

Author: jdalton

.github/actions/setup-hatch/action.yml

@@ -9,5 +9,4 @@ runs:
     - shell: bash
       run: |
         python -m pip install --upgrade pip
-        pip install "virtualenv<20.36"
-        pip install hatchling==1.27.0 hatch==1.14.0
+        python -m pip install "hatch==1.18.1" "hatchling==1.32.0" "virtualenv==21.7.13"

README.rst

@@ -2,6 +2,11 @@
 socketdev
 #########
 
+Supported Python versions
+-------------------------
+
+This SDK supports Python 3.10 and newer.
+
 Purpose
 -------
 

pyproject.toml

@@ -1,15 +1,13 @@
 [build-system]
-# 1.27.0 is the newest hatchling that supports Python 3.9, which this
-# package's requires-python still includes.
 requires = ["hatchling==1.32.0"]
 build-backend = "hatchling.build"
 
 [project]
 name = "socketdev"
 dynamic = ["version"]
-requires-python = ">= 3.9"
+requires-python = ">= 3.10"
 dependencies = [
-    'requests>=2.32.5,<3',
+    'requests>=2.33.0,<3',
     'typing-extensions>=4.12.2,<5'
 ]
 readme = "README.rst"
@@ -42,12 +40,12 @@ packages = ["socketdev"]
 [project.optional-dependencies]
 dev = [
     "ruff>=0.3.0",
-    "hatch>=1.14.0",
+    "hatch>=1.18.1",
     "hatchling>=1.27.0",
     "twine>=4.0.0"
 ]
 test = [
-    "pytest>=7.0.0",
+    "pytest>=9.0.3",
     "pytest-cov>=4.0.0"
 ]