chore: Update ruff, aiohttp, cryptography, urllib3, codecov-action; drop Python 3.8; replace Snyk with SCA scan

.github/workflows/sca_scan.yml

@@ -0,0 +1,16 @@
+name: SCA
+on:
+  push:
+    branches: ["master"]
+  pull_request:
+    branches: ["master"]
+jobs:
+  snyk-cli:
+    uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main
+    with:
+      additional-arguments: "--exclude=README.md,.jfrog --command=./venv/bin/python3"
+      python-version: "3.11"
+      pre-scan-commands: |
+        python3 -m venv venv --upgrade-deps
+        ./venv/bin/pip3 install -r requirements.txt
+    secrets: inherit

.github/workflows/test.yml

@@ -80,6 +80,6 @@ jobs:
 
       - if: ${{ matrix.python-version == '3.10' }}
         name: Upload coverage
-        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # pin@5.5.1
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # pin@6.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}

.gitignore

@@ -62,4 +62,7 @@ docs/build/
 .vscode/
 
 # OS-specific files
-.DS_Store
+.DS_Store
+
+# AI tools
+.claude/

README.md

@@ -34,7 +34,7 @@ pip install auth0-python
 ```
 
 **Requirements:**
-- Python ≥3.8 (Python 3.7 support has been dropped)
+- Python ≥3.9 (Python 3.8 support has been dropped)
 
 ## Reference
 

pyproject.toml

@@ -14,7 +14,6 @@ classifiers = [
     "Intended Audience :: Developers",
     "Programming Language :: Python",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.8",
     "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
@@ -36,17 +35,17 @@ Repository = 'https://github.com/auth0/auth0-python'
 Homepage = 'https://auth0.com'
 
 [tool.poetry.dependencies]
-python = "^3.8"
+python = ">=3.9.2,<4.0"
 httpx = ">=0.21.2"
 pydantic = ">= 1.9.2"
 pydantic-core = ">=2.18.2"
 typing_extensions = ">= 4.0.0"
 # Authentication API dependencies
-aiohttp = ">=3.10.11"
-cryptography = ">=43.0.1"
+aiohttp = ">=3.11.18"
+cryptography = ">=44.0.0"
 pyjwt = ">=2.8.0"
 requests = ">=2.32.3"
-urllib3 = ">=2.2.3"
+urllib3 = ">=2.3.0"
 
 [tool.poetry.group.dev.dependencies]
 mypy = "==1.13.0"
@@ -56,13 +55,13 @@ pytest-xdist = "^3.6.1"
 python-dateutil = "^2.9.0"
 types-python-dateutil = "^2.9.0.20240316"
 types-requests = "^2.31.0"
-ruff = "==0.11.5"
+ruff = "==0.15.8"
 # Authentication API test dependencies
 aioresponses = "^0.7.8"
 mock = "^5.1.0"
 pytest-aiohttp = "^1.0.4"
 pytest-cov = "^4.1.0"
-responses = ">=0.23.3,<0.26.0"
+responses = ">=0.23.3,<0.28.0"
 
 [tool.pytest.ini_options]
 asyncio_mode = "auto"

requirements.txt

@@ -5,8 +5,8 @@ pydantic-core>=2.18.2
 typing_extensions>=4.0.0
 
 # Authentication API dependencies
-aiohttp>=3.10.11
-cryptography>=43.0.1
+aiohttp>=3.11.18
+cryptography>=44.0.0
 pyjwt>=2.8.0
 requests>=2.32.3
-urllib3>=2.2.3
+urllib3>=2.3.0

v5_MIGRATION_GUIDE.md

@@ -15,7 +15,7 @@ A guide to migrating the Auth0 Python SDK from v4 to v5.
 
 ### Python versions
 
-v5 supports Python 3.8 and above.
+v5 supports Python 3.9 and above.
 
 ### Authentication API