Merge pull request #693 from geopython/snyk-fix-9c5af815887a17447aeb2628a982e5e2

[Snyk] Security upgrade urllib3 from 2.0.7 to 2.5.0

Author: cehbrecht

.github/workflows/main.yml

@@ -33,8 +33,6 @@ jobs:
     strategy:
       matrix:
         include:
-          - tox-env: py38-extra
-            python-version: "3.8"
           - tox-env: py39-extra
             python-version: "3.9"
           - tox-env: py310-extra
@@ -56,7 +54,7 @@ jobs:
     - name: Run tests with tox ⚙️
       run: tox -e ${{ matrix.tox-env }}
     - name: Run coveralls ⚙️
-      if: matrix.python-version == 3.8
+      if: matrix.python-version == 3.9
       uses: AndreMiras/coveralls-python-action@develop
 
   docs:
@@ -66,9 +64,9 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
-        name: Setup Python 3.8
+        name: Setup Python 3.9
         with:
-          python-version: 3.8
+          python-version: 3.9
       - name: Build documentation 🏗️
         run: |
           pip install -e .[dev]

requirements.txt

@@ -12,3 +12,4 @@ owslib
 python-dateutil
 requests
 werkzeug
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability

setup.py

@@ -49,7 +49,6 @@
         "Operating System :: OS Independent",
         "Programming Language :: Python",
         "Programming Language :: Python :: 3",
-        "Programming Language :: Python :: 3.8",
         "Programming Language :: Python :: 3.9",
         "Programming Language :: Python :: 3.10",
         "Programming Language :: Python :: 3.11",
@@ -59,7 +58,7 @@
     "extras_require": dict(
         dev=DEV_REQUIRES,
     ),
-    "python_requires": ">=3.8,<4",
+    "python_requires": ">=3.9,<4",
     "packages": find_packages(exclude=["docs", "tests.*", "tests"]),
     "include_package_data": True,
     "scripts": [],

tox.ini

@@ -1,7 +1,7 @@
 [tox]
 min_version = 4.0
 envlist =
-    py{37,38,39,310,311}{-extra,},
+    py{39,310,311}{-extra,},
     lint
 requires = pip >= 20.0
 opts = --verbose