Release 3.0.0 - 🪦 Snake Killer 🪦
Cleans up security, CI/CD and dependencies and replaces stale old tooling with lightning fast modern alternatives.
- 🐍 Dropped Python 3.9 and 3.10. Floor is 3.11. (#197)
- 🔒 Big security sweep:
cryptography,requests,protobuf,pyasn1,urllib3,pygmentsbumped past their CVEs;aiohttpevicted from the graph entirely. (#197) - 🦀 poetry → uv, flake8/isort → ruff. Build backend is now
hatchling. Contributors will needuv sync/uv run. (#197) - 🚂 New CI jobs:
lint,security(weeklypip-audit), and amin-versionsjob that proves our floor pins still build. (#197) - 🔑 PyPI releases now use Trusted Publishing (OIDC). No more long-lived API token. (#199)
- 🐋 Dockerfile rewritten with uv and proper multi-stage layer caching. (#197)
Full Changelog: v2.6.0...v3.0.0