Skip to content

Release Python Storages v1.1.0#963

Open
stas-schaller wants to merge 1 commit intomasterfrom
release/sdk/python/storage/v1.1.0
Open

Release Python Storages v1.1.0#963
stas-schaller wants to merge 1 commit intomasterfrom
release/sdk/python/storage/v1.1.0

Conversation

@stas-schaller
Copy link
Contributor

Summary

Release branch for v1.1.0 — raises the Python floor to 3.9 to align with Core SDK v17.2.0 and updates the Core dependency floor accordingly.

Changes

Maintenance

  • Raise minimum Python version from 3.6 to 3.9
  • Update keeper-secrets-manager-core dependency floor from >=16.3.5 to >=17.2.0
  • Add Python 3.13 classifier; remove 3.6, 3.7, 3.8 classifiers
  • Add v1.1.0 entry to README Change Log

Breaking Changes

Python 3.6, 3.7, and 3.8 are no longer supported. Users on those versions must remain on v1.0.2.

Related Issues

  • KSM-764 (CVE-2026-0994 compliance — Python 3.9+ unblocks protobuf 6.x in GCP KMS storage)

@stas-schaller stas-schaller changed the title Release keeper-secrets-manager-storage v1.1.0 Release Python Storages v1.1.0 Mar 9, 2026
@stas-schaller stas-schaller force-pushed the release/sdk/python/storage/v1.1.0 branch from 580a225 to 2638bf6 Compare March 9, 2026 18:32
Align storage package with Python Core SDK v17.2.0 and resolve urllib3/boto3
dependency conflict by raising the Python floor to 3.10+.

Features:
- KSM-833: bump keeper-secrets-manager-storage to v1.1.0

Maintenance:
- raise minimum Python version from 3.6 to 3.10 (resolves urllib3/boto3 conflict on Python 3.9)
- require keeper-secrets-manager-core>=17.2.0
- update publish workflow: checkout@v4, python3 -m build --no-isolation, version pre-check, SBOM generation, wheel CVE-2026-24049 pin
@stas-schaller stas-schaller force-pushed the release/sdk/python/storage/v1.1.0 branch from 2638bf6 to f03bc6d Compare March 10, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant