Signed-off-by: Jono Yang <[email protected]>

Author: JonoYang

.github/workflows/pypi-release.yml

@@ -71,6 +71,9 @@ jobs:
     needs:
       - create-gh-release
     runs-on: ubuntu-24.04
+    environment: pypi-publish
+    permissions:
+      id-token: write
 
     steps:
       - name: Download built archives
@@ -82,5 +85,3 @@ jobs:
       - name: Publish to PyPI
         if: startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}

.readthedocs.yml

@@ -9,7 +9,7 @@ version: 2
 build:
   os: ubuntu-22.04
   tools:
-    python: "3.11"
+    python: "3.13"
 
 # Build PDF & ePub
 formats:

README.rst

@@ -1,15 +1,15 @@
 purl-validator
 ================================
 
-PURLs are everywhere in SBOMs. But with adoption comes widespread errors. 
+PURLs are everywhere in SBOMs. But with adoption comes widespread errors.
 A recent study on the quality of SBOMs revealed that for many proprietary and
-open source tools, PURLs in SBOMs are inconsistent, fake, incorrect, or 
-misleading. This is a serious problem to any application of SBOMs for 
-cybersecurity and application security, as well as related compliance 
-regulations. This project is to create a PURL validator that's decentralized 
+open source tools, PURLs in SBOMs are inconsistent, fake, incorrect, or
+misleading. This is a serious problem to any application of SBOMs for
+cybersecurity and application security, as well as related compliance
+regulations. This project is to create a PURL validator that's decentralized
 such that libraries can use it offline and help them create better PURLs.
 
-Building this compact dataset is new territory. There is research 
-and exploration necessary for creating a super compact data structure 
-that is also easy and fast to query across multiple languages. The data 
+Building this compact dataset is new territory. There is research
+and exploration necessary for creating a super compact data structure
+that is also easy and fast to query across multiple languages. The data
 structure will also need memory-mapping to avoid running out of memory.

azure-pipelines.yml

@@ -19,54 +19,54 @@ jobs:
       parameters:
           job_name: ubuntu22_cpython
           image_name: ubuntu-22.04
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv/bin/pytest -n 2 -vvs
 
     - template: etc/ci/azure-posix.yml
       parameters:
           job_name: ubuntu24_cpython
           image_name: ubuntu-24.04
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv/bin/pytest -n 2 -vvs
 
     - template: etc/ci/azure-posix.yml
       parameters:
           job_name: macos13_cpython
           image_name: macOS-13
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv/bin/pytest -n 2 -vvs
 
     - template: etc/ci/azure-posix.yml
       parameters:
           job_name: macos14_cpython
           image_name: macOS-14
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv/bin/pytest -n 2 -vvs
 
     - template: etc/ci/azure-posix.yml
       parameters:
           job_name: macos15_cpython
           image_name: macOS-15
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv/bin/pytest -n 2 -vvs
 
     - template: etc/ci/azure-win.yml
       parameters:
           job_name: win2022_cpython
           image_name: windows-2022
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv\Scripts\pytest -n 2 -vvs
 
     - template: etc/ci/azure-win.yml
       parameters:
           job_name: win2025_cpython
           image_name: windows-2025
-          python_versions: ['3.9', '3.10', '3.11', '3.12', '3.13']
+          python_versions: ['3.10', '3.11', '3.12', '3.13', '3.14']
           test_suites:
               all: venv\Scripts\pytest -n 2 -vvs

etc/scripts/utils_thirdparty.py

@@ -115,14 +115,14 @@
 TRACE_ULTRA_DEEP = False
 
 # Supported environments
-PYTHON_VERSIONS = "39", "310", "311", "312", "313"
+PYTHON_VERSIONS = "310", "311", "312", "313", "314"
 
 PYTHON_DOT_VERSIONS_BY_VER = {
-    "39": "3.9",
     "310": "3.10",
     "311": "3.11",
     "312": "3.12",
     "313": "3.13",
+    "314": "3.14",
 }
 
 
@@ -134,11 +134,11 @@ def get_python_dot_version(version):
 
 
 ABIS_BY_PYTHON_VERSION = {
-    "39": ["cp39", "cp39m", "abi3"],
     "310": ["cp310", "cp310m", "abi3"],
     "311": ["cp311", "cp311m", "abi3"],
     "312": ["cp312", "cp312m", "abi3"],
     "313": ["cp313", "cp313m", "abi3"],
+    "314": ["cp314", "cp314m", "abi3"],
 }
 
 PLATFORMS_BY_OS = {

pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["setuptools >= 50", "wheel", "setuptools_scm[toml] >= 6"]
+requires = ["setuptools >= 50", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [tool.setuptools_scm]
@@ -68,7 +68,7 @@ include = [
   "."
 
 ]
-# ignore test data and testfiles: they should never be linted nor formatted 
+# ignore test data and testfiles: they should never be linted nor formatted
 exclude = [
 # main style
   "**/tests/data/**/*",

setup.cfg

@@ -31,7 +31,7 @@ license_files =
     README.rst
 
 [options]
-python_requires = >=3.9
+python_requires = >=3.10
 
 package_dir =
     =src

src/README.rst

@@ -0,0 +1,2 @@
+Put your Python source code (and installable data) in this directory.
+