fix: update security dependencies for Python 3.10+ (#112)

* chore(deps): bump virtualenv from 20.36.1 to 21.7.13

Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.36.1 to 21.7.13.
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.36.1...21.7.13)

---
updated-dependencies:
- dependency-name: virtualenv
  dependency-version: 21.7.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: update SDK security dependencies

Require Python 3.10 so the universal lock uses patched releases for every supported interpreter.

Update the setup action to install the patched Hatch and virtualenv toolchain, and document the support boundary.

Assisted-by: Codex:GPT-6

* fix: cap artifact metadata at 2.4

Keep built distributions readable by the locked Twine metadata parser.

Assisted-by: Codex:GPT-6

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jdalton <john.david.dalton@gmail.com>

Author: dependabot[bot]

.github/actions/setup-hatch/action.yml

@@ -9,5 +9,4 @@ runs:
     - shell: bash
       run: |
         python -m pip install --upgrade pip
-        pip install "virtualenv<20.36"
-        pip install hatchling==1.27.0 hatch==1.14.0
+        python -m pip install "hatch==1.18.1" "hatchling==1.32.0" "virtualenv==21.7.13"

README.rst

@@ -2,6 +2,11 @@
 socketdev
 #########
 
+Supported Python versions
+-------------------------
+
+This SDK supports Python 3.10 and newer.
+
 Purpose
 -------
 

pyproject.toml

@@ -1,15 +1,13 @@
 [build-system]
-# 1.27.0 is the newest hatchling that supports Python 3.9, which this
-# package's requires-python still includes.
 requires = ["hatchling==1.32.0"]
 build-backend = "hatchling.build"
 
 [project]
 name = "socketdev"
 dynamic = ["version"]
-requires-python = ">= 3.9"
+requires-python = ">= 3.10"
 dependencies = [
-    'requests>=2.32.5,<3',
+    'requests>=2.33.0,<3',
     'typing-extensions>=4.12.2,<5'
 ]
 readme = "README.rst"
@@ -37,17 +35,21 @@ path = "socketdev/version.py"
 
 [tool.hatch.build.targets.wheel]
 packages = ["socketdev"]
+core-metadata-version = "2.4"
+
+[tool.hatch.build.targets.sdist]
+core-metadata-version = "2.4"
 
 # modern, faster linter and language server. install with `pip install -e ".[dev]"`
 [project.optional-dependencies]
 dev = [
     "ruff>=0.3.0",
-    "hatch>=1.14.0",
+    "hatch>=1.18.1",
     "hatchling>=1.27.0",
     "twine>=4.0.0"
 ]
 test = [
-    "pytest>=7.0.0",
+    "pytest>=9.0.3",
     "pytest-cov>=4.0.0"
 ]