Drop support of end-of-life Python 3.9 (#1325)

* Drop support of end-of-life Python 3.9

Python 3.9 was officially EOL in October of 2025. We're already
starting to see some packages like pyupgrade drop 3.9. The
pyupgrade library is a dependency for pre-commit.

This change:
* removes testing on 3.9
* updates classifier without 3.9
* sets minimum Python install ver to 3.10
* sets default tox environment to 3.10
* removes mentions of 3.9 related comments

https://devguide.python.org/versions/

Signed-off-by: Eric Brown <[email protected]>

* Quote version strings in workflow

Signed-off-by: Eric Brown <[email protected]>

* Run readthedocs in 3.10

Signed-off-by: Eric Brown <[email protected]>

---------

Signed-off-by: Eric Brown <[email protected]>

Author: ericwb

.github/workflows/publish-to-pypi.yml

@@ -13,10 +13,10 @@ jobs:
     - uses: actions/checkout@v5
       with:
         fetch-depth: 0
-    - name: Set up Python 3.9
+    - name: Set up Python 3.10
       uses: actions/setup-python@v6
       with:
-        python-version: 3.9
+        python-version: 3.10
 
     - name: Install dependencies
       run: pip install tox wheel

.github/workflows/publish-to-test-pypi.yml

@@ -13,10 +13,10 @@ jobs:
     - uses: actions/checkout@v5
       with:
         fetch-depth: 0
-    - name: Set up Python 3.9
+    - name: Set up Python 3.10
       uses: actions/setup-python@v6
       with:
-        python-version: 3.9
+        python-version: 3.10
 
     - name: Install dependencies
       run: pip install tox wheel

.github/workflows/pythonpackage.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: [3.9]
+        python-version: ["3.10"]
     steps:
     - name: Checkout repository
       uses: actions/checkout@v5
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: [3.9]
+        python-version: ["3.10"]
     steps:
     - name: Checkout repository
       uses: actions/checkout@v5
@@ -47,7 +47,6 @@ jobs:
     strategy:
       matrix:
         python-version: [
-          ["3.9", "39"],
           ["3.10", "310"],
           ["3.11", "311"],
           ["3.12", "312"],

.readthedocs.yaml

@@ -3,7 +3,7 @@ version: 2
 build:
   os: ubuntu-lts-latest
   tools:
-    python: "3.9"
+    python: "3.10"
 
 sphinx:
   configuration: doc/source/conf.py

bandit/plugins/hashlib_insecure_functions.py

@@ -11,10 +11,7 @@
 can be used to create insecure hash functions like MD4 and MD5 if they are
 passed as algorithm names to this function.
 
-For Python versions prior to 3.9, this check is similar to B303 blacklist
-except that this checks for insecure hash functions created using
-``hashlib.new`` function. For Python version 3.9 and later, this check
-does additional checking for usage of keyword usedforsecurity on all
+This check does additional checking for usage of keyword usedforsecurity on all
 function variations of hashlib.
 
 Similar to ``hashlib``, this plugin also checks for usage of one of the

examples/hashlib_new_insecure_functions.py

@@ -16,13 +16,11 @@
 
 hashlib.new(name='SHA', data=b'test')
 
-# usedforsecurity arg only availabe in Python 3.9+
 hashlib.new('sha1', usedforsecurity=True)
 
 # Test that plugin does not flag valid hash functions.
 hashlib.new('sha256')
 
 hashlib.new('SHA512')
 
-# usedforsecurity arg only availabe in Python 3.9+
 hashlib.new(name='sha1', usedforsecurity=False)

setup.cfg

@@ -17,7 +17,6 @@ classifiers =
     Operating System :: MacOS :: MacOS X
     Programming Language :: Python
     Programming Language :: Python :: 3
-    Programming Language :: Python :: 3.9
     Programming Language :: Python :: 3.10
     Programming Language :: Python :: 3.11
     Programming Language :: Python :: 3.12

setup.py

@@ -13,7 +13,7 @@
 
 
 setuptools.setup(
-    python_requires=">=3.9",
+    python_requires=">=3.10",
     setup_requires=["pbr>=2.0.0"],
     pbr=True,
     data_files=data_files,

tox.ini

@@ -1,6 +1,6 @@
 [tox]
 minversion = 3.2.0
-envlist = py39,pep8
+envlist = py310,pep8
 
 [testenv]
 usedevelop = True