Python 3.9 reached end-of-life on October 31, 2025 and no longer receives security patches. We're planning to raise the minimum supported Python version in an upcoming release.
Motivation:
- CVE fixes for several dependencies require Python 3.10+
- Security scanning tools (pip-audit, bandit) have dropped 3.9 compatibility in newer versions
- Python 3.9 is EOL upstream - continuing to support it means ignoring vulnerabilities we can't fix
pip will automatically serve the last compatible release to users on older Python versions, so existing installations won't break.
We haven't finalized the target version yet. Comments and concerns welcome.
Python 3.9 reached end-of-life on October 31, 2025 and no longer receives security patches. We're planning to raise the minimum supported Python version in an upcoming release.
Motivation:
pip will automatically serve the last compatible release to users on older Python versions, so existing installations won't break.
We haven't finalized the target version yet. Comments and concerns welcome.