Venafi / Venafi/vcert-python

RFC: Drop Python 3.9 support

Open
#208 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Python
Stars
22
Forks
23
Avg merge
2d 3h
Merged PRs (30d)
13

Description

Python 3.9 reached end-of-life on October 31, 2025 and no longer receives security patches. We're planning to raise the minimum supported Python version in an upcoming release.

Motivation:

  • CVE fixes for several dependencies require Python 3.10+
  • Security scanning tools (pip-audit, bandit) have dropped 3.9 compatibility in newer versions
  • Python 3.9 is EOL upstream - continuing to support it means ignoring vulnerabilities we can't fix

pip will automatically serve the last compatible release to users on older Python versions, so existing installations won't break.

We haven't finalized the target version yet. Comments and concerns welcome.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

This is an unresolved RFC: the target Python version has not been finalized, and no files or tests are named. Start by reviewing the package's supported-version configuration and dependency and security-tool compatibility, then confirm the chosen minimum version and the release plan as done.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
28/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.