don't merge: update python version support to 3.13 [stash]

.github/workflows/backend_checks.yml

@@ -15,7 +15,7 @@ on:
 
 env:
   IMAGE: ethyca/fides:local
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
   # Docker auth with read-only permissions.
   DOCKER_USER: ${{ secrets.DOCKER_USER }}
   DOCKER_RO_TOKEN: ${{ secrets.DOCKER_RO_TOKEN }}
@@ -49,7 +49,7 @@ jobs:
     strategy:
       matrix:
         # NOTE: These are the currently supported/tested Python Versions
-        python_version: ["3.9.21", "3.10.16"]
+        python_version: ["3.12.4", "3.13.3"]
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -215,7 +215,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python_version: ["3.9.21", "3.10.16"]
+        python_version: ["3.12.4", "3.13.3"]
         test_selection:
           - "ctl-not-external"
           - "ops-unit-api"
@@ -273,7 +273,7 @@ jobs:
     strategy:
       max-parallel: 1 # This prevents collisions in shared external resources
       matrix:
-        python_version: ["3.9.21", "3.10.16"]
+        python_version: ["3.12.4", "3.13.3"]
     runs-on: ubuntu-latest
     timeout-minutes: 20
     # In PRs run with the "unsafe" label, or run on a "push" event to main
@@ -335,7 +335,7 @@ jobs:
     strategy:
       max-parallel: 1 # This prevents collisions in shared external resources
       matrix:
-        python_version: ["3.9.21", "3.10.16"]
+        python_version: ["3.12.4", "3.13.3"]
     runs-on: ubuntu-latest
     timeout-minutes: 30
     # In PRs run with the "unsafe" label, or run on a "push" event to main
@@ -438,7 +438,7 @@ jobs:
     strategy:
       max-parallel: 1 # This prevents collisions in shared external resources
       matrix:
-        python_version: ["3.9.21", "3.10.16"]
+        python_version: ["3.12.4", "3.13.3"]
     steps:
       - name: Download container
         uses: actions/download-artifact@v4

.github/workflows/cli_checks.yml

@@ -17,7 +17,7 @@ on:
       - "release-**"
 
 env:
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
 
 jobs:
   # Basic smoke test of a local install of the fides Python CLI

.github/workflows/cypress_e2e.yml

@@ -12,7 +12,7 @@ env:
   # Docker auth with read-only permissions.
   DOCKER_USER: ${{ secrets.DOCKER_USER }}
   DOCKER_RO_TOKEN: ${{ secrets.DOCKER_RO_TOKEN }}
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
 
 jobs:
   Cypress-E2E:

.github/workflows/publish_docker.yaml

@@ -11,7 +11,7 @@ env:
   # Docker auth with read-write (publish) permissions. Set as env in workflow root as auth is required in multiple jobs.
   DOCKER_USER: ${{ secrets.DOCKER_USER }}
   DOCKER_TOKEN: ${{ secrets.DOCKER_TOKEN }}
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
 
 jobs:
   ParseTags:

.github/workflows/publish_docs.yaml

@@ -10,7 +10,7 @@ on:
 env:
   TAG: ${{ github.event.release.tag_name }}
   PROD_PUBLISH: true
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
 
 jobs:
   publish_docs:

.github/workflows/static_checks.yml

@@ -9,7 +9,7 @@ on:
 
 env:
   IMAGE: ethyca/fides:local
-  DEFAULT_PYTHON_VERSION: "3.10.16"
+  DEFAULT_PYTHON_VERSION: "3.13.3"
   # Docker auth with read-only permissions.
   DOCKER_USER: ${{ secrets.DOCKER_USER }}
   DOCKER_RO_TOKEN: ${{ secrets.DOCKER_RO_TOKEN }}

Dockerfile

@@ -1,5 +1,5 @@
 # If you update this, also update `DEFAULT_PYTHON_VERSION` in the GitHub workflow files
-ARG PYTHON_VERSION="3.10.16"
+ARG PYTHON_VERSION="3.13.3"
 #########################
 ## Compile Python Deps ##
 #########################

docker-compose.yml

@@ -25,7 +25,7 @@ services:
       FIDES__CLI__SERVER_HOST: "fides"
       FIDES__CLI__SERVER_PORT: "8080"
       FIDES__DATABASE__SERVER: "fides-db"
-      FIDES__DEV_MODE: "True"
+      # FIDES__DEV_MODE: "True"
       FIDES__LOGGING__COLORIZE: "True"
       FIDES__USER__ANALYTICS_OPT_OUT: "True"
       FIDES__SECURITY__BASTION_SERVER_HOST: ${FIDES__SECURITY__BASTION_SERVER_HOST-}

noxfile.py

@@ -24,7 +24,7 @@
 # pylint: enable=unused-wildcard-import, wildcard-import, wrong-import-position
 
 REQUIRED_DOCKER_VERSION = "20.10.17"
-REQUIRED_PYTHON_VERSIONS = ["3.9", "3.10"]
+REQUIRED_PYTHON_VERSIONS = ["3.12", "3.13"]
 
 nox.options.sessions = ["open_docs"]
 

pyproject.toml

@@ -77,7 +77,7 @@ ignore_missing_imports = true
 ## Black ##
 ###########
 [tool.black]
-target-version = ["py39"]
+target-version = ["py312"]
 line-length = 88
 include = '\.pyi?$'
 exclude = '''

requirements.txt

@@ -34,7 +34,7 @@ loguru==0.6.0
 multidimensional_urlencode==0.0.4
 pg8000==1.31.2
 nh3==0.2.15
-numpy==1.24.4
+numpy>=2.1.0
 okta==2.7.0
 openpyxl==3.0.9
 networkx==3.1
@@ -43,7 +43,7 @@ pandas==1.4.3
 paramiko==3.4.1
 passlib[bcrypt]==1.7.4
 pyinstrument==4.5.1
-psycopg2-binary==2.9.6
+psycopg2-binary==2.9.10
 pydantic==2.7.1
 pydantic-settings==2.3.3
 pydash==6.0.2
@@ -62,7 +62,7 @@ slowapi==0.1.9
 snowflake-sqlalchemy==1.5.1
 sqlalchemy[asyncio]==1.4.27
 sqlalchemy-citext==1.8.0
-sqlalchemy-bigquery==1.7.0
+sqlalchemy-bigquery==1.15.0
 sqlalchemy-redshift==0.8.11
 sqlalchemy-stubs==0.4
 SQLAlchemy-Utils==0.38.3