build: bump vulnerable dependencies

`uv audit` reported 46 advisories in pyjwt, urllib3, virtualenv,
werkzeug, sh and wasmtime. This fixes all that can be fixed from this
repo; sh (pinned to 1.x by gitlint) and wasmtime (no fix released, comes
via gooddata-code-convertors) remain.

User-facing changes:
- gooddata-api-client now requires urllib3 >=2.8.0 (was >=2.6.1), fixing
  HTTPS proxy TLS config being ignored, a chunked deflate infinite loop
  and unbounded chunk-size line buffering.
- gooddata-api-client now requires Python >=3.10 (was >=3.6). urllib3
  2.7+ dropped Python 3.9, so the old marker was no longer accurate.
- gooddata-sdk now requires python-dotenv >=1.2.2 (was >=1.0.0).
- gooddata-pipelines now requires requests >=2.33.0 (was >=2.32.3).
- Behavior change when connecting through an HTTPS proxy (an `https://`
  proxy URL): urllib3 2.8 no longer applies the destination TLS settings
  (`ssl_ca_cert`, `cert_file`, `key_file`) to the TLS handshake with the
  proxy itself. If the proxy certificate was trusted only through
  `ssl_ca_cert`, add its CA to the system trust store. Plain `http://`
  proxies and direct connections are unaffected.
- Environments where another package caps urllib3 below 2.8 will now
  report a dependency conflict at install time.

Internal: test-group urllib3 pins move to `~=2.8`; lock upgrades for
pyjwt 2.15.1 (via msal/azure-identity in pipelines), virtualenv
21.14.5 and werkzeug 3.1.9. The urllib3 and Python requirements are
changed in the openapi-generator templates too so regeneration keeps
them.

Author: hkad98

.openapi-generator/custom_templates/requirements.mustache

@@ -1,3 +1,3 @@
 python_dateutil >= 2.5.3
 setuptools >= 21.0.0
-urllib3 ~= 2.6.1
+urllib3 ~= 2.8

.openapi-generator/custom_templates/setup.mustache

@@ -19,7 +19,7 @@ VERSION = "{{packageVersion}}"
 # http://pypi.python.org/pypi/setuptools
 
 REQUIRES = [
-  "urllib3 >= 2.6.1",
+  "urllib3 >= 2.8.0",
   "python-dateutil",
 {{#asyncio}}
   "aiohttp >= 3.0.0",
@@ -41,7 +41,7 @@ setup(
     author_email="{{infoEmail}}{{^infoEmail}}team@openapitools.org{{/infoEmail}}",
     url="{{packageUrl}}",
     keywords=["OpenAPI", "OpenAPI-Generator", "{{{appName}}}"],
-    python_requires=">=3.6",
+    python_requires=">=3.10",
     install_requires=REQUIRES,
     packages=find_packages(exclude=["test", "tests"]),
     include_package_data=True,

gooddata-api-client/requirements.txt

@@ -1,3 +1,3 @@
 python_dateutil >= 2.5.3
 setuptools >= 21.0.0
-urllib3 ~= 2.6.1
+urllib3 ~= 2.8

gooddata-api-client/setup.py

@@ -25,7 +25,7 @@
 # http://pypi.python.org/pypi/setuptools
 
 REQUIRES = [
-  "urllib3 >= 2.6.1",
+  "urllib3 >= 2.8.0",
   "python-dateutil",
 ]
 
@@ -37,7 +37,7 @@
     author_email="support@gooddata.com",
     url="",
     keywords=["OpenAPI", "OpenAPI-Generator", "OpenAPI definition"],
-    python_requires=">=3.6",
+    python_requires=">=3.10",
     install_requires=REQUIRES,
     packages=find_packages(exclude=["test", "tests"]),
     include_package_data=True,

packages/gooddata-fdw/pyproject.toml

@@ -54,7 +54,7 @@ test = [
     "pytest-json-report==1.5.0",
     "vcrpy~=8.3.0",
     # TODO - Bump the version together with bumping the version of openapi generator
-    "urllib3~=2.7.0",
+    "urllib3~=2.8",
     "pyyaml",
     "tests_support",
 ]

packages/gooddata-pandas/pyproject.toml

@@ -61,7 +61,7 @@ test = [
     "pytest-snapshot==0.9.0",
     "pytest-order~=1.5.0",
     "vcrpy~=8.3.0",
-    "urllib3~=2.7.0",
+    "urllib3~=2.8",
     "python-dotenv~=1.2.3",
     "pyyaml",
     "tests_support",

packages/gooddata-pipelines/pyproject.toml

@@ -9,7 +9,7 @@ readme = "README.md"
 requires-python = ">=3.10"
 dependencies = [
     "pydantic (>=2.9.2,<3.0.0)",
-    "requests (>=2.32.3,<3.0.0)",
+    "requests (>=2.33.0,<3.0.0)",
     "types-requests (>1.0.0,<3.0.0)",
     "gooddata-sdk~=1.76.0",
     "boto3 (>=1.39.3,<2.0.0)",

packages/gooddata-sdk/pyproject.toml

@@ -33,7 +33,7 @@ dependencies = [
     "cattrs>=22.1.0,<=26.1.0",
     "brotli==1.2.0",
     "requests>=2.33.0,<3.0.0",
-    "python-dotenv>=1.0.0,<2.0.0",
+    "python-dotenv>=1.2.2,<2.0.0",
     "gooddata-code-convertors>=11.57.0",
 ]
 classifiers = [
@@ -68,7 +68,7 @@ test = [
     "pytest-snapshot==0.9.0",
     "pytest-order~=1.5.0",
     "vcrpy~=8.3.0",
-    "urllib3~=2.7.0",
+    "urllib3~=2.8",
     "python-dotenv~=1.2.3",
     "deepdiff~=9.1.0",
     "tests_support",