ci: fix download artifact vulnerability

.github/workflows/packing.yml

@@ -6,6 +6,10 @@ on:
   pull_request_target:
     types: [labeled]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   pack_pip:
     # We want to run on external PRs, but not on our own internal
@@ -43,7 +47,7 @@ jobs:
         run: make pip-dist-check
 
       - name: Archive pip artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4.4.0
         with:
           name: pip_dist
           path: pip_dist
@@ -84,7 +88,7 @@ jobs:
           tarantool-version: '2.11'
 
       - name: Download pip package artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: pip_dist
           path: pip_dist
@@ -134,7 +138,7 @@ jobs:
         run: python3 .github/scripts/remove_source_code.py
 
       - name: Download pip package artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: pip_dist
           path: pip_dist
@@ -202,7 +206,7 @@ jobs:
         run: pip3 install twine
 
       - name: Download pip package artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: pip_dist
           path: pip_dist
@@ -271,7 +275,7 @@ jobs:
         run: make rpm-dist-check
 
       - name: Archive RPM artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4.4.0
         with:
           name: rpm_dist_${{ matrix.target.os }}_${{ matrix.target.dist }}
           path: rpm_dist
@@ -320,11 +324,11 @@ jobs:
 
       - name: Install tarantool
         run: |
-          curl -L https://tarantool.io/yeohchA/release/2/installer.sh | bash
+          curl -L https://tarantool.io/release/2/installer.sh | bash
           dnf install -y tarantool tarantool-devel
 
       - name: Download RPM artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: rpm_dist_${{ matrix.target.os }}_${{ matrix.target.dist }}
           path: rpm_dist
@@ -372,7 +376,7 @@ jobs:
         run: sudo apt install -y curl make
 
       - name: Download RPM artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: rpm_dist_${{ matrix.target.os }}_${{ matrix.target.dist }}
           path: rpm_dist
@@ -433,7 +437,7 @@ jobs:
         run: make deb-dist-check
 
       - name: Archive deb artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4.4.0
         with:
           name: deb_dist
           path: deb_dist
@@ -484,13 +488,13 @@ jobs:
       - name: Install tarantool ${{ matrix.tarantool }}
         run: |
           apt install -y curl
-          curl -L https://tarantool.io/yeohchA/release/2/installer.sh | bash
+          curl -L https://tarantool.io/release/2/installer.sh | bash
           apt install -y tarantool tarantool-dev
         env:
           DEBIAN_FRONTEND: noninteractive
 
       - name: Download deb artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: deb_dist
           path: deb_dist
@@ -542,7 +546,7 @@ jobs:
         run: sudo apt install -y curl make
 
       - name: Download deb artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4.1.8
         with:
           name: deb_dist
           path: deb_dist

.github/workflows/reusable_testing.yml

@@ -19,7 +19,7 @@ jobs:
           repository: ${{ github.repository_owner }}/tarantool-python
 
       - name: Download the tarantool build artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v4.1.8
         with:
           name: ${{ inputs.artifact_name }}
 

.github/workflows/testing.yml

@@ -6,6 +6,10 @@ on:
   pull_request_target:
     types: [labeled]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   run_tests_ce_linux:
     # We want to run on external PRs, but not on our own internal
@@ -29,7 +33,6 @@ jobs:
           - '2.11'
           - 'master'
         python:
-          - '3.6'
           - '3.7'
           - '3.8'
           - '3.9'
@@ -153,7 +156,7 @@ jobs:
             path: 'release/linux/x86_64/2.10/'
           - bundle: 'sdk-gc64-2.11.0-0-r563.linux.x86_64'
             path: 'release/linux/x86_64/2.11/'
-        python: ['3.6', '3.11']
+        python: ['3.7', '3.11']
 
     steps:
       - name: Clone the connector
@@ -221,7 +224,7 @@ jobs:
         tarantool:
           - '2.11'
         python:
-          - '3.6'
+          - '3.7'
           - '3.11'
     steps:
       - name: Clone the connector repo
@@ -274,7 +277,7 @@ jobs:
         tarantool:
           - '2.11.0.g247a9a418-1'
         python:
-          - '3.6'
+          - '3.7'
           - '3.11'
 
     steps:
@@ -344,7 +347,7 @@ jobs:
         tarantool:
           - '2.11.0.g247a9a418-1'
         python:
-          - '3.6'
+          - '3.7'
           - '3.11'
     steps:
       - name: Clone the connector repo

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## Unreleased
+
+### Changed
+- Drop Python 3.6 support (PR #327).
+
 ## 1.2.0 - 2024-03-27
 
 ### Added

requirements.txt

@@ -1,3 +1,2 @@
 msgpack
 pytz
-dataclasses; python_version <= '3.6'

setup.py

@@ -7,7 +7,7 @@
 import codecs
 import os
 
-from setuptools import setup, find_packages
+from setuptools import find_packages, setup
 from setuptools.command.build_py import build_py
 
 # Extra commands for documentation management
@@ -112,7 +112,7 @@ def get_dependencies(filename):
     command_options=command_options,
     install_requires=get_dependencies('requirements.txt'),
     setup_requires=[
-        'setuptools_scm==6.4.2',
+        'setuptools_scm==7.1.0',
     ],
-    python_requires='>=3.6',
+    python_requires='>=3.7',
 )