chore(deps): Update dependencies, test python 3.14, and fix cache bug in CI (#113)

* Bump dependencies to get rid of some vulnerabilities

* Update test to account for new click version

* python 3.14 support

* fix uv cache overwriting

Author: qTipTip

.github/workflows/ci_tests.yaml

@@ -10,7 +10,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: [ "3.10", "3.11", "3.12", "3.13" ]
+        python-version: [ "3.10", "3.11", "3.12", "3.13", "3.14" ]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
@@ -28,9 +28,9 @@ jobs:
         name: Define a cache for the virtual environment based on the dependencies lock file
         with:
           path: ./.venv
-          key: venv-${{ hashFiles('uv.lock') }}
+          key: venv-${{ matrix.python-version }}-${{ hashFiles('uv.lock') }}
       - name: Install the project dependencies
-        run: uv sync --extra dev
+        run: uv sync --extra dev --python ${{ matrix.python-version }}
       - name: Install pyright
         run: uv tool install pyright
       - name: Run type checking

CHANGELOG.md

@@ -8,6 +8,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 # Released
 
+## 5.3.0 - 27/06/2026
+
+### Added
+
+- Support for Python 3.14 (added to the CI tests).
+
+### Security
+
+- Bumped minimum versions of `pillow` (>=12.2.0) and `requests` (>=2.33.0) to pull in
+  fixes for known CVEs, and upgraded all locked dependencies to non-vulnerable versions.
+
 ## 5.2.0 - 27/06/2026
 
 ### Fixed

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "pylette"
-version = "5.2.0"
+version = "5.3.0"
 description = "A Python library for extracting color palettes from images."
 authors = [
     {name = "Ivar Stangeby"}
@@ -17,13 +17,14 @@ classifiers = [
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Typing :: Typed"
 ]
 dependencies = [
     "numpy>=1.26.4",
     "opencv-python>=4.11.0.86",
-    "pillow>=9.3",
-    "requests>=2.32.3",
+    "pillow>=12.2.0",
+    "requests>=2.33.0",
     "scikit-learn>=1.2",
     "typer>=0.12.5",
     "typing-extensions>=4.4.0",
@@ -45,7 +46,7 @@ packages = ["Pylette"]
 [project.optional-dependencies]
 dev = [
     "pre-commit>=3.7.1",
-    "pytest>=8.2.2",
+    "pytest>=9.0.3",
     "opencv-python>=4.10.0.84",
     "mkdocs[python]>=1.6.0",
     "mkdocs-material>=9.5.27",

tests/integration/test_cli.py

@@ -10,7 +10,7 @@
 def test_cli_no_input_is_error():
     result = runner.invoke(pylette_app, [])
     assert result.exit_code == 2
-    assert "Usage: " in result.stderr
+    assert "Usage: " in result.output
 
     result_help = runner.invoke(pylette_app, ["--help"])
     assert result_help.exit_code == 0