chore: bump ada-url for Python 3.14, update deps, and fix CI

.github/workflows/codeql.yml

@@ -36,7 +36,7 @@ jobs:
         run: exit 0 # Skip unnecessary test runs for dependabot and merge queues. Artifically flag as successful, as this is a required check for branch protection.
 
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/publish.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true

.github/workflows/rl-scanner.yml

@@ -31,7 +31,7 @@ jobs:
       scan-status: ${{ steps.rl-scan-conclusion.outcome }}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
           fetch-tags: true

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
 
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v6
@@ -36,14 +36,14 @@ jobs:
     - name: Install Poetry
       uses: snok/install-poetry@v1
       with:
-        version: latest
+        version: "2.2.1"
         virtualenvs-create: true
         virtualenvs-in-project: true
         installer-parallel: true
 
     - name: Load cached venv
       id: cached-poetry-dependencies
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ./.venv
         key: venv-${{ runner.os }}-${{ matrix.python-version }}-${{ hashFiles('**/poetry.lock') }}

.gitignore

@@ -26,3 +26,6 @@ coverage.xml
 
 # IDE
 .idea/
+
+# AI Tools
+.claude/

pyproject.toml

@@ -15,15 +15,18 @@ python = "^3.9"
 authlib = "^1.0"      # For JWT/OIDC features
 requests = "^2.31.0"  # If you use requests for HTTP calls (e.g., discovery)
 httpx = "^0.28.1"
-ada-url = "^1.27.0"
+ada-url = [
+    {version = "^1.30.0", python = ">=3.10"},
+    {version = "^1.27.0", python = ">=3.9,<3.10"}
+]
 
 [tool.poetry.group.dev.dependencies]
 pytest = "^8.0"
 pytest-cov = "^4.0"
 pytest-asyncio = "^0.25.3"
 pytest-mock = "^3.15.1"
 pytest-httpx = "^0.35.0"
-ruff = ">=0.1,<0.15"
+ruff = ">=0.1"
 freezegun = "^1.5.5"
 
 [tool.pytest.ini_options]

requirements.txt

@@ -1,14 +1,13 @@
 # This file is maintained manually for SCA scanning (.github/workflows/sca_scan.yml)
 # Source of truth for dependencies: pyproject.toml + poetry.lock
-# Future: Consider auto-generating via poetry export in CI
 
-authlib>=1.6.5
+authlib>=1.6.9
 httpx>=0.28.1
-ada-url>=1.27.0
+ada-url>=1.30.0; python_version >= "3.10"
+ada-url>=1.27.0; python_version < "3.10"
 pytest>=8.0
 pytest-cov>=4.0
 pytest-asyncio>=0.25.3
 pytest-mock>=3.15.1
 pytest-httpx>=0.35.0
-freezegun>=1.5.5
-
+freezegun>=1.5.5