feat: add Python 3.12 support and drop Python 3.8

.github/workflows/ci.yml

@@ -15,13 +15,13 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        python-version: ['3.11']
+        python-version: ['3.11', '3.12']
         toxenv: [quality, pii_check, django40]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: setup python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
 
@@ -37,7 +37,7 @@ jobs:
       run: tox
 
     - name: Run coverage
-      if: matrix.python-version == '3.11' && matrix.toxenv == 'django40'
+      if: matrix.python-version == '3.12' && matrix.toxenv == 'django40'
       uses: py-cov-action/python-coverage-comment-action@v3
       with:
         GITHUB_TOKEN: ${{ github.token }}

.github/workflows/pypi-publish.yml

@@ -11,11 +11,11 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: setup python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
-          python-version: 3.11
+          python-version: 3.12
 
       - name: Install pip
         run: pip install -r requirements/pip.txt

.github/workflows/upgrade-python-requirements.yml

@@ -15,7 +15,7 @@ jobs:
     uses: openedx/.github/.github/workflows/upgrade-python-requirements.yml@master
     with:
       branch: ${{ github.event.inputs.branch || 'main' }}
-      python_version: "3.11"
+      python_version: "3.12"
       # optional parameters below; fill in if you'd like github or email notifications
       # user_reviewers: ""
       # team_reviewers: ""

.readthedocs.yaml

@@ -9,7 +9,11 @@ version: 2
 sphinx:
   configuration: docs/conf.py
 
+build:
+  os: ubuntu-22.04
+  tools:
+    python: "3.12"
+
 python:
-  version: 3.8
   install:
     - requirements: requirements/doc.txt

CHANGELOG.rst

@@ -16,6 +16,25 @@ Unreleased
 
 *
 
+[0.4.0] - 2026-09-28
+************************************************
+
+Added
+=====
+
+* Added support for Python 3.12
+
+Removed
+=======
+
+* Dropped support for Python 3.8; ``python_requires`` is now ``>=3.11``
+
+Changed
+=======
+
+* Upgraded requirements, including pyjwt 2.15. A malformed token signature may now raise
+  ``jwt.DecodeError`` (the parent of ``InvalidSignatureError``) instead of ``InvalidSignatureError``
+
 [0.3.0] - 2025-06-11
 ************************************************
 

docs/conf.py

@@ -469,7 +469,7 @@ def get_version(*file_paths):
 
 # Example configuration for intersphinx: refer to the Python standard library.
 intersphinx_mapping = {
-    'python': ('https://docs.python.org/3.8', None),
+    'python': ('https://docs.python.org/3.12', None),
     'django': ('https://docs.djangoproject.com/en/3.2/', 'https://docs.djangoproject.com/en/3.2/_objects/'),
     'model_utils': ('https://django-model-utils.readthedocs.io/en/latest/', None),
 }

requirements/base.txt

@@ -1,22 +1,22 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    make upgrade
 #
-asgiref==3.9.2
+asgiref==3.12.1
     # via django
-cffi==2.0.0
+cffi==2.1.1
     # via cryptography
-cryptography==46.0.1
+cryptography==50.0.1
     # via -r requirements/base.in
-django==4.2.24
+django==5.2.17
     # via
-    #   -c https:/raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+    #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
     #   -r requirements/base.in
-pycparser==2.23
+pycparser==3.0
     # via cffi
-pyjwt==2.10.1
+pyjwt==2.15.0
     # via -r requirements/base.in
-sqlparse==0.5.3
+sqlparse==0.6.0
     # via django

requirements/ci.txt

@@ -1,36 +1,43 @@
 #
-# This file is autogenerated by pip-compile with Python 3.11
+# This file is autogenerated by pip-compile with Python 3.12
 # by the following command:
 #
 #    make upgrade
 #
-cachetools==6.2.0
-    # via tox
-chardet==5.2.0
+cachetools==7.2.0
     # via tox
 colorama==0.4.6
     # via tox
-coverage==7.10.7
+coverage==7.16.2
     # via -r requirements/ci.in
-distlib==0.4.0
+distlib==0.4.3
     # via virtualenv
-filelock==3.19.1
+filelock==4.0.5
     # via
+    #   python-discovery
     #   tox
     #   virtualenv
-packaging==25.0
+packaging==26.3
     # via
     #   pyproject-api
     #   tox
-platformdirs==4.4.0
+platformdirs==4.12.1
     # via
     #   tox
     #   virtualenv
 pluggy==1.6.0
     # via tox
-pyproject-api==1.9.1
+pyproject-api==1.11.2
+    # via tox
+python-discovery==1.6.1
+    # via
+    #   tox
+    #   virtualenv
+tomli-w==1.2.0
     # via tox
-tox==4.30.2
+tox==4.64.4
     # via -r requirements/ci.in
-virtualenv==20.34.0
+typing-extensions==4.16.0
+    # via tox
+virtualenv==21.13.0
     # via tox

requirements/constraints.txt

@@ -10,3 +10,7 @@
 
 # Common constraints for edx repos
 -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
+
+# 2026-09-28: code-annotations 3.0.0 requires Python >=3.12, but this library still supports 3.11.
+# Remove once Python 3.11 support is dropped.
+code-annotations<3.0.0