Raise the Python floor to >=3.11 and land the pillow 13.0.0 security update

pyproject.toml

@@ -12,7 +12,7 @@ description = "High-integrity micro-learning platform for Active Inference & the
 authors = [
     {name = "Daniel Ari Friedman", email = "daniel@activeinference.institute"}
 ]
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 dependencies = [
     "numpy>=1.24.0",
     "matplotlib>=3.7.0",
@@ -74,6 +74,7 @@ module = ["scipy.*"]
 ignore_missing_imports = true
 
 [tool.uv]
+constraint-dependencies = ["pillow>=13.0.0"]
 
 [dependency-groups]
 # The tools the documented gates run (`uv run pytest`, `uv run mypy src`) must be

scripts/reset_local_skilltree.py

@@ -16,7 +16,7 @@
 import subprocess
 import sys
 import time
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from pathlib import Path
 from typing import Any
 
@@ -65,7 +65,7 @@ def dashboard_pid_path(state_dir: Path) -> Path:
 
 def timestamp() -> str:
     """Return a compact UTC timestamp for backup filenames."""
-    return datetime.now(timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+    return datetime.now(UTC).strftime("%Y%m%dT%H%M%SZ")
 
 
 def backup_auth_state(

src/release_readiness.py

@@ -153,7 +153,7 @@ def render_release_readiness_inventory(
     date: _dt.date | None = None,
 ) -> str:
     """Render the canonical release-readiness inventory Markdown."""
-    today = date or _dt.datetime.now(_dt.timezone.utc).date()
+    today = date or _dt.datetime.now(_dt.UTC).date()
     probes = blocker_probes or BlockerProbeSummary(
         public_repository="not refreshed by this validation run",
         docker_daemon="not refreshed by this validation run",

src/skilltree/dependency_reconciler.py

@@ -6,7 +6,7 @@
 import time
 from collections.abc import Callable, Iterable
 from dataclasses import dataclass, field
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from pathlib import Path
 from typing import Any, Protocol
 
@@ -98,7 +98,7 @@ def to_dict(self) -> dict[str, Any]:
 
 
 def _utc_now() -> str:
-    return datetime.now(timezone.utc).isoformat().replace("+00:00", "Z")
+    return datetime.now(UTC).isoformat().replace("+00:00", "Z")
 
 
 def dependency_pair_from_mapping(

src/skilltree/local_auth_state.py

@@ -5,7 +5,7 @@
 import stat
 import urllib.parse
 from dataclasses import dataclass
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from pathlib import Path
 from typing import Any
 
@@ -361,4 +361,4 @@ def describe_local_auth(
 
 
 def _utc_now() -> str:
-    return datetime.now(timezone.utc).isoformat(timespec="seconds")
+    return datetime.now(UTC).isoformat(timespec="seconds")