diff --git a/.ci/ansible/inventory.yaml b/.ci/ansible/inventory.yaml
index 3b85c5f4057..ad2fbceacdc 100644
--- a/.ci/ansible/inventory.yaml
+++ b/.ci/ansible/inventory.yaml
@@ -5,7 +5,7 @@ all:
       hosts:
         pulp:
         pulp-fixtures:
-        minio:
+        rustfs:
         ci-sftp:
       vars:
         ansible_connection: docker
diff --git a/.ci/ansible/start_container.yaml b/.ci/ansible/start_container.yaml
index f0b4d43c2cb..d471c6499dc 100644
--- a/.ci/ansible/start_container.yaml
+++ b/.ci/ansible/start_container.yaml
@@ -64,9 +64,9 @@
             from botocore.exceptions import ClientError
             client = boto3.client(
                 "s3",
-                aws_access_key_id="{{ minio_access_key }}",
-                aws_secret_access_key="{{ minio_secret_key }}",
-                endpoint_url="http://minio:9000",
+                aws_access_key_id="{{ rustfs_access_key }}",
+                aws_secret_access_key="{{ rustfs_secret_key }}",
+                endpoint_url="http://rustfs:9000",
                 region_name="eu-central-1",
             )
             try:
diff --git a/.ci/assets/ci_constraints.txt b/.ci/assets/ci_constraints.txt
index 3380502b7b2..2b7015fff91 100644
--- a/.ci/assets/ci_constraints.txt
+++ b/.ci/assets/ci_constraints.txt
@@ -1,6 +1,6 @@
 # Pulpcore versions without the openapi command do no longer work in the CI
 # Pulpcore versions without the django 5 storage compatibility will fail, >3.63,<3.70
-pulpcore>=3.21.30,!=3.23.*,!=3.24.*,!=3.25.*,!=3.26.*,!=3.27.*,!=3.29.*,!=3.30.*,!=3.31.*,!=3.32.*,!=3.33.*,!=3.34.*,!=3.35.*,!=3.36.*,!=3.37.*,!=3.38.*,!=3.40.*,!=3.41.*,!=3.42.*,!=3.43.*,!=3.44.*,!=3.45.*,!=3.46.*,!=3.47.*,!=3.48.*,!=3.50.*,!=3.51.*,!=3.52.*,!=3.53.*,!=3.54.*,!=3.64.*,!=3.65.*,!=3.66.*,!=3.67.*,!=3.68.*,!=3.69.*
+pulpcore>=3.49.0,!=3.50.*,!=3.51.*,!=3.52.*,!=3.53.*,!=3.54.*,!=3.64.*,!=3.65.*,!=3.66.*,!=3.67.*,!=3.68.*,!=3.69.*
 
 
 tablib!=3.6.0
diff --git a/.ci/scripts/calc_constraints.py b/.ci/scripts/calc_constraints.py
index 1a4880613ba..b9af2e73f99 100755
--- a/.ci/scripts/calc_constraints.py
+++ b/.ci/scripts/calc_constraints.py
@@ -26,10 +26,14 @@
 def fetch_pulpcore_upper_bound(requirement):
     with urllib.request.urlopen(CORE_TEMPLATE_URL) as f:
         template = yaml.safe_load(f.read())
-    supported_versions = template["supported_release_branches"]
-    supported_versions.append(template["latest_release_branch"])
+    supported_branches = [
+        *template["supported_release_branches"],
+        template["latest_release_branch"],
+    ]
     applicable_versions = sorted(
-        requirement.specifier.filter((Version(v) for v in supported_versions))
+        Version(branch)
+        for branch in supported_branches
+        if requirement.specifier.contains(Version(f"{branch}.999999"))
     )
     if len(applicable_versions) == 0:
         raise Exception("No supported pulpcore version in required range.")
diff --git a/.ci/scripts/pr_labels.py b/.ci/scripts/pr_labels.py
index 4f801c39e18..d4ccc5d9993 100755
--- a/.ci/scripts/pr_labels.py
+++ b/.ci/scripts/pr_labels.py
@@ -1,4 +1,10 @@
 #!/bin/env python3
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "gitpython>=3.1.62",
+# ]
+# ///
 
 # This script is running with elevated privileges from the main branch against pull requests.
 
diff --git a/.ci/scripts/skip_tests.py b/.ci/scripts/skip_tests.py
index 380a3da9f78..fb09fa37c3b 100755
--- a/.ci/scripts/skip_tests.py
+++ b/.ci/scripts/skip_tests.py
@@ -1,4 +1,10 @@
 #!/usr/bin/env python3
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "gitpython>=3.1.62",
+# ]
+# ///
 """
 skip_tests.py - Check if only documentation files were changed in a git branch
 
diff --git a/.ci/scripts/validate_commit_message.py b/.ci/scripts/validate_commit_message.py
index 96b84172f7c..1552f1b2310 100644
--- a/.ci/scripts/validate_commit_message.py
+++ b/.ci/scripts/validate_commit_message.py
@@ -1,6 +1,14 @@
 # This file is managed by the plugin template.
 # Do not edit.
 
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "pygithub",
+#     "pyyaml",
+# ]
+# ///
+
 import os
 import re
 import subprocess
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 4682047735c..115bee836bc 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -33,20 +33,18 @@ jobs:
           path: "pulp-openapi-generator"
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.9"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
-      - name: "Install python dependencies"
-        run: |
-          uv pip install build packaging twine wheel mkdocs jq
       - name: "Build package"
         run: |
-          python3 -m build
-          twine check dist/*
+          uv build
+          uvx twine check dist/*
       - name: "Install built packages"
         run: |
+          # This seems to be the only way to inject the constraints file.
           uv pip install dist/pulpcore-*-py3-none-any.whl -c .ci/assets/ci_constraints.txt
       - name: "Generate api specs"
         run: |
@@ -94,17 +92,6 @@ jobs:
           if-no-files-found: "error"
           retention-days: 5
           overwrite: true
-      - name: "Upload python client docs"
-        uses: "actions/upload-artifact@v7"
-        with:
-          name: "python-client-docs.tar"
-          path: |
-            pulpcore/core-python-client-docs.tar
-            pulpcore/file-python-client-docs.tar
-            pulpcore/certguard-python-client-docs.tar
-          if-no-files-found: "error"
-          retention-days: 5
-          overwrite: true
       - name: "Build Ruby bindings packages"
         run: |
           .github/workflows/scripts/build_ruby_client.sh
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 452d934b082..a56fd0dddfc 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,16 +30,12 @@ jobs:
           path: "pulpcore"
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
-      - name: "Install python dependencies"
-        run: |
-          uv pip install requests pygithub pyyaml
       - name: "Check commit message"
-        if: github.event_name == 'pull_request'
         env:
           PY_COLORS: "1"
           ANSIBLE_FORCE_COLOR: "1"
@@ -67,10 +63,6 @@ jobs:
         with:
           enable-cache: true
 
-      - name: "Install python dependencies"
-        run: |
-          uv pip install gitpython
-
       - name: "Analyze changed files"
         id: "check"
         shell: "bash"
@@ -86,7 +78,7 @@ jobs:
           BASE_REF=${{ github.event.pull_request.base.sha }}
           echo "Checking against:"
           git name-rev $BASE_REF
-          python3 .ci/scripts/skip_tests.py . $BASE_REF
+          uv run --script .ci/scripts/skip_tests.py . $BASE_REF
           exit_code=$?
           if [ $exit_code -ne 0 ] && [ $exit_code -ne 1 ]; then
             echo "Error: skip_tests.py returned unexpected exit code $exit_code"
diff --git a/.github/workflows/create-branch.yml b/.github/workflows/create-branch.yml
index e44dc924c7b..02d1e7f0643 100644
--- a/.github/workflows/create-branch.yml
+++ b/.github/workflows/create-branch.yml
@@ -38,7 +38,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.9"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 44ecdbb1152..1849e7d82c6 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -29,7 +29,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.9"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
diff --git a/.github/workflows/pr_checks.yml b/.github/workflows/pr_checks.yml
index 556d676000b..6817007634c 100644
--- a/.github/workflows/pr_checks.yml
+++ b/.github/workflows/pr_checks.yml
@@ -40,16 +40,15 @@ jobs:
           fetch-depth: 0
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.14"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
           enable-cache: true
       - name: "Determine PR labels"
         run: |
-          uv pip install GitPython==3.1.42
           git fetch origin ${{ github.event.pull_request.head.sha }}
-          python .ci/scripts/pr_labels.py "origin/${{ github.base_ref }}" "${{ github.event.pull_request.head.sha }}" >> "$GITHUB_ENV"
+          uv run --script .ci/scripts/pr_labels.py "origin/${{ github.base_ref }}" "${{ github.event.pull_request.head.sha }}" >> "$GITHUB_ENV"
       - uses: "actions/github-script@v8"
         name: "Apply PR Labels"
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 755a5069a11..106125cccfc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -33,7 +33,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.9"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
diff --git a/.github/workflows/sanity.yml b/.github/workflows/sanity.yml
index e2bf0785cdc..0b11838ab57 100644
--- a/.github/workflows/sanity.yml
+++ b/.github/workflows/sanity.yml
@@ -32,7 +32,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
diff --git a/.github/workflows/scripts/before_install.sh b/.github/workflows/scripts/before_install.sh
index 41e2b6e4a5b..d0fe90db93c 100755
--- a/.github/workflows/scripts/before_install.sh
+++ b/.github/workflows/scripts/before_install.sh
@@ -23,7 +23,7 @@ if [ -f .github/workflows/scripts/pre_before_install.sh ]; then
   source .github/workflows/scripts/pre_before_install.sh
 fi
 
-COMPONENT_VERSION="$(bump-my-version show current_version | tail -n -1 | python -c 'from packaging.version import Version; print(Version(input()))')"
+COMPONENT_VERSION="$(python -c 'import tomllib; from packaging.version import Version; print(Version(tomllib.load(open("pyproject.toml", "rb"))["tool"]["bumpversion"]["current_version"]))')"
 COMPONENT_SOURCE="./pulpcore/dist/pulpcore-${COMPONENT_VERSION}-py3-none-any.whl"
 if [ "$TEST" = "s3" ]; then
   COMPONENT_SOURCE="${COMPONENT_SOURCE}[s3]"
@@ -80,19 +80,19 @@ services:
 VARSYAML
 
 if [ "$TEST" = "s3" ]; then
-  MINIO_ACCESS_KEY=AKIAIT2Z5TDYPX3ARJBA
-  MINIO_SECRET_KEY=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
+  RUSTFS_ACCESS_KEY=AKIAIT2Z5TDYPX3ARJBA
+  RUSTFS_SECRET_KEY=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
   cat >> .ci/ansible/vars/main.yaml << VARSYAML
-  - name: "minio"
-    image: "minio/minio"
+  - name: "rustfs"
+    image: "rustfs/rustfs"
     env:
-      MINIO_ACCESS_KEY: "${MINIO_ACCESS_KEY}"
-      MINIO_SECRET_KEY: "${MINIO_SECRET_KEY}"
+      RUSTFS_ACCESS_KEY: "${RUSTFS_ACCESS_KEY}"
+      RUSTFS_SECRET_KEY: "${RUSTFS_SECRET_KEY}"
     command: "server /data"
 s3_test: true
-minio_access_key: "${MINIO_ACCESS_KEY}"
-minio_secret_key: "${MINIO_SECRET_KEY}"
-pulp_scenario_settings: {"DISABLED_authentication_backends": "@merge django.contrib.auth.backends.RemoteUserBackend", "DISABLED_authentication_json_header": "HTTP_X_RH_IDENTITY", "DISABLED_authentication_json_header_jq_filter": ".identity.user.username", "DISABLED_authentication_json_header_openapi_security_scheme": {"description": "External OAuth integration", "flows": {"clientCredentials": {"scopes": {"api.console": "grant_access_to_pulp"}, "tokenUrl": "https://your-identity-provider/token/issuer"}}, "type": "oauth2"}, "DISABLED_rest_framework__default_authentication_classes": "@merge pulpcore.app.authentication.JSONHeaderRemoteAuthentication", "MEDIA_ROOT": "", "STORAGES": {"default": {"BACKEND": "storages.backends.s3boto3.S3Boto3Storage", "OPTIONS": {"access_key": "AKIAIT2Z5TDYPX3ARJBA", "addressing_style": "path", "bucket_name": "pulp3", "default_acl": "@none", "endpoint_url": "http://minio:9000", "region_name": "eu-central-1", "secret_key": "fqRvjWaPU5o0fCqQuUWbj9Fainj2pVZtBCiDiieS", "signature_version": "s3v4"}}, "staticfiles": {"BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage"}}, "api_root": "/rerouted/djnd/", "domain_enabled": true, "hide_guarded_distributions": true, "rest_framework__default_permission_classes": ["pulpcore.plugin.access_policy.AccessPolicyFromSettings"]}
+rustfs_access_key: "${RUSTFS_ACCESS_KEY}"
+rustfs_secret_key: "${RUSTFS_SECRET_KEY}"
+pulp_scenario_settings: {"DISABLED_authentication_backends": "@merge django.contrib.auth.backends.RemoteUserBackend", "DISABLED_authentication_json_header": "HTTP_X_RH_IDENTITY", "DISABLED_authentication_json_header_jq_filter": ".identity.user.username", "DISABLED_authentication_json_header_openapi_security_scheme": {"description": "External OAuth integration", "flows": {"clientCredentials": {"scopes": {"api.console": "grant_access_to_pulp"}, "tokenUrl": "https://your-identity-provider/token/issuer"}}, "type": "oauth2"}, "DISABLED_rest_framework__default_authentication_classes": "@merge pulpcore.app.authentication.JSONHeaderRemoteAuthentication", "MEDIA_ROOT": "", "STORAGES": {"default": {"BACKEND": "storages.backends.s3boto3.S3Boto3Storage", "OPTIONS": {"access_key": "AKIAIT2Z5TDYPX3ARJBA", "addressing_style": "path", "bucket_name": "pulp3", "default_acl": "@none", "endpoint_url": "http://rustfs:9000", "region_name": "eu-central-1", "secret_key": "fqRvjWaPU5o0fCqQuUWbj9Fainj2pVZtBCiDiieS", "signature_version": "s3v4"}}, "staticfiles": {"BACKEND": "django.contrib.staticfiles.storage.StaticFilesStorage"}}, "api_root": "/rerouted/djnd/", "domain_enabled": true, "hide_guarded_distributions": true, "rest_framework__default_permission_classes": ["pulpcore.plugin.access_policy.AccessPolicyFromSettings"]}
 # MinIO omits 100-continue on 0-byte PUTs; stock botocore hangs without this (boto/botocore#3123).
 pulp_scenario_env: {"BOTO_EXPERIMENTAL__NO_EMPTY_CONTINUE": "true"}
 VARSYAML
diff --git a/.github/workflows/scripts/build_python_client.sh b/.github/workflows/scripts/build_python_client.sh
index 1ea7014bfba..8e53ca0c1a7 100755
--- a/.github/workflows/scripts/build_python_client.sh
+++ b/.github/workflows/scripts/build_python_client.sh
@@ -1,7 +1,7 @@
 #!/bin/bash
 
 # This script expects all <app_label>-api.json files to exist in the plugins root directory.
-# It produces a <app_label>-python-client.tar and <app_label>-python-client-docs.tar file in the plugins root directory.
+# It produces a <app_label>-python-client.tar file in the plugins root directory.
 
 # WARNING: DO NOT EDIT!
 #
@@ -21,104 +21,35 @@ rm -rf "pulpcore-client"
 ./gen-client.sh "../pulpcore/core-api.json" "core" python "pulpcore"
 
 pushd pulpcore-client
-python -m build
-
-twine check "dist/pulpcore_client-"*"-py3-none-any.whl"
-twine check "dist/pulpcore_client-"*".tar.gz"
 
+uv build
+uvx twine check "dist/pulpcore_client-"*"-py3-none-any.whl"
+uvx twine check "dist/pulpcore_client-"*".tar.gz"
 tar cvf "../../pulpcore/core-python-client.tar" ./dist
 
-find ./docs/* -exec sed -i 's/Back to README/Back to HOME/g' {} \;
-find ./docs/* -exec sed -i 's/README//g' {} \;
-cp README.md docs/index.md
-sed -i 's/docs\///g' docs/index.md
-find ./docs/* -exec sed -i 's/\.md//g' {} \;
-
-cat >> mkdocs.yml << DOCSYAML
----
-site_name: Pulpcore Client
-site_description: Core bindings
-site_author: Pulp Team
-site_url: https://docs.pulpproject.org/pulpcore_client/
-repo_name: pulp/pulpcore
-repo_url: https://github.com/pulp/pulpcore
-theme: readthedocs
-DOCSYAML
-
-# Building the bindings docs
-mkdocs build
-
-# Pack the built site.
-tar cvf ../../pulpcore/core-python-client-docs.tar ./site
 popd
 rm -rf "pulp_file-client"
 
 ./gen-client.sh "../pulpcore/file-api.json" "file" python "pulp_file"
 
 pushd pulp_file-client
-python -m build
-
-twine check "dist/pulp_file_client-"*"-py3-none-any.whl"
-twine check "dist/pulp_file_client-"*".tar.gz"
 
+uv build
+uvx twine check "dist/pulp_file_client-"*"-py3-none-any.whl"
+uvx twine check "dist/pulp_file_client-"*".tar.gz"
 tar cvf "../../pulpcore/file-python-client.tar" ./dist
 
-find ./docs/* -exec sed -i 's/Back to README/Back to HOME/g' {} \;
-find ./docs/* -exec sed -i 's/README//g' {} \;
-cp README.md docs/index.md
-sed -i 's/docs\///g' docs/index.md
-find ./docs/* -exec sed -i 's/\.md//g' {} \;
-
-cat >> mkdocs.yml << DOCSYAML
----
-site_name: PulpFile Client
-site_description: File bindings
-site_author: Pulp Team
-site_url: https://docs.pulpproject.org/pulp_file_client/
-repo_name: pulp/pulp_file
-repo_url: https://github.com/pulp/pulp_file
-theme: readthedocs
-DOCSYAML
-
-# Building the bindings docs
-mkdocs build
-
-# Pack the built site.
-tar cvf ../../pulpcore/file-python-client-docs.tar ./site
 popd
 rm -rf "pulp_certguard-client"
 
 ./gen-client.sh "../pulpcore/certguard-api.json" "certguard" python "pulp_certguard"
 
 pushd pulp_certguard-client
-python -m build
-
-twine check "dist/pulp_certguard_client-"*"-py3-none-any.whl"
-twine check "dist/pulp_certguard_client-"*".tar.gz"
 
+uv build
+uvx twine check "dist/pulp_certguard_client-"*"-py3-none-any.whl"
+uvx twine check "dist/pulp_certguard_client-"*".tar.gz"
 tar cvf "../../pulpcore/certguard-python-client.tar" ./dist
 
-find ./docs/* -exec sed -i 's/Back to README/Back to HOME/g' {} \;
-find ./docs/* -exec sed -i 's/README//g' {} \;
-cp README.md docs/index.md
-sed -i 's/docs\///g' docs/index.md
-find ./docs/* -exec sed -i 's/\.md//g' {} \;
-
-cat >> mkdocs.yml << DOCSYAML
----
-site_name: PulpCertguard Client
-site_description: Certguard bindings
-site_author: Pulp Team
-site_url: https://docs.pulpproject.org/pulp_certguard_client/
-repo_name: pulp/pulp_certguard
-repo_url: https://github.com/pulp/pulp_certguard
-theme: readthedocs
-DOCSYAML
-
-# Building the bindings docs
-mkdocs build
-
-# Pack the built site.
-tar cvf ../../pulpcore/certguard-python-client-docs.tar ./site
 popd
 popd
diff --git a/.github/workflows/scripts/check_commit.sh b/.github/workflows/scripts/check_commit.sh
index d29e04c468d..dd4ca3a5632 100755
--- a/.github/workflows/scripts/check_commit.sh
+++ b/.github/workflows/scripts/check_commit.sh
@@ -14,5 +14,5 @@ set -euv
 
 for SHA in $(curl -H "Authorization: token $GITHUB_TOKEN" "$GITHUB_CONTEXT" | jq -r '.[].sha')
 do
-  python3 .ci/scripts/validate_commit_message.py "$SHA"
+  uv run --script .ci/scripts/validate_commit_message.py "$SHA"
 done
diff --git a/.github/workflows/scripts/script.sh b/.github/workflows/scripts/script.sh
index 4575280ae93..6262a567b52 100755
--- a/.github/workflows/scripts/script.sh
+++ b/.github/workflows/scripts/script.sh
@@ -72,7 +72,7 @@ pushd ../pulp-openapi-generator
       rm -rf "./${PACKAGE}-client"
       ./gen-client.sh "${COMPONENT}-api.json" "${COMPONENT}" python "${PACKAGE}"
       pushd "${PACKAGE}-client"
-        python -m build
+        uv build
       popd
     else
       if [ ! -f "${PACKAGE}-client/dist/${PACKAGE}_client-${VERSION}-py3-none-any.whl" ]
diff --git a/.github/workflows/scripts/update_backport_labels.py b/.github/workflows/scripts/update_backport_labels.py
index be1a81c8991..a66441b2535 100755
--- a/.github/workflows/scripts/update_backport_labels.py
+++ b/.github/workflows/scripts/update_backport_labels.py
@@ -5,6 +5,16 @@
 #
 # For more info visit https://github.com/pulp/plugin_template
 
+# /// script
+# requires-python = ">=3.12"
+# dependencies = [
+#     "pyyaml",
+#     "requests",
+# ]
+# ///
+
+# This script is running with elevated privileges from the main branch against pull requests.
+
 import os
 import random
 
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5b98b004ef2..66c52b50eb4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -43,7 +43,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
@@ -85,7 +85,7 @@ jobs:
 
       - name: "Install python dependencies"
         run: |
-          uv pip install build towncrier twine wheel httpie docker netaddr boto3 'ansible~=10.3.0' mkdocs jq jsonpatch bump-my-version
+          uv pip install httpie docker netaddr boto3 'ansible~=10.3.0' mkdocs jsonpatch
           echo "HTTPIE_CONFIG_DIR=$GITHUB_WORKSPACE/pulpcore/.ci/assets/httpie/" >> $GITHUB_ENV
 
       - name: "Set environment variables"
diff --git a/.github/workflows/update-labels.yml b/.github/workflows/update-labels.yml
index 72e9fe750a6..61730d940a0 100644
--- a/.github/workflows/update-labels.yml
+++ b/.github/workflows/update-labels.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.12"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
@@ -33,13 +33,10 @@ jobs:
         run: |
           git config --global user.name 'pulpbot'
           git config --global user.email 'pulp-infra@redhat.com'
-      - name: "Install python dependencies"
-        run: |
-          uv pip install requests pyyaml
       - uses: "actions/checkout@v6"
       - name: "Update labels"
         run: |
-          python3 .github/workflows/scripts/update_backport_labels.py
+          uv run --script .github/workflows/scripts/update_backport_labels.py
         env:
           GITHUB_TOKEN: "${{ secrets.RELEASE_TOKEN }}"
 ...
diff --git a/.github/workflows/update_ci.yml b/.github/workflows/update_ci.yml
index a89a65642af..985d7b857a2 100644
--- a/.github/workflows/update_ci.yml
+++ b/.github/workflows/update_ci.yml
@@ -34,7 +34,7 @@ jobs:
 
       - uses: "actions/setup-python@v6"
         with:
-          python-version: "3.11"
+          python-version: "3.9"
       - name: "Install uv"
         uses: "astral-sh/setup-uv@v7"
         with:
diff --git a/template_config.yml b/template_config.yml
index 09bbf3a4958..7733076ebfe 100644
--- a/template_config.yml
+++ b/template_config.yml
@@ -107,7 +107,7 @@ pulp_settings_s3:
         addressing_style: "path"
         bucket_name: "pulp3"
         default_acl: "@none"
-        endpoint_url: "http://minio:9000"
+        endpoint_url: "http://rustfs:9000"
         region_name: "eu-central-1"
         secret_key: "fqRvjWaPU5o0fCqQuUWbj9Fainj2pVZtBCiDiieS"
         signature_version: "s3v4"