fix(FFESUPPORT-747): address open Dependabot vulnerabilities

[aarsilv]

Summary

• Updates the vulnerable Python dependency floor for requests, urllib3, and pytest.
• Raises the supported Python floor to 3.10 because the patched pytest line requires Python >=3.10.
• Removes Python 3.9 from the CI matrix to match the new package constraint.

Dependabot alerts addressed

• urllib3 GHSA-qccp-gfcp-xxvc, patched in 2.7.0.
• urllib3 GHSA-mf9v-mfxr-j63j, patched in 2.7.0.
• pytest GHSA-6w46-j5rx-g56g, patched in 9.0.3.
• requests GHSA-gc5v-m9x4-r6x2, patched in 2.33.0.

Verification

• poetry install --no-interaction
• poetry run pytest -v --tb=short
• poetry check --lock

🤖 Generated with Codex

[Copilot]

Pull request overview

Bumps vulnerable dependencies (requests, urllib3, pytest) to patched versions to resolve open Dependabot alerts. Because pytest >=9.0.3 requires Python >=3.10, the project's Python floor is raised and Python 3.9 is removed from CI.

Changes:

• Bump requests to ^2.33.0, urllib3 to ^2.7.0, and pytest to ^9.0.3 (lockfile updated accordingly).
• Raise the Python floor from ^3.9 to ^3.10 in pyproject.toml and poetry.lock metadata.
• Drop 3.9 from the CI matrix in .github/workflows/test.yml.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
pyproject.toml	Raises Python floor to 3.10 and pins patched versions of requests, urllib3, and pytest.
poetry.lock	Regenerated lock reflecting new versions, Python ^3.10 metadata, and narrowed backport markers.
.github/workflows/test.yml	Removes Python 3.9 from the CI matrix to match the new constraint.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[aarsilv]

🤖 Context from Codex: This resolves the Python alerts by bumping requests, urllib3, and pytest, with the supported/tested Python floor raised to 3.10 because pytest 9 requires Python >=3.10. Local poetry run pytest -v --tb=short passed (22 tests), poetry check --lock passed, and CI is green on Python 3.10/3.11/3.12.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 3 changed files in this pull request and generated no new comments.