netdevops · jtdub · Sep 22, 2026 · Sep 22, 2026
diff --git a/.github/workflows/test-app.yaml b/.github/workflows/test-app.yaml
@@ -12,7 +12,6 @@ jobs:
     strategy:
       matrix:
         python-version:
-        - "3.10"
         - "3.11"
         - "3.12"
         - "3.13"

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -45,6 +45,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   event; `release.yml` (on `release: published`) is now the single PyPI
   publish path, since `created` never fires for drafts that get published
 
+### Fixed
+- Python 3.10 support dropped: `requires-python` is now `^3.11`, the CI
+  matrix no longer tests 3.10, and the pydantic pin was raised to `>=2.12`
+  so `pydantic-core` ships a cp314 wheel and the Python 3.14 CI job no
+  longer fails building it from source.
+
 ## [0.2.0] - 2026-01-25
 
 ### Added

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -49,7 +49,7 @@ The entire CLI lives in a single module: `src/hier_config_cli/__main__.py`. The
 
 These mirror the hier_config library's standards and are enforced by `scripts/build.py lint`:
 
-- Python 3.10+ (uses `X | Y` union syntax); CI tests 3.10–3.14
+- Python 3.11+ (uses `X | Y` union syntax); CI tests 3.11–3.14
 - `ruff format` for formatting (NOT black), line length 88
 - ruff linting with `select = ["ALL"]` and preview rules; the ignore list in `pyproject.toml` is the authoritative configuration — never loosen it to make a change pass
 - mypy strict + pyright strict; full type annotations everywhere, including tests. No `Any`, no unjustified `# type: ignore` or `# noqa`
@@ -66,7 +66,7 @@ These mirror the hier_config library's standards and are enforced by `scripts/bu
 
 ## CI/CD
 
-- `test-app.yaml`: Runs `scripts/build.py lint` and `scripts/build.py pytest --coverage` on Python 3.10–3.14 for every push/PR to main and next
+- `test-app.yaml`: Runs `scripts/build.py lint` and `scripts/build.py pytest --coverage` on Python 3.11–3.14 for every push/PR to main and next
 - `prepare-release.yml`: Manually dispatched (admins only). Bumps the version (`poetry version <bump>`), syncs `__main__.py:__version__`, rotates the CHANGELOG `## [Unreleased]` section (except for prereleases), opens a release PR against the dispatched branch, and creates a draft GitHub release. Releasing: merge the release PR, then publish the draft release.
 - `release.yml`: Publishes to PyPI (`poetry publish --build` with the `PYPI_TOKEN` secret) when a GitHub release is published — the single PyPI publish path (replaces the old `deploy.yaml`)
 - Version is maintained in both `pyproject.toml` and `__main__.py:__version__`; `prepare-release.yml` keeps them in sync
diff --git a/README.md b/README.md
@@ -317,7 +317,7 @@ jobs:
 
 ### Prerequisites
 
-- Python 3.10 or higher
+- Python 3.11 or higher
 - Poetry (for dependency management)
 
 ### Setup Development Environment

diff --git a/docs/development/code-quality.md b/docs/development/code-quality.md
@@ -22,7 +22,7 @@ hier-config-cli maintains high code quality through:
 ```toml
 [tool.black]
 line-length = 100
-target-version = ["py310", "py311", "py312", "py313"]
+target-version = ["py311", "py312", "py313"]
 ```
 
 ### Usage
@@ -67,7 +67,7 @@ black src/hier_config_cli/__main__.py
 ```toml
 [tool.ruff]
 line-length = 100
-target-version = "py310"
+target-version = "py311"
 
 [tool.ruff.lint]
 select = [
@@ -149,7 +149,7 @@ def process(items=None):
 **pyproject.toml:**
 ```toml
 [tool.mypy]
-python_version = "3.10"
+python_version = "3.11"
 warn_return_any = false
 warn_unused_configs = true
 disallow_untyped_defs = true

diff --git a/docs/development/contributing.md b/docs/development/contributing.md
@@ -66,7 +66,7 @@ Feature requests are welcome! Please open an issue with:
 
 ### Prerequisites
 
-- Python 3.10 or higher
+- Python 3.11 or higher
 - Poetry for dependency management
 - Git
 

diff --git a/docs/development/testing.md b/docs/development/testing.md
@@ -501,7 +501,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ['3.10', '3.11', '3.12']
+        python-version: ['3.11', '3.12', '3.13']
 
     steps:
       - uses: actions/checkout@v4

diff --git a/docs/installation.md b/docs/installation.md
@@ -2,7 +2,7 @@
 
 ## Requirements
 
-- Python 3.10 or higher
+- Python 3.11 or higher
 - pip (Python package installer)
 
 ## Installation Methods

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -14,7 +14,6 @@ classifiers = [
     "Intended Audience :: System Administrators",
     "License :: OSI Approved :: Apache Software License",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
@@ -26,10 +25,14 @@ packages = [{include = "hier_config_cli", from = "src"}]
 include = ["src/hier_config_cli/py.typed"]
 
 [tool.poetry.dependencies]
-python = "^3.10"
+python = "^3.11"
 hier-config = {version = ">=4.0.0b1,<5.0", allow-prereleases = true}
 click = "^8.1.7"
 pyyaml = "^6.0.2"
+# Pin pydantic high enough that pydantic-core ships a cp314 wheel; the
+# minimum (2.10.x / core 2.27.x) has none, so Python 3.14 builds it from
+# source and fails (PyO3 0.22 caps at 3.13).
+pydantic = ">=2.12,<3"
 
 [tool.poetry.group.dev.dependencies]
 flynt = "*"
@@ -105,7 +108,7 @@ warn_unreachable = true
 
 [tool.ruff]
 line-length = 88
-target-version = "py310"
+target-version = "py311"
 
 [tool.ruff.format]
 docstring-code-format = true
-Original file line number
+Diff line change
@@ Expand Up / @@ -12,7 +12,6 @@ jobs: @@
         strategy:
           matrix:
             python-version:
-            - "3.10"
             - "3.11"
             - "3.12"
             - "3.13"
@@ Expand Down @@