Patch CVE-2026-44432 and CVE-2026-44431 (urllib3) (#22)

* Patch CVE-2026-44432 and CVE-2026-44431 (urllib3)

Bumps urllib3 2.6.3 -> 2.7.0 to fix two HIGH severity advisories:

- CVE-2026-44432 (GHSA-mf9v-mfxr-j63j, CVSS 7.5): excessive resource
  consumption (CWE-409) when streaming compressed responses via the
  Brotli read path or drain_conn().
- CVE-2026-44431 (GHSA-qccp-gfcp-xxvc, CVSS 5.3): sensitive headers
  (Authorization/Cookie/Proxy-Authorization) leaked on cross-origin
  redirects via the low-level ProxyManager.connection_from_url() API.

urllib3 2.7.0 dropped Python 3.9 support, so the project floor is raised
to ^3.10 (3.9 is past EOL; the shipped Docker image is python:3.12).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* Fix lock file

* ci: drop Python 3.9 from test matrix

urllib3 2.7.0 raised the project floor to ^3.10, so building/testing on
3.9 no longer resolves. Bump build_package to 3.12 and drop 3.9 from the
test_package matrix.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: moshemorad

.github/workflows/test-installation.yaml

@@ -10,7 +10,7 @@ jobs:
         - name: Set up Python
           uses: actions/setup-python@v2
           with:
-            python-version: 3.9
+            python-version: 3.12
         - name: Build and install package
           run: |
             curl -sSL https://install.python-poetry.org | python3 - --version 1.8.5
@@ -31,7 +31,7 @@ jobs:
       strategy:
         fail-fast: false
         matrix:
-          python-version: ["3.9", "3.10", "3.11", "3.12"]
+          python-version: ["3.10", "3.11", "3.12"]
 
       steps:
         - name: Set up Python ${{ matrix.python-version }}

poetry.lock

@@ -9,7 +9,7 @@ readme = "README.md"
 robusta = "robusta_cli.main:app"
 
 [tool.poetry.dependencies]
-python = "^3.9, <3.13"
+python = "^3.10, <3.13"
 typer = "^0.12.3"
 pyyaml = "^6.0.1"
 click-spinner = "^0.1.10"
@@ -24,7 +24,7 @@ types-toml = "^0.10.2"
 toml = "^0.10.2"
 hikaru-model-28 = "^1.1.0"
 kubernetes = "^29"
-urllib3 = ">=2.6.3"
+urllib3 = ">=2.7.0"
 click = "8.1.8"