fix: Drop Python 3.8 from dev resolution and CI test matrix

Python 3.8 reached EOL in October 2024. This change:
- Adds `environments = ["python_version >= '3.9'"]` to [tool.uv] so the
  lockfile only resolves for Python 3.9+, unblocking Renovate PRs that
  bump dev deps (pytest, mypy, pytest-asyncio) to versions requiring 3.9+
- Removes 3.8 from the CI test matrix and nox PYTHON_VERSIONS
- Keeps requires-python = ">=3.8" so end users on 3.8 can still install
  via pip (which resolves independently)
- Keeps 3.8 in the smoke-test matrix (no lockfile needed)
- Adds renovate packageRule to prevent bumping the pyjwt 3.8 marker line

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: gjtorikian

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
+        python: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
       - uses: actions/checkout@v6
       - uses: astral-sh/setup-uv@v7

noxfile.py

@@ -17,7 +17,7 @@
 nox.options.reuse_venv = "yes"
 
 # All Python versions supported by the SDK (must match CI matrix)
-PYTHON_VERSIONS = ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
+PYTHON_VERSIONS = ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
 
 # Default sessions to run
 nox.options.sessions = ["tests"]

pyproject.toml

@@ -59,6 +59,9 @@ strict = true
 [tool.ruff.lint.mccabe]
 max-complexity = 10
 
+[tool.uv]
+environments = ["python_version >= '3.9'"]
+
 [tool.uv.build-backend]
 source-include = ["py.typed"]
 source-exclude = ["tests*"]

renovate.json

@@ -2,5 +2,12 @@
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
     "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "matchPackageNames": ["pyjwt"],
+      "matchCurrentVersion": ">=2.9.0,<2.10",
+      "enabled": false
+    }
   ]
 }