feat: update min. python version to 3.10 (#1024)

BREAKING CHANGE: Min. python version is now 3.10.

Author: noahnu

.github/actions/setup-env/action.yml

@@ -26,11 +26,12 @@ runs:
         echo "version=$(head -n1 .poetry-version | tr -d '\n')" >> $GITHUB_OUTPUT
       shell: bash
     - name: Set up Python ${{ inputs.python-version }}
-      uses: actions/setup-python@v6.0.0
+      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: ${{ inputs.python-version }}
+        allow-prereleases: true
     - name: Install Poetry
-      uses: snok/install-poetry@v1.4.1
+      uses: snok/install-poetry@76e04a911780d5b312d89783f7b1cd627778900a # v1.4.1
       with:
         version: ${{ steps.detect-poetry.outputs.version }}
         virtualenvs-create: true

.github/renovate.json5

@@ -1,5 +1,6 @@
 {
     $schema: "https://docs.renovatebot.com/renovate-schema.json",
+    extends: ["helpers:pinGitHubActionDigests"],
     prConcurrentLimit: 2,
     semanticCommits: "enabled",
     semanticCommitType: "chore",
@@ -16,6 +17,6 @@
     automergeType: "pr",
     automergeStrategy: "squash",
     constraints: {
-        poetry: "2.1.2",
+        poetry: "2.2.1",
     },
 }

.github/workflows/benchmark.yaml

@@ -20,15 +20,15 @@ jobs:
     runs-on: ubuntu-latest
     if: (!contains(github.event.head_commit.message, '[skip ci]'))
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Environment
         uses: ./.github/actions/setup-env
       - name: Install project dependencies
         run: . script/bootstrap
       - name: Benchmark
         run: poetry run invoke benchmark
       - name: Publish Benchmark Results
-        uses: benchmark-action/github-action-benchmark@v1
+        uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
         with:
           tool: 'pytest'
           output-file-path: benchmarks.json

.github/workflows/ci.yaml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     if: (!contains(github.event.head_commit.message, '[skip ci]'))
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Environment
         uses: ./.github/actions/setup-env
       - name: Install project dependencies
@@ -40,10 +40,10 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest]
-        python-version: ['3.9', '3.10', '3.11', '3.12', '3.13-dev']
+        python-version: ['3.10', '3.11', '3.12', '3.13-dev']
       fail-fast: ${{ !contains(github.event.pull_request.labels.*.name, 'ci/run-all-tests') }}
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Environment
         uses: ./.github/actions/setup-env
         with:
@@ -99,15 +99,15 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Setup Environment
         uses: ./.github/actions/setup-env
       - name: Install project dependencies
         run: . script/bootstrap
       - name: Benchmark
         run: poetry run invoke benchmark
       - name: Publish Benchmark Results
-        uses: benchmark-action/github-action-benchmark@v1
+        uses: benchmark-action/github-action-benchmark@4bdcce38c94cec68da58d012ac24b7b1155efe8b # v1.20.7
         with:
           tool: 'pytest'
           output-file-path: benchmarks.json

.github/workflows/release.yaml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     steps:
-      - uses: actions/checkout@v5.0.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
@@ -33,7 +33,7 @@ jobs:
         run: . script/bootstrap
 
       - name: Release
-        uses: cycjimmy/semantic-release-action@v5.0.0
+        uses: cycjimmy/semantic-release-action@9cc899c47e6841430bbaedb43de1560a568dfd16 # v5.0.0
         with:
           branches: |
             [

.poetry-version

@@ -1 +1 @@
-2.1.2
+2.2.1

README.md

@@ -6,15 +6,15 @@
 
 [![All Contributors](https://img.shields.io/github/all-contributors/syrupy-project/syrupy?color=ee8449&style=flat-square)](#contributors) [![Stage](https://img.shields.io/pypi/status/syrupy)](https://pypi.org/project/syrupy/) [![codecov](https://codecov.io/gh/syrupy-project/syrupy/graph/badge.svg?token=GB9EmYKPAl)](https://codecov.io/gh/syrupy-project/syrupy)
 
-![Pytest>=5.1.0,<9.0.0](https://img.shields.io/badge/pytest-%3E%3D5.1.0,%20%3C9.0.0-green) [![Pypi](https://img.shields.io/pypi/v/syrupy)](https://pypi.org/project/syrupy/) [![Wheel](https://img.shields.io/pypi/wheel/syrupy)](https://pypi.org/project/syrupy/) ![PyPI - Python Version](https://img.shields.io/pypi/pyversions/syrupy) [![PyPI - Downloads](https://img.shields.io/pypi/dm/syrupy)](https://pypi.org/project/syrupy/) [![PyPI - License](https://img.shields.io/pypi/l/syrupy)](./LICENSE)
+![Pytest>=8,<9.0.0](https://img.shields.io/badge/pytest-%3E=8,%20%3C9.0.0-green) [![Pypi](https://img.shields.io/pypi/v/syrupy)](https://pypi.org/project/syrupy/) [![Wheel](https://img.shields.io/pypi/wheel/syrupy)](https://pypi.org/project/syrupy/) ![PyPI - Python Version](https://img.shields.io/pypi/pyversions/syrupy) [![PyPI - Downloads](https://img.shields.io/pypi/dm/syrupy)](https://pypi.org/project/syrupy/) [![PyPI - License](https://img.shields.io/pypi/l/syrupy)](./LICENSE)
 
 ## Overview
 
 Syrupy is a zero-dependency [pytest](https://docs.pytest.org/en/latest/) snapshot plugin. It enables developers to write tests which assert immutability of computed results.
 
 ## Motivation
 
-The most popular snapshot test plugin compatible with pytest has some core limitations which this package attempts to address by upholding some key values:
+Syrupy upholds three principles:
 
 - Extensible: If a particular data type is not supported, users should be able to easily and quickly add support.
 - Idiomatic: Snapshot testing should fit naturally among other test cases in pytest, e.g. `assert x == snapshot` vs. `snapshot.assert_match(x)`.
@@ -26,23 +26,14 @@ The most popular snapshot test plugin compatible with pytest has some core limit
 python -m pip install syrupy
 ```
 
-### Migration from snapshottest
-
-You cannot use syrupy alongside snapshottest due to argument conflicts. To ease migration, we've made syrupy aware of snapshottest call syntax. Simply uninstall snapshottest and remove old snapshots:
-
-```shell
-pip uninstall snapshottest -y;
-find . -type d ! -path '*/\.*' -name 'snapshots' | xargs rm -r
-```
-
 ### Pytest and Python Compatibility
 
 Syrupy will always be compatible with the latest version of Python and Pytest. If you're running an old version of Python or Pytest, you will need to use an older major version of Syrupy:
 
 | Syrupy Version | Python Support | Pytest Support |
 | -------------- | -------------- | -------------- |
-| 5.x.x          | >3.9           | >=8            |
-| 4.x.x          | >3.8.1,        | >=7,   <9      |
+| 5.x.x          | >=3.10         | >=8            |
+| 4.x.x          | >=3.8.1,       | >=7,   <9      |
 | 3.x.x          | >=3.7, <4      | >=5.1, <8      |
 | 2.x.x          | >=3.6, <4      | >=5.1, <8      |
 
@@ -545,6 +536,17 @@ See [#675](https://github.com/syrupy-project/syrupy/issues/675) for the original
 
 _We welcome contributions to patch these known limitations._
 
+## Migrating from another tool
+
+### From snapshottest
+
+You cannot use syrupy alongside snapshottest due to argument conflicts. To ease migration, we've made syrupy aware of snapshottest call syntax. Simply uninstall snapshottest and remove old snapshots:
+
+```shell
+pip uninstall snapshottest -y;
+find . -type d ! -path '*/\.*' -name 'snapshots' | xargs rm -r
+```
+
 ## Uninstalling
 
 ```python