From 117cf4c71bd862141ecf0509ace3fca8e725fd6a Mon Sep 17 00:00:00 2001
From: Kunal Mehta <legoktm@debian.org>
Date: Thu, 23 Jul 2026 16:46:34 -0400
Subject: [PATCH] Use Debian 13 in CI; set Python baseline at 3.13

Fixes #268.
---
 .github/workflows/ci.yml | 4 ++--
 poetry.lock              | 6 +++---
 pyproject.toml           | 3 ++-
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bd72392..8dc6789 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   verify:
     runs-on: ubuntu-latest
-    container: debian:bookworm
+    container: debian:trixie
     steps:
       - uses: actions/checkout@v6
         with:
@@ -24,7 +24,7 @@ jobs:
           make verify
   lint:
     runs-on: ubuntu-latest
-    container: debian:bookworm
+    container: debian:trixie
     steps:
       - uses: actions/checkout@v6
         with:
diff --git a/poetry.lock b/poetry.lock
index 1191246..db919ac 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.3.4 and should not be changed by hand.
 
 [[package]]
 name = "authlib"
@@ -496,5 +496,5 @@ files = [
 
 [metadata]
 lock-version = "2.1"
-python-versions = ">= 3.11"
-content-hash = "e5d9abc925251f91dbcd05679f6e9cb11a98f71ed7a0b34b0da87e869b332630"
+python-versions = ">= 3.13"
+content-hash = "e9d74f2550f6eeb4ee5def8a5242f022d23b7222ef4c0d5670d18175cdaf46d9"
diff --git a/pyproject.toml b/pyproject.toml
index 0eff919..3840f53 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -3,9 +3,10 @@ name = "securedrop-https-everywhere-ruleset"
 version = "0.0.0"
 description = "..."
 authors = ["SecureDrop Team <securedrop@freedom.press>"]
+package-mode = false
 
 [tool.poetry.dependencies]
-python = ">= 3.11"
+python = ">= 3.13"
 authlib = ">=1.1.0"
 certifi = "*"
 cryptography = ">=41.0.3"