NPA-6074: Update python version to v3.13 (#276)

# Pull Request

## 🧾 Ticket Link

<!-- Add the Jira ticket link here -->

https://nhsd-jira.digital.nhs.uk/browse/NPA-6074

---

## 📄 Description/Summary of Changes

<!-- Describe the changes made in this PR. Include the
purpose/scope/impact of the changes -->

- Update python version in the GitHub actions workflows to ensure that
we can continue to run the create release pipeline in Azure (which APIM
have upgraded to 3.13).

---

## 🧪 Developer Testing Carried Out

<!-- Describe what tests (automated/unit/manual etc.) have been done for
the ticket. Include: -->
<!-- - Any tests added/updated -->
<!-- - Evidence that each acceptance criterion from the Jira ticket is
met -->

- Run CI/CD pipelines

---

## 🧪 Reviewer Testing Required

<!-- Describe how to test the changes that have been made in the ticket.
Include: -->
<!-- - Testing environment details (e.g. sandbox/local setup) -->
<!-- - Steps to verify the changes -->

- [ ] Review CI/CD pipelines

---

## ✅ Developer Checklist

<!-- Complete before submitting the PR -->

- [x] PR title follows the format: `NPA-XXXX: <short-description>`
- [x] Branch name follows the convention:
`<type>/NPA-XXXX/<short-description>`
- [x] Commit messages follow the template: `NPA-XXXX:
<short-description>`
- [x] All acceptance criteria from the Jira ticket are addressed
- [x] Automated tests (unit/integration/API/infrastructure etc. tests)
are added or updated
- [x] Assignees and appropriate labels (e.g. `terraform`,
`documentation`) are added

---

## 👀 Reviewer Checklist

<!-- To be completed by the reviewer -->

- [ ] Changes meet the acceptance criteria of the Jira ticket
- [ ] Code is able to be merged (no conflicts and adheres to coding
standards)
- [ ] Sufficient test evidence is provided (manual and/or automated)
- [ ] Infrastructure/operational/build changes are validated (if
applicable)

---

## 🚀 Post-merge

<!-- Actions to complete after merging -->

After merging and deploying changes to the sandbox, Postman collection
or spec examples please run the Run Postman
collection workflow.

This will run the tests within the collection to check that the sandbox
is working as expected once deployed.

---------

Signed-off-by: adamclarkson <[email protected]>

Author: ClarksonAdam

.github/workflows/continuous-integration.yml

@@ -12,10 +12,10 @@ jobs:
               with:
                   fetch-depth: 0 # This causes all history to be fetched, which is required for calculate-version to function
 
-            - name: Install Python 3.8
+            - name: Install Python 3.13
               uses: actions/setup-python@v6
               with:
-                  python-version: 3.8
+                  python-version: 3.13
 
             - name: Upgrade python pip
               run: python -m pip install --upgrade pip

.github/workflows/openapi-validate.yml

@@ -52,7 +52,7 @@ jobs:
             - name: Set up Python
               uses: actions/setup-python@v6
               with:
-                  python-version: 3.9
+                  python-version: 3.13
 
             - name: Install Poetry
               shell: bash

.github/workflows/sandbox-checks.yaml

@@ -10,7 +10,7 @@ jobs:
         run: pipx install poetry
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.8"
+          python-version: "3.13"
           cache: "poetry"
       - name: Install Sandbox dependencies
         run: make install

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.8
+FROM python:3.13
 
 COPY ./specification/examples/responses /sandbox/api/examples
 COPY ./sandbox /sandbox

poetry.lock

@@ -12,17 +12,17 @@ homepage = "https://digital.nhs.uk/developer/api-catalogue"
 keywords = ["healthcare", "uk", "nhs"] #TODO add additional keywords
 
 [tool.poetry.dependencies]
-python = "^3.8"
+python = "^3.13"
 
 [tool.poetry.group.ci.dependencies]
-flake8 = "^3.7.9"
+flake8 = "^7.3.0"
 black = "^24.3.0"
 
 [tool.poetry.group.test.dependencies]
 pytest-nhsd-apim = "^5.0.0"
 
 [tool.poetry.group.dev.dependencies]
-flake8 = "^3.7.9"
+flake8 = "^7.3.0"
 black = "^24.3.0"
 pip-licenses = "^4.4.0"
 jinja2 = "^3.1.6"

pyproject.toml

@@ -6,13 +6,13 @@ authors = []
 package-mode = false
 
 [tool.poetry.dependencies]
-python = "^3.8"
+python = "^3.13"
 gunicorn = "^23.0.0"
 flask = "3.0.3" # Can't bump flask due to dropping support for Python 3.8
 pyyaml = "^6.0.2"
 
 [tool.poetry.dev-dependencies]
-flake8 = "^3.7.9"
+flake8 = "^7.3.0"
 black = "^24.3.0"
 pytest = "^8.1.1"
 pytest-cov = "^5.0.0"

sandbox/poetry.lock

@@ -4,7 +4,7 @@ readme = "README.md"
 package-mode = false
 
 [tool.poetry.dependencies]
-python = "^3.12"
+python = "^3.13"
 pytest-nhsd-apim = "^5.0.0"