tdruez · Nov 5, 2026
diff --git a/.github/workflows/check-code-and-docs-validation.yml b/.github/workflows/check-code-and-docs-validation.yml
@@ -22,7 +22,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
-          python-version: "3.14"
+          python-version: "3.15"
 
       - name: Install uv from vendored wheel
         run: pip install --no-index --find-links=./thirdparty/dist uv

diff --git a/Dockerfile b/Dockerfile
@@ -6,7 +6,7 @@
 # See https://aboutcode.org for more information about AboutCode FOSS projects.
 #
 
-FROM python:3.14-slim
+FROM python:3.15-slim-trixie
 
 LABEL org.opencontainers.image.source="https://github.com/aboutcode-org/dejacode"
 LABEL org.opencontainers.image.description="DejaCode"
@@ -36,6 +36,7 @@ RUN apt-get update \
       build-essential \
       libldap2-dev \
       libsasl2-dev \
+      libyaml-dev \
       slapd \
       ldap-utils \
       libpq5 \

diff --git a/Makefile b/Makefile
@@ -117,13 +117,13 @@ upgrade:
 		--platform manylinux_2_28_x86_64 \
 		--platform manylinux_2_17_x86_64 \
 		--platform manylinux_2_12_x86_64 \
-		--python-version 3.14 \
+		--python-version 3.15 \
 		--dest ./thirdparty/dist/
 	@echo "-> Download $(PACKAGE) wheels for macOS ARM64"
 	uvx pip download $(PACKAGE) \
 		--only-binary=:all: \
 		--platform macosx_11_0_arm64 \
-		--python-version 3.14 \
+		--python-version 3.15 \
 		--dest ./thirdparty/dist/
 	@echo "-> Update pyproject.toml and uv.lock"
 	uvx uv add $(PACKAGE)

diff --git a/pyproject.toml b/pyproject.toml
@@ -7,7 +7,7 @@ name = "dejacode"
 version = "6.0.1"
 description = "Automate open source license compliance and ensure supply chain integrity"
 readme = "README.rst"
-requires-python = ">=3.14,<3.15"
+requires-python = ">=3.15,<3.16"
 license = "AGPL-3.0-only"
 license-files = ["LICENSE", "NOTICE"]
 authors = [
@@ -26,7 +26,7 @@ classifiers = [
     "Intended Audience :: Legal Industry",
     "Programming Language :: Python",
     "Programming Language :: Python :: 3 :: Only",
-    "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3.15",
     "Topic :: Utilities"
 ]
 dependencies = [
@@ -89,6 +89,10 @@ dependencies = [
     "idna==3.20",
     "charset-normalizer==3.5.2",
     "PyYAML==6.0.3",
+    # Build requirement of the PyYAML sdist: PyYAML publishes no cp315 wheel, so pip
+    # builds it from source, and the offline install needs Cython in thirdparty/dist.
+    # libyaml-dev in the Dockerfile enables the PyYAML C extension.
+    "Cython==3.3.1",
     # Markdown
     "markdown==3.11.2",
     "bleach==6.4.0",

diff --git a/thirdparty/dist/charset_normalizer-3.5.2-cp314-cp314-macosx_10_15_universal2.whl b/thirdparty/dist/charset_normalizer-3.5.2-cp314-cp314-macosx_10_15_universal2.whl
diff --git a/...er-3.5.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...er-3.5.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/charset_normalizer-3.5.2-cp315-cp315-macosx_10_15_universal2.whl b/thirdparty/dist/charset_normalizer-3.5.2-cp315-cp315-macosx_10_15_universal2.whl
diff --git a/...er-3.5.2-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...er-3.5.2-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/cython-3.3.1-cp315-cp315-macosx_11_0_arm64.whl b/thirdparty/dist/cython-3.3.1-cp315-cp315-macosx_11_0_arm64.whl
diff --git a/...on-3.3.1-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...on-3.3.1-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/lxml-6.1.3-cp314-cp314-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl b/thirdparty/dist/lxml-6.1.3-cp314-cp314-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl
diff --git a/...3-cp314-cp314-macosx_10_15_universal2.whl → ...3-cp315-cp315-macosx_10_15_universal2.whl b/...3-cp314-cp314-macosx_10_15_universal2.whl → ...3-cp315-cp315-macosx_10_15_universal2.whl
diff --git a/thirdparty/dist/lxml-6.1.3-cp315-cp315-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl b/thirdparty/dist/lxml-6.1.3-cp315-cp315-manylinux_2_26_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/msgspec-0.22.0-cp314-cp314-macosx_11_0_arm64.whl b/thirdparty/dist/msgspec-0.22.0-cp314-cp314-macosx_11_0_arm64.whl
diff --git a/...c-0.22.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...c-0.22.0-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/msgspec-0.22.0-cp315-cp315-macosx_11_0_arm64.whl b/thirdparty/dist/msgspec-0.22.0-cp315-cp315-macosx_11_0_arm64.whl
diff --git a/...c-0.22.0-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...c-0.22.0-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/thirdparty/dist/pydantic_core-2.50.2-cp314-cp314-macosx_11_0_arm64.whl b/thirdparty/dist/pydantic_core-2.50.2-cp314-cp314-macosx_11_0_arm64.whl
diff --git a/...arty/dist/pydantic_core-2.50.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl b/...arty/dist/pydantic_core-2.50.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl
diff --git a/thirdparty/dist/pydantic_core-2.50.2-cp315-cp315-macosx_11_0_arm64.whl b/thirdparty/dist/pydantic_core-2.50.2-cp315-cp315-macosx_11_0_arm64.whl
diff --git a/...arty/dist/pydantic_core-2.50.2-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.whl b/...arty/dist/pydantic_core-2.50.2-cp315-cp315-manylinux2014_x86_64.manylinux_2_17_x86_64.whl
diff --git a/thirdparty/dist/pyyaml-6.0.3-cp314-cp314-macosx_11_0_arm64.whl b/thirdparty/dist/pyyaml-6.0.3-cp314-cp314-macosx_11_0_arm64.whl
diff --git a/...ml-6.0.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl b/...ml-6.0.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl
diff --git a/uv.lock b/uv.lock