[jhamon]

What

Brings pinecone-datasets to the standard CI bar. Existing CI already runs ruff format check, ruff lint, mypy, and pytest with coverage across a Python matrix (uv-based, least-privilege). This PR:

1. Adds a dependency-audit job — runs pip-audit against the exported uv.lock, failing CI on known advisories.
2. Drops near-EOL Python 3.10 — the lint job moves 3.10 → 3.12, and the test matrix becomes [3.11, 3.12, 3.13] (per the goal of not testing EOL runtimes).
3. Adds .github/dependabot.yml — weekly pip (uv) + github-actions updates (grouped).

Verification (local)

• uv export --format requirements-txt --all-extras | pip-audit -r → No known vulnerabilities found ✅.

Follow-up (your call)

requires-python is still >=3.10,<3.14. If 3.10 is being formally dropped, bump it to >=3.11 in a separate packaging PR — I left that out since it changes the published support policy.

🤖 Generated with Claude Code

---

Note

Low Risk
CI and automation-only changes; no runtime application logic, though dropping 3.10 from the matrix changes which Python versions are validated before release.

Overview
Raises the CI bar with automated dependency hygiene and narrower Python coverage.

A new Dependency audit job exports locked requirements from uv.lock and runs pip-audit, so CI fails on known advisories in resolved dependencies. Lint/type-check now runs on Python 3.12 (was 3.10), and the test matrix is 3.11–3.13 only—3.10 is no longer exercised in CI (packaging requires-python may still allow 3.10 until a follow-up).

Dependabot is added via .github/dependabot.yml for weekly uv updates (minor/patch grouped, cap 10 open PRs) and GitHub Actions updates (cap 5).

^{Reviewed by Cursor Bugbot for commit 61996a3. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit cd9cdc4. Configure here.}