@@ -357,14 +357,14 @@ jobs:
   # component, sibling of fp-cloud-cli above, and deliberately its own job: it shares no
   # lockfile, no dependencies and no release cadence with the CLI.
   #
-  # The matrix is wider than fp-cloud-cli's two versions on purpose. This package declares
+  # The matrix spans the whole supported range on purpose. This package declares
   # no dependencies at all, so it has no third-party floor quietly constraining which
   # interpreters it is really exercised on — and it is installed into other people's
   # agent processes, whose Python version we do not choose. Every version
   # requires-python advertises is tested.
   failproofai-sdk:
     runs-on: ubuntu-latest
-    # the same, across five — every version requires-python advertises; the bound exists so a stalled
+    # the same, across four — every version requires-python advertises; the bound exists so a stalled
     # package mirror cannot hold a release for six hours (#726).
     timeout-minutes: 10
     defaults:
@@ -373,7 +373,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
     steps:
       - uses: actions/checkout@v7.0.1
 
 
@@ -8,6 +8,7 @@
 
 ### Dependencies
 
+- `failproofai-sdk` drops Python 3.10, which reached end of life this month, clearing the 47 Dependabot alerts against its dev/test lockfile. `pillow` (41) and `filelock` (6) are fixed only in releases that require Python 3.11 (13.0.0 and 4.2.1), so the lockfile's 3.10 slice was held on 12.3.0 and 4.1.0 behind two version-pinned OSV exceptions due to expire on 2026-11-20. `requires-python` is now `>=3.11`, the SDK's CI matrix runs 3.11–3.14, both exceptions are gone, and the 3.10-only `tomli` and `onnxruntime` entries leave the `dev` and `crewai` extras. On 3.10, pip keeps resolving `0.0.1b6`; `fp-cloud-cli` still supports 3.10 (#953)
 - Put the `ai-4`, `langchain-0.3`, `llamaindex-0.11` and `mastra-0` SDK integration fixtures back on the releases they exist to test, and stop Dependabot moving them. Its grouped security update #935, opened three minutes after #934 restored the first three, moved them again: `ai@4.3.19` → `5.0.52`, `@langchain/core@0.3.80` → `1.3.0`, `llamaindex@0.11.4` → `0.12.1` (each with `zod@3.25.76` → `4.6.7`), and `@mastra/core@0.24.9` → `1.79.0`. `__tests__/ci/ts-sdk-fixture-pins.test.ts` and the `frameworks` and `runtimes` integration shards have failed on `main` since, and so on every open PR. All four are back on their #934 manifests and lockfiles, and `.github/dependabot.yml` gives each a security-updates-only entry whose `ignore` ranges hold its framework on its line, and zod on 3 where the framework requires it, so the move is no longer proposed; the pin test now fails if a floor fixture loses that entry (#950)
 - Restore the `ai-4`, `langchain-0.3` and `llamaindex-0.11` SDK integration fixtures to the releases they exist to test: `ai@4.3.19`, `@langchain/core@0.3.80` with `@langchain/langgraph@0.4.10`, and `llamaindex@0.11.4`, each with `zod@3.25.76`. Dependabot's grouped security update (#931) reached the zod fix by moving them to `ai@7.0.152`, `@langchain/core@1.3.0` and `llamaindex@0.12.1`, the pin move `SECURITY.md` rules out, so the matrix silently stopped testing three supported floors. `llamaindex-0.11` then stopped installing (`@llamaindex/workflow@1.1.5` peers on `zod@^3.23.8`, so `npm ci` failed `ERESOLVE`), and because global setup installs every fixture first, the `frameworks` and `runtimes` integration shards failed on `main`. #931 also moved the `runtimes` fixture to `zod@4.6.7` while its Deno program still imported `npm:zod@4.6.5`, which Deno could no longer find; it now imports the installed version. `__tests__/ci/ts-sdk-fixture-pins.test.ts` fails on either move before anything installs (#934)
 - Patch the fixable SDK integration fixture advisories with fixture-local `overrides`, moving no pin: `undici` 7.29.1 → 7.30.1 in `ai-5` (GHSA-xjj6-f33q-929c, GHSA-4qv8-2p9j-2685, GHSA-f72v-6w45-q472); `fast-uri` 3.1.8 → 3.1.9 in `llamaindex-0.11` (GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h, GHSA-333x-w4r6-6crp); and in `mastra-1`, `@modelcontextprotocol/server` 2.0.0 → 2.3.0 and `@modelcontextprotocol/client` 2.2.0 → 2.3.0 (GHSA-jm63-cq47-j5jp, GHSA-46jr-4wx8-v453, GHSA-rvq5-wwqv-78pq, GHSA-6prh-2h8m-c8cw), both pinned exactly by `@mastra/mcp@2.0.0`, each now with its own `@modelcontextprotocol/core@2.3.0` nested under it (#934)
 
@@ -247,9 +247,9 @@ describe("the failproofai-sdk CI job", () => {
   });
 
   it("tests every Python version pyproject advertises", () => {
-    // Claiming >=3.10 and testing one of them is how a 3.10 user finds the break.
+    // Claiming >=3.11 and testing one of them is how a 3.11 user finds the break.
     // Kept in step with `requires-python` and the classifiers by hand.
-    expect(job.strategy.matrix["python-version"]).toEqual(["3.10", "3.11", "3.12", "3.13", "3.14"]);
+    expect(job.strategy.matrix["python-version"]).toEqual(["3.11", "3.12", "3.13", "3.14"]);
   });
 
   it("requires the spool contract rather than letting it skip", () => {
 
@@ -15,7 +15,7 @@ icon: "python"
   </Card>
 </Columns>
 
-Python 3.10 أو أحدث. بدون متطلبات وقت التشغيل.
+Python 3.11 أو أحدث. بدون متطلبات وقت التشغيل.
 
 ## التثبيت
 
 
@@ -15,7 +15,7 @@ Was jede Einstellung, Methode und jedes Feld bewirkt. Wenn Sie zum ersten Mal in
   </Card>
 </Columns>
 
-Python 3.10 oder neuer. Keine Laufzeitabhängigkeiten.
+Python 3.11 oder neuer. Keine Laufzeitabhängigkeiten.
 
 ## Installation
 
 
@@ -15,7 +15,7 @@ Qué hace cada configuración, método y campo. Si es la primera vez que instrum
   </Card>
 </Columns>
 
-Python 3.10 o superior. Sin dependencias en tiempo de ejecución.
+Python 3.11 o superior. Sin dependencias en tiempo de ejecución.
 
 ## Instalar
 
 
@@ -15,7 +15,7 @@ Ce que font chaque paramètre, méthode et champ. Si vous instrumentez pour la p
   </Card>
 </Columns>
 
-Python 3.10 ou supérieur. Aucune dépendance d'exécution.
+Python 3.11 ou supérieur. Aucune dépendance d'exécution.
 
 ## Installation
 
 
@@ -15,7 +15,7 @@ icon: "python"
   </Card>
 </Columns>
 
-Python 3.10 או חדש יותר. ללא תלויות זמן ריצה.
+Python 3.11 או חדש יותר. ללא תלויות זמן ריצה.
 
 ## התקנה
 
 
@@ -15,7 +15,7 @@ icon: "python"
   </Card>
 </Columns>
 
-Python 3.10 या नया। कोई runtime dependency नहीं।
+Python 3.11 या नया। कोई runtime dependency नहीं।
 
 ## इंस्टॉल करें
 
 
@@ -15,7 +15,7 @@ Cosa fanno ogni impostazione, metodo e campo. Se stai strumentando per la prima
   </Card>
 </Columns>
 
-Python 3.10 o più recente. Nessuna dipendenza di runtime.
+Python 3.11 o più recente. Nessuna dipendenza di runtime.
 
 ## Installazione