#409 Support Python 3.13 (#414)

* #409 Savepoint

* #409 Add claude commands

* #409 Prepare for versioned release

* #409 Prepare for versioned release

* #409 Update to template

* #409 Fix Lint issues

* #409 Fix Lint issues

* #409 Fix Lint issues

Author: docktermj

.claude/CLAUDE.md

@@ -0,0 +1,125 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is `sz-sdk-python`, the Senzing Python SDK containing abstract base classes from which concrete implementations (Core and gRPC) are derived. The package is published to PyPI as `senzing`.
+
+## Development Commands
+
+### Setup and Dependencies
+
+```bash
+# Create virtual environment and install all development dependencies
+make dependencies-for-development
+
+# Install package dependencies only
+make dependencies
+```
+
+### Linting
+
+```bash
+# Run all linters (pylint, mypy, bandit, black, flake8, isort)
+make lint
+
+# Run individual linters
+make pylint
+make mypy
+make black
+make flake8
+make isort
+make bandit
+```
+
+### Testing
+
+```bash
+# Run full test suite (requires Senzing C library installed)
+make clean setup test
+
+# Run unit tests only
+pytest tests/ --verbose --capture=no
+
+# Run a single test file
+pytest tests/szengine_test.py --verbose
+
+# Run a specific test
+pytest tests/szengine_test.py::test_add_record --verbose
+
+# Run tests with coverage
+make coverage
+```
+
+### Build and Package
+
+```bash
+make package          # Build wheel file
+make publish-test     # Publish to Test PyPI
+```
+
+### Documentation
+
+```bash
+make documentation    # Build and view Sphinx docs
+```
+
+## Architecture
+
+### Package Structure
+
+- `src/senzing/` - Main package with abstract base classes defining the SDK interface
+- `src/senzing_mock/` - Mock implementations for testing
+- `src/senzing_truthset/` - Sample test data (customers, references, watchlist)
+
+### Core Abstract Classes
+
+The SDK defines abstract base classes that implementations must fulfill:
+
+- **SzAbstractFactory** - Factory pattern for creating SDK objects. Concrete implementations:
+  - `SzAbstractFactoryCore` (in sz-sdk-python-core)
+  - `SzAbstractFactoryGrpc` (in sz-sdk-python-grpc)
+
+- **SzEngine** - Main entity resolution engine with methods like:
+  - `add_record()`, `delete_record()` - Record management
+  - `get_entity_by_*()` - Entity retrieval
+  - `find_path_by_*()`, `find_network_by_*()` - Relationship discovery
+  - `why_*()` - Explain entity resolution decisions
+  - `search_by_attributes()` - Search functionality
+
+- **SzConfig** - Configuration management
+- **SzConfigManager** - Configuration versioning and registry
+- **SzDiagnostic** - System diagnostics
+- **SzProduct** - License and version info
+
+### Error Hierarchy
+
+`src/senzing/szerror.py` contains the exception hierarchy (auto-generated):
+
+- `SzError` - Base exception
+- `SzBadInputError` - User input errors (SzNotFoundError, SzUnknownDataSourceError)
+- `SzRetryableError` - Transient errors that can be retried
+- `SzUnrecoverableError` - Fatal errors (SzDatabaseError, SzLicenseError)
+
+### Engine Flags
+
+`SzEngineFlags` in `szengineflags.py` controls what information is returned from SDK methods.
+
+## Code Style
+
+- Line length: 120 characters (black, flake8)
+- Type hints: Required (`mypy --strict`)
+- Import sorting: isort with black profile
+- Security: bandit for security checks (B101 skipped for assert usage)
+
+## Testing Approach
+
+Tests use pytest with mock implementations from `senzing_mock`. The mock classes implement all abstract methods with minimal return values, allowing interface verification without requiring the actual Senzing engine.
+
+- Tests in `tests/` verify the abstract interface.
+- Tests in `examples/` serve as both documentation and integration tests.
+
+## Prerequisites
+
+The Senzing C library must be installed at `/opt/senzing/er/lib` for running tests against actual implementations.

.claude/commands/senzing-code-review.md

@@ -0,0 +1,3 @@
+# Senzing
+
+- Perform the steps specified by <https://raw.githubusercontent.com/senzing-factory/claude/refs/tags/v1/commands/senzing.md>

.claude/commands/senzing.md

@@ -4,14 +4,14 @@
 version: 2
 updates:
   - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: daily
-  - package-ecosystem: docker
+    cooldown:
+      default-days: 21
     directory: /
     schedule:
       interval: daily
   - package-ecosystem: pip
+    cooldown:
+      default-days: 21
     directory: /
     schedule:
       interval: daily

.claude/settings.local.json .claude/settings.json.claude/settings.local.json renamed to .claude/settings.json

@@ -1 +1 @@
-{}
+{}

.github/dependabot.yml

@@ -1,5 +1,12 @@
 # Linters
 
+## .checkov.yaml
+
+- [.checkov.yaml]
+- Used by [lint-workflows.yaml]
+- [checkov]
+  - [checkov configuration]
+
 ## .jscpd.json
 
 - [.jscpd.json]
@@ -10,7 +17,7 @@
 
     ```json
     {
-      "ignore": ["**/*.go,**/go-test*.yaml"],
+      "ignore": ["**/*.py,**/python-test*.yaml"],
       "threshold": 10
     }
     ```
@@ -22,10 +29,31 @@
 - [yaml-lint]
   - [yaml-lint configuration]
 
+## bearer.yml
+
+- [bearer.yml]
+- Used by [bearer.yaml]
+- [bearer]
+  - [bearer repository]
+  - [bearer configuration]
+
+## zizmor.yaml
+
+- [zizmor.yaml]
+
+[.checkov.yaml]: .checkov.yaml
 [.jscpd.json]: .jscpd.json
 [.yaml-lint.yml]: .yaml-lint.yml
+[bearer configuration]: https://docs.bearer.com/reference/config/
+[bearer repository]: https://github.com/Bearer/bearer/tree/main
+[bearer.yaml]: ../workflows/README.md#beareryaml
+[bearer.yml]: bearer.yml
+[bearer]: https://docs.bearer.com/
+[checkov configuration]: https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html
+[checkov]: https://www.checkov.io/
 [jscpd configuration]: https://github.com/kucherenko/jscpd/tree/master/apps/jscpd#options
 [jscpd]: https://github.com/kucherenko/jscpd
 [lint-workflows.yaml]: ../workflows/README.md#lint-workflowsyaml
 [yaml-lint configuration]: https://yamllint.readthedocs.io/en/stable/configuration.html
 [yaml-lint]: https://github.com/adrienverge/yamllint
+[zizmor.yaml]: zizmor.yaml

.github/linters/.jscpd.json

@@ -1,11 +1,13 @@
-name: bandit
+name: Bandit
 
 on:
-  push:
-    branches-ignore: [main]
   pull_request:
     branches: [main]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 permissions: {}
 
 jobs:
@@ -16,7 +18,8 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.12"]
+        python-version: ["3.13"]
+    timeout-minutes: 10
 
     steps:
       - name: Run Bandit Scan

.github/linters/README.md

@@ -1,18 +1,21 @@
-name: bearer
+name: Bearer
 
 on:
-  push:
-    branches-ignore: [main]
   pull_request:
     branches: [main]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 permissions: {}
 
 jobs:
   rule_check:
     permissions:
       contents: read
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     steps:
       - name: Checkout repository

.github/workflows/bandit.yaml

@@ -1,23 +1,26 @@
-name: black
+name: Black
 
 on:
-  push:
-    branches-ignore: [main]
   pull_request:
     branches: [main]
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
 permissions: {}
 
 jobs:
   black:
-    name: black Python ${{ matrix.python-version }}
+    name: Black Python ${{ matrix.python-version }}
     permissions:
       contents: read
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.9", "3.10", "3.11", "3.12"]
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
+    timeout-minutes: 10
 
     steps:
       - name: Checkout repository