fix(RELEASE-2180): resolve Python package vulnerabilities (#648)

release-service-utils contained vulnerable packages for two reasons:
- its dependency, pubtools-pyxis pinned urllib3 to an old
  vulnerable version. A new version without this constraint was
  released and bumped in pyproject.toml
- The supported Python version in pyproject.toml was >=3.9. Version
  3.9 is no longer officially supported, which caused the uv
  lockfile to contain old package versions that are no longer getting
  updated for 3.9. It was fixed by bumping minimum Python version to
  3.10.

Signed-off-by: Lubomir Gallovic <lgallovi@redhat.com>

Author: querti

pyproject.toml

@@ -3,7 +3,7 @@ name = "release-service-utils"
 version = "0.1.0"
 description = "Konflux Release Service Utils"
 readme = "README.md"
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 dependencies = [
     "jinja2",
     "check-jsonschema",
@@ -15,7 +15,7 @@ dependencies = [
     "pubtools-exodus==1.5.2",
     "pubtools-marketplacesvm==1.9.0",
     "pubtools-sign==1.0.6",
-    "pubtools-pyxis==1.3.7",
+    "pubtools-pyxis==1.3.8",
     "pulp-cli==0.36.3",
     "diffused-lib==0.3.0",
 ]