fix: resolve dependabot vulnerabilities (v0.2.2)

CHANGELOG.md

@@ -1,6 +1,15 @@
 # CHANGELOG for sumologic-python-sdk
 This project adheres to [Semantic Versioning](http://semver.org/). The CHANGELOG follows the format listed at [Keep A Changelog](http://keepachangelog.com/)
 
+## [0.2.2] - 2026-11-13
+### Security
+- Upgraded `urllib3` to `>=2.8.0` to fix high severity vulnerabilities
+- Upgraded `certifi` to `>=2026.10.18` to fix a critical severity vulnerability
+- Upgraded `filelock` to `>=4.2.1` (Python 3.11+ only, as `filelock` 4.x requires it) to fix multiple vulnerabilities
+- Upgraded `virtualenv` to `>=21.14.9` to fix multiple vulnerabilities
+- Upgraded `setuptools` to `>=84.1.0` in the build requirements
+- Upgraded `black` to `>=26.10.1` in dev dependencies
+
 ## [0.2.1] - 2026-09-02
 ### Security
 - Upgraded `setuptools` to `>=83.0.0` to fix MANIFEST.in exclusion bypass via Unicode normalization collision on macOS APFS/HFS+ (CVE-2026-59890, GHSA-h35f-9h28-mq5c)

Pipfile

@@ -4,21 +4,21 @@ url = "https://pypi.org/simple"
 verify_ssl = true
 
 [dev-packages]
-virtualenv = ">=21.3.0"
-setuptools = ">=83.0.0"
-filelock = ">=3.29.0"
+virtualenv = ">=21.14.9"
+setuptools = ">=84.1.0"
+filelock = ">=4.2.1"
 zipp = ">=3.19.1"
 pygments = ">=2.20.0"
-certifi = ">=2026.4.22"
+certifi = ">=2026.10.18"
 pyupgrade = "*"
 bandit = "*"   # https://github.com/PyCQA/bandit
 better_exceptions = "*"
-black = "*"
+black = ">=26.10.1"
 sumologic-sdk = {path = ".", editable = true}
 flake8 = "*"
 pre-commit = "*"  # https://ljvmiranda921.github.io/notebook/2018/06/21/precommits-using-black-and-flake8/
 pytest = ">=9.0.3"
-requests = "*"
+requests = ">=2.33.1"
 twine = "*"
 build = "*"