FWIW: historically I believe the baseline was "whatever pip requires" plus "whatever web-platform-tests requires" (the latter mostly because… it was as a dependency of that which essentially got maintenance work done), where the former seems to be 3.7 and the latter seems to be 3.6 for now (mostly due to the Firefox tooling:https://bugzilla.mozilla.org/show_bug.cgi?id=1734402, because Ubuntu and other distros want to be able to build with their packaged and maintained Python version)

OK. The consensus is to release 1.2 with support for 2.7 - 3.11, and immediately after cut support for 2.7, 3.5, and 3.6.

I have been having trouble with the Django Rest framework dependency on html5lib for some time. Although I was apparently able to install "sudo apt -y install python3-html5lib", I still get an import error when I attempt to install restframework: "cannot import name 'html5lib' from 'pip._vendor' (/usr/lib/python3/dist-packages/pip/_vendor/init.py)". Any thoughts or suggestions for me? thx,pete.godston@gmail.com

Hi, hope everyone is doing well. Since March things have moved on and python 3.7 has ended security updates last month. Raising a couple of points for discussion:

• Are there any thoughts on a timeline for the release of the 1.2 and beyond versions?
• Will any (security) issues raised before that be considered in a patch release until that time?

Many thanks and keep up the good work!