[BUG]Resolve All Security Vulnerabilities

[saimedhi]

What is the bug?

• CVE-2024-21503 (Medium) detected in black-23.3.0-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl #704
• CVE-2024-23829 (Medium) detected in aiohttp-3.8.6-cp310-cp310-macosx_10_9_universal2.whl, aiohttp-3.8.6-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl #688
• CVE-2024-23334 (High) detected in aiohttp-3.8.6-cp310-cp310-macosx_10_9_universal2.whl, aiohttp-3.8.6-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl #687
• CVE-2023-49081 (Medium) detected in aiohttp-3.8.6-cp310-cp310-macosx_10_9_universal2.whl, aiohttp-3.8.6-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl #622
• CVE-2023-49082 (Medium) detected in aiohttp-3.8.6-cp310-cp310-macosx_10_9_universal2.whl, aiohttp-3.8.6-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl #621

[saimedhi]

• All security vulnerabilities can be resolved by upgrading aiohttp to version 3.9.2 or higher and black to version 24.3.0 or later. However, this requires Python version 3.8 or above. Note that opensearch-py currently supports Python versions 3.6 and 3.7.

• We must either drop support for Python 3.7 and below or find workarounds for all the vulnerabilities.

[dblock]

@saimedhi Are 3.6/3.7 EOL? If these are major we should drop support for those.

[saimedhi]

@saimedhi Are 3.6/3.7 EOL? If these are major we should drop support for those.

@dblock, yes python 3.6, 3.7 are EOL