- drop support for Python 3.6 and 3.7 (support Python 3.8 - 3.14)
- include type hints for mypy
- no longer use defusedxml with lxml because nowadays lxml guards against everything that defusedxml is for
PSKC.signature.certificatenow has type str instead of bytes but still supports assigning bytes- various small fixes and documentation improvements