[kridai]

Part of DII-2639 (epic DII-2636). Mirrors the OSS publishing changes in twilio-python / twilio-csharp and the other SendGrid repos.

Changes

• test-and-deploy.yml: ubuntu-x64 runners, github.repository_owner == 'sendgrid' guards, least-privilege permissions, actions pinned to SHAs, production environment on deploy, GitHub release via twilio/sdk-actions/github-release; Datadog and Slack steps commented out as in the other SendGrid repos. Docker Hub login steps dropped.
• Python: PyPI trusted publishing (OIDC) replaces PYPI_TOKEN; deploy validates the tag against setup.py's version and runs twine check. It also now creates a GitHub release.
• CI matrix moved from the EOL versions (2.7 / 3.5-3.8 where present) to 3.9-3.13; setup-python can no longer install 2.7 on current runners. Package metadata (python_requires/classifiers) is unchanged.
• pr-lint.yml pinned (twilio/sdk-actions/semantic-pr-title); added dependabot.yml.

Not verified

Workflows were only validated as YAML and have not run on Actions. Before releasing: the production environment and ARTIFACTORY_URL variable, and a PyPI trusted publisher must exist for this repo, and ubuntu-x64 needs the tooling the Makefile uses (docker where make test-docker is used). Library/package version support is not changed by this PR.

🤖 Generated with Claude Code