feat: add types and bump required python >=3.9

.github/workflows/python-ci.yml

@@ -11,8 +11,59 @@ jobs:
   lint:
     uses: prosegrinder/.github/.github/workflows/poetry-lint.yaml@main
 
+  mypy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check Out
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+          installer-parallel: true
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          cache: "poetry"
+          python-version: "3.x"
+      - name: Install project
+        run: poetry install --with dev --no-interaction
+      - name: MyPy
+        run: |
+          poetry run mypy src/**/*.py --config-file pyproject.toml
+
+  bandit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check Out
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+          installer-parallel: true
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          cache: "poetry"
+          python-version: "3.x"
+      - name: Install project
+        run: poetry install --with dev --no-interaction
+      - name: Bandit
+        run: |
+          poetry run bandit --configfile pyproject.toml --recursive src/**/*.py
+
   test:
-    needs: lint
+    needs:
+      - lint
+      - mypy
+      - bandit
     uses: prosegrinder/.github/.github/workflows/poetry-test.yaml@main
 
   cz-dry-run: