Update boxsdk requirement from <4,>=3.14.0 to >=10.12.0,<11

[dependabot]

Warning

Dependabot will stop supporting python v3.9!

Please upgrade to one of the following versions: v3.9, v3.10, v3.11, v3.12, v3.13, or v3.14.

Updates the requirements on boxsdk to permit the latest version.

Release notes

Sourced from boxsdk's releases.

v10.12.0

New Features and Enhancements

• Add new event types (box/box-openapi#1703) (box/box-openapi#605) (#1486) (fa0bef9)
• Add new parameters to ai extract structured method (box/box-openapi#604) (#1485) (ba4f5ab)
• Expose errorCode in sign request schemas (box/box-openapi#601) (#1484) (d2ff760)

Changelog

Sourced from boxsdk's changelog.

10.12.0 (2026-06-11)

New Features and Enhancements

• Add new event types (box/box-openapi#1703) (box/box-openapi#605) (#1486) (fa0bef9)
• Add new parameters to ai extract structured method (box/box-openapi#604) (#1485) (ba4f5ab)
• Expose errorCode in sign request schemas (box/box-openapi#601) (#1484) (d2ff760)

10.11.0 (2026-06-03)

New Features and Enhancements

• Add Convert Note API (box/box-codegen#955) (#1458) (1215d52)

10.10.0 (2026-05-20)

New Features and Enhancements

• add failure related fields to DocGenJob (box/box-openapi#598) (#1445) (2916907)
• Add new event types (box/box-openapi#597) (#1436) (22450ee)
• Sanitize request body in BoxAPIError (box/box-codegen#948) (#1440) (0f046db)

10.9.0 (2026-05-06)

⚠ BREAKING CHANGES

• Mark id field of AIAgentReference required (box/box-openapi#1629) (box/box-openapi#595) (#1422) (d31bca4)

Bug Fixes

• Fix metadata template schema (box/box-openapi#596) (#1423) (3ef0ffe)
• Mark id field of AIAgentReference required (box/box-openapi#1629) (box/box-openapi#595) (#1422) (d31bca4)

10.8.0 (2026-04-30)

New Features and Enhancements

• Automate Public API (box/box-openapi#594) (#1409) (3cfb35c)

10.7.0 (2026-04-22)

Bug Fixes

• Correct retention_length type hint to accept both integer and string (box/box-codegen#932) (#1382) (e8f93ce)

... (truncated)

Commits

• d75d61d chore: release version 10.12.0 (#1490)
• 8b2efa5 test: Expand tests for ai extract structured with new fields (box/box-codegen...
• fa0bef9box/box-openapi#1703#1486)
• ba4f5abbox/box-openapi#604
• d2ff760 feat: Expose errorCodebox/box-openapi#601#1484)
• 3319b4a chore: Update .codegen.json with commit hash of codegen and openapi spe...
• 2d8c1b3 chore: release version 10.11.0 (#1468)
• be8ce9abox/box-codegen#957#1460)
• 1215d52box/box-codegen#955#1458)
• 11c9f1f chore: release version 10.10.0 (#1448)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[JE-Chen]

Not taken. The boxsdk distribution's 10.x line installs the module box_sdk_gen, not boxsdk — verified by installing boxsdk==10.15.0 into a scratch venv, where site-packages/ contains box_sdk_gen only and import boxsdk raises ModuleNotFoundError. automation_file/remote/box/client.py imports boxsdk and builds boxsdk.OAuth2 / boxsdk.Client, so >=3.14.0,<4 is what keeps the Box backend working. Porting the client to the new SDK is tracked as progress.md #6.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.