build: bump to 1.3.20 and update dependencies

Raise the dependency floors so a new install cannot pick up a PyJWT
release with a known vulnerability.

- Raise the floors for PyJWT, pydantic, pydantic-settings,
  python-dotenv and validators to their current releases.
- Add the 1.3.20 entry to the changelog.

CHANGELOG.md

@@ -2,6 +2,14 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.3.20] - 2026-11-04
+
+### Changed
+- Raised the minimum versions of `pydantic`, `pydantic-settings`, `python-dotenv`, `PyJWT` and `validators` to their current releases.
+
+### Security
+- Required `PyJWT` 2.15.1 or later; releases before 2.14.0 have a known vulnerability.
+
 ## [1.3.19] - 2026-09-04
 
 ### Fixed

pyproject.toml

@@ -7,7 +7,7 @@ name = "mdrsclient"
 
 [project]
 name = "mdrs-client-python"
-version = "1.3.19"
+version = "1.3.20"
 description = "The mdrs-client-python is python library and a command-line client for up- and downloading files to and from MDRS based repository."
 authors = [
     { name = "Yoshihiro OKUMURA", email = "yoshihiro.okumura@riken.jp" }
@@ -32,11 +32,11 @@ classifiers = [
 dependencies = [
     "requests>=2.34.2",
     "requests-toolbelt>=1.0.0",
-    "python-dotenv>=1.2.3",
+    "python-dotenv>=1.2.4",
-    "pydantic>=2.13.5",
+    "pydantic>=2.14.2",
-    "pydantic-settings>=2.15.0",
+    "pydantic-settings>=2.16.2",
-    "PyJWT>=2.13.0",
+    "PyJWT>=2.15.1",
-    "validators>=0.35.0",
+    "validators>=0.36.0",
 ]
 
 [project.optional-dependencies]