Require rpaframework-core >=13.0.2

[mikahanninen]

Summary

rpaframework 33.0.0 shipped with rpaframework-core>=13.0.0, so a fresh install could resolve a core that predates the Windows locator fixes RPA.Windows relies on — the stray locator= prefix handling (#1323) and case-insensitive executable: matching, both released in core 13.0.2.

This is not theoretical: uv lock resolved rpaframework-core 13.0.0 before this change and 13.0.2 after.

Bumps rpaframework to 33.0.1, since 33.0.0 is already on PyPI and its metadata cannot be amended.

Note for reviewers

packages/windows is the package that actually imports the fixed code (from RPA.core.windows.locators import ...) and it still pins rpaframework-core >=13.0.0. Bumping it would mean releasing rpaframework-windows too, so it is left out of this PR — worth a follow-up decision.

Test plan

• uv run pytest tests/python/ — 626 passed (packages/main)
• uv lock resolves core 13.0.2

🤖 Generated with Claude Code

https://claude.ai/code/session_01R5fd658SbZtHYC6nGpE1H5

[github-actions]

Wheel artifact

Built from commit f780c06 — download from the workflow run (Artifacts section at the bottom of the page).

Artifact name: rpaframework-wheel (retained 14 days)

[mikahanninen]

Superseded by the security batch. rpaframework-core needs its own patch release (13.0.3) for the Pillow CVEs, so the correct floor here is >=13.0.3, not >=13.0.2. Folding this pin bump into the security branch instead, where it can land with the cascade in the right order.