fix typings + drop python 3.8 + pin deps for securit vulnerability fixes

fix typings + drop python 3.8 + pin deps for securit vulnerability fixes #357