chore(release): 0.1.2 - #7
Merged
Merged
Conversation
Bump version to 0.1.2 and cut the changelog section for the fixes that landed since 0.1.1: - fix: clean error when `wingfoot sign` can't reach the URL (#4) - fix: actionable error on a corrupt/incomplete stored identity (#6) - fix: require `expires` and apply clock skew in verify_request (#3) - fix: skip non-Ed25519 entries in find_key instead of crashing (#2) - packaging: ship py.typed (PEP 561) (#5) Also bumps the User-Agent example in the README to match.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cuts v0.1.2, collecting the fixes merged since v0.1.1.
Changes
versionto0.1.2inpyproject.tomlandsrc/wingfoot/__init__.py.[Unreleased]items inCHANGELOG.mdunder a dated[0.1.2]heading and refresh the compare links.User-Agentexample in the README towingfoot/0.1.2.What ships in 0.1.2
Fixed
wingfoot signreports a clean error + exit 1 on a connection failure instead of a traceback (fix(cli): report a clean error whenwingfoot signcan't reach the URL #4)load_identityfails with an actionableIdentityErroron a corrupt/incomplete identity (fix(keys): fail with a clear message on a corrupt stored identity instead of a traceback #6)verify_requestrequiresexpiresand applies clock skew to it (fix(verify): requireexpiresand apply clock-skew tolerance to it #3)find_keyskips non-Ed25519 JWKS entries instead of crashing (fix(directory): don't crash find_key on non-Ed25519 JWKS entries #2)Added
py.typedmarker so downstream type checkers read wingfoot's hints (chore(packaging): shippy.typedso consumers get wingfoot's type hints (PEP 561) #5)Docs
Verification
pytest: 52 passed, 1 skippedwingfoot --version→0.1.2uv buildproduceswingfoot-0.1.2wheel + sdist; wheel containswingfoot/py.typed; METADATA showsVersion: 0.1.2andTyping :: TypedAfter merge
Publishing a GitHub Release tagged
v0.1.2triggers the Trusted-Publishing workflow to push to PyPI. I've prepared that as a draft release to review — publishing it is the one irreversible step, left for a human to click.