amazon-orders 5.2.1__tar.gz → 5.2.2__tar.gz

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/CHANGELOG.md

@@ -4,7 +4,19 @@ All notable changes to this project will be documented in this file.
 
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased](https://github.com/alexdlaird/amazon-orders/compare/5.2.1...HEAD)
+## [Unreleased](https://github.com/alexdlaird/amazon-orders/compare/5.2.2...HEAD)
+
+## [5.2.2](https://github.com/alexdlaird/amazon-orders/compare/5.2.1...5.2.2) - 2026-11-09
+
+### Fixed
+
+- `parse_tracking()` parses the tracking page of a shipment that has not shipped yet, instead of raising.
+- `Order.order_placed_date` is parsed on a Whole Foods Market in-store purchase's details page.
+- `Tracking.carrier` is documented as `None` when the page names no carrier.
+
+### Security
+
+- The `Host` header is no longer pinned, which sent Amazon's session cookies to any host requested, including through an off-site redirect.
 
 ## [5.2.1](https://github.com/alexdlaird/amazon-orders/compare/5.2.0...5.2.1) - 2026-10-31
 

{amazon_orders-5.2.1/amazon_orders.egg-info → amazon_orders-5.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: amazon-orders
-Version: 5.2.1
+Version: 5.2.2
 Summary: A Python library (and CLI) for Amazon order history, line items, and transactions
 Author-email: Alex Laird <contact@alexlaird.com>
 Maintainer-email: Alex Laird <contact@alexlaird.com>

{amazon_orders-5.2.1 → amazon_orders-5.2.2/amazon_orders.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: amazon-orders
-Version: 5.2.1
+Version: 5.2.2
 Summary: A Python library (and CLI) for Amazon order history, line items, and transactions
 Author-email: Alex Laird <contact@alexlaird.com>
 Maintainer-email: Alex Laird <contact@alexlaird.com>

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/amazonorders/__init__.py

@@ -1,4 +1,4 @@
 __copyright__ = "Copyright (c) 2024-2025 Alex Laird"
 __license__ = "MIT"
-__version__ = "5.2.1"
-__muppets__ = 42
+__version__ = "5.2.2"
+__muppets__ = "no strings attached"

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/amazonorders/constants.py

@@ -24,7 +24,7 @@ class Constants:
 
         config = AmazonOrdersConfig(data={"constants_class": "my_module.MyConstants"})
 
-    URLs and the URL-shaped headers (``Origin``, ``Host``, ``Referer``) are derived from the active
+    URLs and the URL-shaped headers (``Origin``, ``Referer``) are derived from the active
     Amazon domain. ``REQUEST_COOKIES``, ``Accept-Language``, ``CURRENCY_SYMBOL``, the sign-in
     ``openid.assoc_handle``, and ``COOKIES_SET_WHEN_AUTHENTICATED`` are adjusted for known Amazon sites
     (each only when a subclass has not overridden it). The domain is resolved in this precedence order:
@@ -128,7 +128,6 @@ class Constants:
         "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",  # noqa: E501
         "Accept-Encoding": "gzip, deflate, br, zstd",
         "Accept-Language": "en-US,en;q=0.9",
-        "Host": urlparse(BASE_URL).netloc,
         "Origin": BASE_URL,
         "Referer": f"{SIGN_IN_URL}?{urlencode(SIGN_IN_QUERY_PARAMS)}",
         "Sec-Ch-Ua": '"Chromium";v="149", "Google Chrome";v="149", "Not.A/Brand";v="24"',
@@ -398,7 +397,6 @@ class Constants:
 
         headers = dict(vars(self).get("BASE_HEADERS", type(self).BASE_HEADERS))
         headers["Origin"] = base_url
-        headers["Host"] = urlparse(base_url).netloc
         headers["Referer"] = f"{sign_in_url}?{urlencode(sign_in_query_params)}"
         if site and site.english_locale and self._requests_default_language():
             headers["Accept-Language"] = self._english_accept_language(site.english_locale, headers["Accept-Language"])

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/amazonorders/entity/tracking.py

@@ -26,7 +26,7 @@ class Tracking(Parsable):
                  config: AmazonOrdersConfig) -> None:
         super().__init__(parsed, config)
 
-        #: The carrier name, e.g. ``UPS``, or ``Amazon`` for Amazon's own delivery network.
+        #: The carrier the page names, e.g. ``UPS``, or ``None`` when it names none (the "Delivery Info" layout).
         self.carrier: Optional[str] = self.safe_parse(self._parse_carrier)
         #: The carrier's tracking number, e.g. ``1Z999AA10123456784`` or ``TBA000000000000``. Always a ``str``,
         #: since many (e.g. USPS) are all digits and may have leading zeros.

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/amazonorders/selectors.py

@@ -269,10 +269,15 @@ class Selectors:
     FIELD_ORDER_WHOLE_FOODS_TAX_SELECTOR = "#wfm-tax-total-amount"
     FIELD_ORDER_WHOLE_FOODS_PAYMENT_METHOD_SELECTOR = "#wfm-0-card-brand"
     FIELD_ORDER_WHOLE_FOODS_PAYMENT_LAST_4_SELECTOR = "#wfm-0-card-tail"
-    FIELD_ORDER_PLACED_DATE_SELECTOR = ["[data-component='orderDate']",
-                                        "span.order-date-invoice-item",
-                                        "[data-component='briefOrderInfo'] div.a-column",
-                                        "div:is(.a-span3, .a-span12)"]
+    FIELD_ORDER_WHOLE_FOODS_PURCHASED_TEXT = "Purchased on"
+    FIELD_ORDER_PLACED_DATE_SELECTOR = SelectorsFromText(lambda purchased_text: [
+        # WFM in-store details page, the store's local date (its in-store summary shows the UTC date)
+        f"#ufpo-order-status-secondary:-soup-contains(\"{purchased_text}\")",
+        "[data-component='orderDate']",
+        "span.order-date-invoice-item",
+        "[data-component='briefOrderInfo'] div.a-column",
+        "div:is(.a-span3, .a-span12)"
+    ], "FIELD_ORDER_WHOLE_FOODS_PURCHASED_TEXT")
     FIELD_ORDER_PLACED_DATE_SUFFIX = "Order #"
     # When a Gift Card was used alongside a card, prefer the card (the instrument with a number), like its last 4 are
     FIELD_ORDER_PAYMENT_METHOD_SELECTOR = ["[data-testid='payment-instrument']:has([data-testid='payment-instrument-"
@@ -362,11 +367,13 @@ class Selectors:
     # CSS selectors for Tracking fields
     #####################################
 
-    #: The package tracking page: the carrier layout (with a map), or the status-only layout (milestones only,
-    #: no carrier or tracking number)
+    #: The package tracking page: the carrier layout (with a map), the status-only layout (milestones only,
+    #: no carrier or tracking number), or the not-shipped layout (info cards in the page's top area, no carrier
+    #: or tracking number)
     TRACKING_ENTITY_SELECTOR = ["div.pt-main-container",
                                 "#pt-page-container-inner",
-                                "#mainContent-container:has(section.pt-card)"]
+                                "#mainContent-container:has(section.pt-card)",
+                                "#pageContainer-inner:has(section.pt-card)"]
     TRACKING_ERROR_SELECTOR = "div#errorPageContainer"
     FIELD_TRACKING_NUMBER_SELECTOR = [".pt-delivery-card-trackingId"]
     FIELD_TRACKING_NUMBER_PREFIX = "Tracking ID:"

{amazon_orders-5.2.1 → amazon_orders-5.2.2}/amazonorders/session.py

@@ -205,7 +205,8 @@ class AmazonSession:
         :param kwargs: Remaining ``kwargs`` will be passed to :func:`requests.request`.
         :return: The response from the executed request.
         """
-        kwargs["headers"] = {**self.config.constants.BASE_HEADERS, **(kwargs.get("headers") or {})}
+        headers = {**self.config.constants.BASE_HEADERS, **(kwargs.get("headers") or {})}
+        kwargs["headers"] = {name: value for name, value in headers.items() if name.lower() != "host"}
 
         if self.debug:
             logger.debug(f"{method} request: {url}")