elven-logs-interceptor-python 0.1.17__tar.gz → 0.1.18__tar.gz

{elven_logs_interceptor_python-0.1.17 → elven_logs_interceptor_python-0.1.18}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: elven-logs-interceptor-python
-Version: 0.1.17
+Version: 0.1.18
 Summary: Production-grade logs interceptor for Python with Loki transport, resilience, batching, and framework integrations.
 Author: Elven Observability
 License: MIT
@@ -23,7 +23,7 @@ Requires-Dist: django>=4.2; extra == 'all'
 Requires-Dist: fastapi>=0.100.0; extra == 'all'
 Requires-Dist: flask>=3.0.0; extra == 'all'
 Requires-Dist: loguru>=0.7.2; extra == 'all'
-Requires-Dist: opentelemetry-api>=1.24.0; extra == 'all'
+Requires-Dist: opentelemetry-api<2.0.0,>=1.45.1; extra == 'all'
 Requires-Dist: orjson>=3.10.0; extra == 'all'
 Requires-Dist: protobuf>=5.0.0; extra == 'all'
 Requires-Dist: python-snappy>=0.7.1; extra == 'all'
@@ -49,7 +49,7 @@ Requires-Dist: flask>=3.0.0; extra == 'flask'
 Provides-Extra: loguru
 Requires-Dist: loguru>=0.7.2; extra == 'loguru'
 Provides-Extra: otel
-Requires-Dist: opentelemetry-api>=1.24.0; extra == 'otel'
+Requires-Dist: opentelemetry-api<2.0.0,>=1.45.1; extra == 'otel'
 Provides-Extra: perf
 Requires-Dist: brotli>=1.1.0; extra == 'perf'
 Requires-Dist: orjson>=3.10.0; extra == 'perf'
@@ -75,6 +75,15 @@ With all extras:
 pip install "elven-logs-interceptor-python[all]"
 ```
 
+### OpenTelemetry Security
+
+Version 0.1.18 raises the optional `otel` and `all` extras to
+`opentelemetry-api>=1.45.1,<2.0.0`, excluding the vulnerable parser described in
+[CVE-2026-114603](https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-xcq7-p3pf-p88h).
+The base installation still does not require OpenTelemetry. Logging APIs and
+framework minimum versions are unchanged. Existing application lockfiles must
+be regenerated to receive the security update.
+
 ## Quick Start
 
 ```python

{elven_logs_interceptor_python-0.1.17 → elven_logs_interceptor_python-0.1.18}/README.md

@@ -14,6 +14,15 @@ With all extras:
 pip install "elven-logs-interceptor-python[all]"
 ```
 
+### OpenTelemetry Security
+
+Version 0.1.18 raises the optional `otel` and `all` extras to
+`opentelemetry-api>=1.45.1,<2.0.0`, excluding the vulnerable parser described in
+[CVE-2026-114603](https://github.com/open-telemetry/opentelemetry-python/security/advisories/GHSA-xcq7-p3pf-p88h).
+The base installation still does not require OpenTelemetry. Logging APIs and
+framework minimum versions are unchanged. Existing application lockfiles must
+be regenerated to receive the security update.
+
 ## Quick Start
 
 ```python

{elven_logs_interceptor_python-0.1.17 → elven_logs_interceptor_python-0.1.18}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "elven-logs-interceptor-python"
-version = "0.1.17"
+version = "0.1.18"
 description = "Production-grade logs interceptor for Python with Loki transport, resilience, batching, and framework integrations."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -44,7 +44,7 @@ perf = [
   "brotli>=1.1.0",
 ]
 otel = [
-  "opentelemetry-api>=1.24.0",
+  "opentelemetry-api>=1.45.1,<2.0.0",
 ]
 fastapi = [
   "fastapi>=0.100.0",
@@ -70,7 +70,7 @@ all = [
   "protobuf>=5.0.0",
   "python-snappy>=0.7.1",
   "brotli>=1.1.0",
-  "opentelemetry-api>=1.24.0",
+  "opentelemetry-api>=1.45.1,<2.0.0",
   "fastapi>=0.100.0",
   "starlette>=0.27.0",
   "django>=4.2",