fancy-gmail 0.3.0__tar.gz → 0.3.2__tar.gz

{fancy_gmail-0.3.0 → fancy_gmail-0.3.2}/CHANGELOG.md

@@ -7,6 +7,55 @@ The four packages share one version, because they are generated from one
 `provider/` definition and a version that meant something different in each
 would be a version nobody could reason about.
 
+## [0.3.2] — 2026-09-06
+
+### Changed
+
+- **Published through npm Trusted Publishing, so these packages now carry PROVENANCE.**
+
+Every earlier release went out under a scope-wide npm token. This one is
+published by an OIDC exchange from the release workflow itself, and npm records
+which workflow in which repository built it.
+`npm view @particle-academy/gmail-ui@0.3.2` shows the attestation; releases before
+this one have none.
+
+What it buys a consumer: the tarball on the registry can be tied to a public
+commit and a public workflow run, rather than to whoever held a token. What it
+does not buy: nothing about the code changed, and the runtime behaviour of all
+four packages is identical to 0.3.1.
+
+- **`repository.directory` in the npm packages.**
+
+`@particle-academy/gmail-ui` and `@particle-academy/gmail-js` live at
+`packages/ui` and `packages/js` inside the provider repo. npm's `repository`
+field now says so, which makes the "Repository" link on each package page point
+at the package rather than at the repository root.
+
+## [0.3.1] — 2026-08-24
+
+### Fixed
+
+- **`@particle-academy/gmail-js` now accepts a RANGE of `@particle-academy/gmail-ui`, not one exact version.**
+
+It peer-depended on `@particle-academy/gmail-ui` at exactly the release it shipped with. That is the
+strict form of the thing the kit's own rule forbids — a first-party sibling gets
+a range — and the same block applied the rule correctly to its other two
+dependencies. It was this one pair that slipped.
+
+What it cost: ship `@particle-academy/gmail-ui` with a fixed help string and every consumer on the
+previous `@particle-academy/gmail-js` had an **unmet peer**, which npm 7+ errors on. A documentation
+patch could not be delivered without a matching runtime release, and a routine
+`npm update` that moved the ui package alone broke the install.
+
+The coupling is real and is not being loosened away. The ui package emits the
+config schema and the js package implements against it, so a ui that adds a
+field to a js that ignores it is silently wrong. But a PATCH is non-additive by
+definition and a MINOR is where a field can appear — so `>=0.3.1 <0.4.0` is the
+coupling that actually exists rather than the strictest one expressible.
+
+Nothing else changed. `particle-academy/gmail-php` and `fancy-gmail` are unaffected; neither has an
+equivalent edge.
+
 ## [0.3.0] — 2026-08-24
 
 ### Added
@@ -127,3 +176,4 @@ which is why `refreshToken` is required rather than optional.
 [0.1.0]: https://github.com/Fancy-Friends/gmail/releases/tag/v0.1.0
 [0.2.0]: https://github.com/Fancy-Friends/gmail/releases/tag/v0.2.0
 [0.3.0]: https://github.com/Fancy-Friends/gmail/releases/tag/v0.3.0
+[0.3.1]: https://github.com/Fancy-Friends/gmail/releases/tag/v0.3.1

{fancy_gmail-0.3.0 → fancy_gmail-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: fancy-gmail
-Version: 0.3.0
+Version: 0.3.2
 Summary: Gmail for Python — the service descriptor, its faker, its webhook verification, and one function per operation. Plain HTTP; no vendor SDK.
 Project-URL: Homepage, https://github.com/Fancy-Friends/gmail
 Project-URL: Issues, https://github.com/Fancy-Friends/gmail/issues

{fancy_gmail-0.3.0 → fancy_gmail-0.3.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "fancy-gmail"
-version = "0.3.0"
+version = "0.3.2"
 description = "Gmail for Python — the service descriptor, its faker, its webhook verification, and one function per operation. Plain HTTP; no vendor SDK."
 readme = "README.md"
 # 3.11 matches fancy-flow-py's floor: 3.10 reaches end of life on 2026-10-31,

{fancy_gmail-0.3.0 → fancy_gmail-0.3.2}/src/fancy_gmail/__init__.py

@@ -21,7 +21,7 @@ from .actions.message_send import message_send
 from .faker import respond
 from .service import BASE_URLS, CONNECTOR_API_VERSION, REQUIRES, SANDBOX, SERVICE, TITLE, descriptor
 
-__version__ = "0.3.0"
+__version__ = "0.3.2"
 
 __all__ = [
     "BASE_URLS",