lib-shopware6-api-base 3.0.0__tar.gz → 3.0.2__tar.gz

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/.github/workflows/cicd_docker.yml

@@ -107,7 +107,7 @@ jobs:
           && steps.pytest.outcome == 'success'
           && matrix.os == 'ubuntu-latest'
           && matrix.python == '3.13'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           files: ${{ env.COV_REPORT_FILE }}
           fail_ci_if_error: false
@@ -366,7 +366,7 @@ jobs:
 
       - name: Upload integration coverage to Codecov
         if: always()
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           files: coverage-integration.xml
           flags: integration

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/.github/workflows/default_release_public.yml

@@ -31,7 +31,7 @@ jobs:
         run: uv build
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: dist
           path: dist/*
@@ -56,7 +56,7 @@ jobs:
           fi
 
       - name: Download artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: dist
           path: dist/

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/CHANGELOG.md

@@ -5,6 +5,33 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.2] - 2026-05-08
+
+### Changed
+
+- Bumped dev pin `python-multipart` to `>=0.0.27` (CVE-2026-42561)
+
+### Fixed
+
+- pip-audit: ignore `CVE-2026-6357` (pip 26.0.1, env-only, fix in pip 26.1, awaiting GHA runner image bump)
+
+## [3.0.1] - 2026-04-26
+
+### Changed
+
+- Bumped `authlib` minimum to `>=1.6.11` (GHSA-jj8c-mmj3-mmgv)
+- Bumped dev pin `python-multipart` to `>=0.0.26` (CVE-2026-40347)
+- Updated CI actions: `codecov-action@v6`, refreshed upload/download-artifact actions
+
+### Fixed
+
+- pip-audit: ignore `CVE-2026-3219` (pip 26.0.1, env-only, no upstream fix)
+
+### Removed
+
+- Snyk badge from README
+- Stale CVE entries from `tool.pip-audit.ignore-vulns` no longer flagged (kept setuptools CVEs needed by macOS Py 3.10/3.11 runners)
+
 ## [3.0.0] - 2026-02-03
 
 ### Breaking Changes

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_shopware6_api_base
-Version: 3.0.0
+Version: 3.0.2
 Summary: python3 base API client for shopware6
 Project-URL: Homepage, https://github.com/bitranox/lib_shopware6_api_base
 Project-URL: Documentation, https://github.com/bitranox/lib_shopware6_api_base/blob/master/README.md
@@ -22,7 +22,7 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: authlib>=1.6.6
+Requires-Dist: authlib>=1.6.11
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: lib-cli-exit-tools>=2.2.4
 Requires-Dist: orjson
@@ -42,7 +42,7 @@ Requires-Dist: pynacl>=1.6.2; extra == 'dev'
 Requires-Dist: pyright[nodejs]>=1.1.408; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
 Requires-Dist: pytest>=9.0.2; extra == 'dev'
-Requires-Dist: python-multipart>=0.0.22; extra == 'dev'
+Requires-Dist: python-multipart>=0.0.27; extra == 'dev'
 Requires-Dist: rtoml>=0.13.0; extra == 'dev'
 Requires-Dist: ruff>=0.14.14; extra == 'dev'
 Requires-Dist: textual>=7.5.0; extra == 'dev'
@@ -64,7 +64,6 @@ Description-Content-Type: text/markdown
 [![Code Style: Ruff](https://img.shields.io/badge/Code%20Style-Ruff-46A3FF?logo=ruff&labelColor=000)](https://docs.astral.sh/ruff/)
 [![codecov](https://codecov.io/gh/bitranox/lib_shopware6_api_base/graph/badge.svg?token=UFBaUDIgRk)](https://codecov.io/gh/bitranox/lib_shopware6_api_base)
 [![Maintainability](https://qlty.sh/badges/041ba2c1-37d6-40bb-85a0-ec5a8a0aca0c/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_shopware6_api_base)
-[![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_shopware6_api_base/badge.svg)](https://snyk.io/test/github/bitranox/lib_shopware6_api_base)
 [![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 A Python base API client for Shopware 6, supporting Windows, Linux, and macOS.

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/README.md

@@ -10,7 +10,6 @@
 [![Code Style: Ruff](https://img.shields.io/badge/Code%20Style-Ruff-46A3FF?logo=ruff&labelColor=000)](https://docs.astral.sh/ruff/)
 [![codecov](https://codecov.io/gh/bitranox/lib_shopware6_api_base/graph/badge.svg?token=UFBaUDIgRk)](https://codecov.io/gh/bitranox/lib_shopware6_api_base)
 [![Maintainability](https://qlty.sh/badges/041ba2c1-37d6-40bb-85a0-ec5a8a0aca0c/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_shopware6_api_base)
-[![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_shopware6_api_base/badge.svg)](https://snyk.io/test/github/bitranox/lib_shopware6_api_base)
 [![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 A Python base API client for Shopware 6, supporting Windows, Linux, and macOS.

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lib_shopware6_api_base"
-version = "3.0.0"
+version = "3.0.2"
 description = "python3 base API client for shopware6"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -11,7 +11,7 @@ dependencies = [
     "rich-click",
     "orjson",
     "httpx>=0.28.1",
-    "authlib>=1.6.6",
+    "authlib>=1.6.11",
 ]
 license = {text = "MIT"}
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
@@ -53,7 +53,7 @@ dev = [
   "httpx>=0.28.1",
   # Transitive CVE pins
   "jaraco-context>=6.1.0",       # CVE-2025-23949
-  "python-multipart>=0.0.22",    # CVE-2025-24486
+  "python-multipart>=0.0.27",    # CVE-2025-24486, CVE-2026-40347, CVE-2026-42561
   "wheel>=0.46.3",               # CVE-2025-24049
   "pynacl>=1.6.2",               # CVE-2025-69277
   "urllib3>=2.6.3",              # CVE-2025-66471, CVE-2025-66418
@@ -204,7 +204,7 @@ output = "coverage.json"
 pretty_print = true
 
 [tool.clean]
-# Patterns to remove when running `make clean` or `python -m scripts clean`
+# Patterns to remove when running `make clean`
 patterns = [
   "**/__pycache__",
   ".hypothesis",
@@ -261,12 +261,11 @@ layers = [
 
 [tool.pip-audit]
 # Known vulnerabilities to ignore (environment-level packages, not project dependencies)
-# PYSEC-2022-42969: py library ReDoS — py 1.11.0 is installed in the development
-#   environment but is not a dependency of this project; no fix available.
 ignore-vulns = [
-  "PYSEC-2022-42969",
-  "PYSEC-2022-43012",  # setuptools 65.5.0 — env-only, not a project dependency
-  "PYSEC-2025-49",     # setuptools 65.5.0 — env-only, not a project dependency
-  "CVE-2024-6345",     # setuptools 65.5.0 — env-only, not a project dependency
-  "CVE-2026-1703",
+  "PYSEC-2022-42969",  # py 1.11.0 — ReDoS, env-only (pytest legacy), no fix available
+  "PYSEC-2022-43012",  # setuptools 65.5.0 — bundled with macOS Py 3.10/3.11 runners
+  "PYSEC-2025-49",     # setuptools 65.5.0 — bundled with macOS Py 3.10/3.11 runners
+  "CVE-2024-6345",     # setuptools 65.5.0 — bundled with macOS Py 3.10/3.11 runners
+  "CVE-2026-3219",     # pip 26.0.1 — env-only, not a project dependency, no fix available
+  "CVE-2026-6357",     # pip 26.0.1 — env-only (GHA runner image), fix in pip 26.1, awaiting runner bump
 ]

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/scripts/refractor.md

@@ -43,16 +43,16 @@ Each roast issue includes:
 
 After the roast loop completes (only MINOR issues remain), the pipeline runs these steps on the **whole project**:
 
-| Step | Name | Description |
-|------|------|-------------|
-| 1 | Data Architecture Enforcement | Run `/bx_data_architecture_enforcement` |
-| 2 | Architecture Review | Review per `python_clean_architecture.md` |
-| 3 | LRU Cache Opportunities | Find caching opportunities, precompile regex |
-| 4 | Proper Usage of Libraries | Ensure orjson, rtoml, httpx usage |
+| Step | Name | Description                                      |
+|------|------|--------------------------------------------------|
+| 1 | Data Architecture Enforcement | Run `/bx_data_architecture_enforcement`          |
+| 2 | Architecture Review | Review using skill `bx-python-clean-architecture`   |
+| 3 | LRU Cache Opportunities | Find caching opportunities, precompile regex     |
+| 4 | Proper Usage of Libraries | Ensure orjson, rtoml, httpx usage                |
 | 5 | Edge Cases & Security | Review for edge cases, race conditions, security |
-| 6 | Test Refractor | Run `/bx_refactor_tests_python` |
-| 7 | Code Simplification | Simplify code, remove dead code, modernize |
-| 8 | Documentation Review | Verify claude.md, module_reference.md accuracy |
+| 6 | Test Refractor | Run `/bx_refactor_tests_python`                  |
+| 7 | Code Simplification | Simplify code, remove dead code, modernize       |
+| 8 | Documentation Review | Verify claude.md, module_reference.md accuracy   |
 
 ## Usage
 

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/scripts/refractor.py

@@ -15,7 +15,7 @@ Phase 1 - Iterative Roast Loop (max 10 iterations per pass):
 
 Phase 2 - Project-Wide Steps:
     1. Data Architecture Enforcement
-    2. Architecture Review (per python_clean_architecture.md)
+    2. Architecture Review (using skill `bx-python-clean-architecture`)
     3. LRU Cache Opportunities
     4. Proper Usage of Libraries
     5. Edge Cases, Race Conditions & Security
@@ -656,7 +656,7 @@ Continue numbering for all issues found. Each issue MUST have a specific, action
     ),
     (
         "Architecture Review",
-        "review architecture like described in python_clean_architecture.md. "
+        "review architecture use skill `bx-python-clean-architecture`"
         "do not create compatibility shims, we dont care for backward compatibility. "
         "write tests for any new code you create - aim for good test coverage. "
         "dont ask back - decide yourself given all the systemprompts in claude.md. "

{lib_shopware6_api_base-3.0.0 → lib_shopware6_api_base-3.0.2}/src/lib_shopware6_api_base/__init__conf__.py

@@ -26,7 +26,7 @@ name = "lib_shopware6_api_base"
 #: Human-readable summary shown in CLI help output.
 title = "python3 base API client for shopware6"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "3.0.0"
+version = "3.0.2"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/lib_shopware6_api_base"
 #: Author attribution surfaced in CLI output.