lib-shopware6-api-base 3.0.1__tar.gz → 3.0.2__tar.gz

{lib_shopware6_api_base-3.0.1 → lib_shopware6_api_base-3.0.2}/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.2] - 2026-05-08
+
+### Changed
+
+- Bumped dev pin `python-multipart` to `>=0.0.27` (CVE-2026-42561)
+
+### Fixed
+
+- pip-audit: ignore `CVE-2026-6357` (pip 26.0.1, env-only, fix in pip 26.1, awaiting GHA runner image bump)
+
 ## [3.0.1] - 2026-04-26
 
 ### Changed

{lib_shopware6_api_base-3.0.1 → lib_shopware6_api_base-3.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_shopware6_api_base
-Version: 3.0.1
+Version: 3.0.2
 Summary: python3 base API client for shopware6
 Project-URL: Homepage, https://github.com/bitranox/lib_shopware6_api_base
 Project-URL: Documentation, https://github.com/bitranox/lib_shopware6_api_base/blob/master/README.md
@@ -42,7 +42,7 @@ Requires-Dist: pynacl>=1.6.2; extra == 'dev'
 Requires-Dist: pyright[nodejs]>=1.1.408; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
 Requires-Dist: pytest>=9.0.2; extra == 'dev'
-Requires-Dist: python-multipart>=0.0.26; extra == 'dev'
+Requires-Dist: python-multipart>=0.0.27; extra == 'dev'
 Requires-Dist: rtoml>=0.13.0; extra == 'dev'
 Requires-Dist: ruff>=0.14.14; extra == 'dev'
 Requires-Dist: textual>=7.5.0; extra == 'dev'

{lib_shopware6_api_base-3.0.1 → lib_shopware6_api_base-3.0.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lib_shopware6_api_base"
-version = "3.0.1"
+version = "3.0.2"
 description = "python3 base API client for shopware6"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -53,7 +53,7 @@ dev = [
   "httpx>=0.28.1",
   # Transitive CVE pins
   "jaraco-context>=6.1.0",       # CVE-2025-23949
-  "python-multipart>=0.0.26",    # CVE-2025-24486, CVE-2026-40347
+  "python-multipart>=0.0.27",    # CVE-2025-24486, CVE-2026-40347, CVE-2026-42561
   "wheel>=0.46.3",               # CVE-2025-24049
   "pynacl>=1.6.2",               # CVE-2025-69277
   "urllib3>=2.6.3",              # CVE-2025-66471, CVE-2025-66418
@@ -267,4 +267,5 @@ ignore-vulns = [
   "PYSEC-2025-49",     # setuptools 65.5.0 — bundled with macOS Py 3.10/3.11 runners
   "CVE-2024-6345",     # setuptools 65.5.0 — bundled with macOS Py 3.10/3.11 runners
   "CVE-2026-3219",     # pip 26.0.1 — env-only, not a project dependency, no fix available
+  "CVE-2026-6357",     # pip 26.0.1 — env-only (GHA runner image), fix in pip 26.1, awaiting runner bump
 ]

{lib_shopware6_api_base-3.0.1 → lib_shopware6_api_base-3.0.2}/src/lib_shopware6_api_base/__init__conf__.py

@@ -26,7 +26,7 @@ name = "lib_shopware6_api_base"
 #: Human-readable summary shown in CLI help output.
 title = "python3 base API client for shopware6"
 #: Current release version pulled from ``pyproject.toml`` by automation.
-version = "3.0.1"
+version = "3.0.2"
 #: Repository homepage presented to users.
 homepage = "https://github.com/bitranox/lib_shopware6_api_base"
 #: Author attribution surfaced in CLI output.