spaps-server-quickstart 0.6.1__tar.gz → 0.6.2__tar.gz

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/CHANGELOG.md

@@ -6,6 +6,13 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 
 ## [Unreleased]
 
+## [0.6.2] - 2026-06-01
+
+### Changed
+
+- Raised the FastAPI lower bound to `>=0.120.0` and added an explicit `starlette>=0.49.1,<2.0` dependency floor so downstream services can resolve Starlette security fixes without audit ignores.
+- Raised the `cryptography` lower bound to `>=46.0.7` and relaxed the upper bound to `<49.0` so downstream services can adopt current CVE-fixed releases.
+
 ## [0.6.1] - 2026-06-01
 
 ### Changed

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spaps-server-quickstart
-Version: 0.6.1
+Version: 0.6.2
 Summary: Shared FastAPI/Celery scaffolding for Sweet Potato service backends.
 Project-URL: Homepage, https://api.sweetpotato.dev
 Project-URL: Repository, https://github.com/sweet-potato/spaps
@@ -21,10 +21,10 @@ Requires-Dist: asyncpg<0.31,>=0.30.0
 Requires-Dist: bcrypt<6.0,>=4.0.0
 Requires-Dist: botocore<2.0,>=1.35.0
 Requires-Dist: celery<6.0,>=5.5.3
-Requires-Dist: cryptography<46.0,>=42.0.0
+Requires-Dist: cryptography<49.0,>=46.0.7
 Requires-Dist: email-validator<3.0,>=2.1.0
 Requires-Dist: eth-account<1.0,>=0.13.0
-Requires-Dist: fastapi<0.120,>=0.118.0
+Requires-Dist: fastapi<1.0,>=0.120.0
 Requires-Dist: greenlet<4.0,>=3.0.3
 Requires-Dist: httpx<0.29,>=0.28.1
 Requires-Dist: orjson<4.0,>=3.10.0
@@ -41,6 +41,7 @@ Requires-Dist: slowapi<1.0,>=0.1.9
 Requires-Dist: solders<1.0,>=0.21.0
 Requires-Dist: spaps>=0.1.2
 Requires-Dist: sqlalchemy<3.0,>=2.0.30
+Requires-Dist: starlette<2.0,>=0.49.1
 Requires-Dist: stripe<12.0,>=8.0.0
 Requires-Dist: structlog<26.0,>=25.4.0
 Requires-Dist: uvicorn[standard]<0.38,>=0.37.0
@@ -295,7 +296,7 @@ From the repository root: `make pytest`, `make lint`, `make typecheck`, `make py
 ## Metadata
 
 - `package_name`: `spaps-server-quickstart`
-- `latest_version`: `0.6.1`
+- `latest_version`: `0.6.2`
 - `minimum_runtime`: `Python >=3.12`
 - `api_base_url`: `https://api.sweetpotato.dev`
 

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/README.md

@@ -216,7 +216,7 @@ From the repository root: `make pytest`, `make lint`, `make typecheck`, `make py
 ## Metadata
 
 - `package_name`: `spaps-server-quickstart`
-- `latest_version`: `0.6.1`
+- `latest_version`: `0.6.2`
 - `minimum_runtime`: `Python >=3.12`
 - `api_base_url`: `https://api.sweetpotato.dev`
 

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/docs/UPGRADING.md

@@ -4,6 +4,16 @@ When `spaps-server-quickstart` publishes new releases, dependent services (e.g.
 `consumer_server`, `ingredient_server`) need a predictable upgrade cadence. Follow this
 checklist whenever we cut a release or adopt a newer version downstream.
 
+## 0.6.2
+
+This is a dependency-bound patch release only. It permits FastAPI 0.120+,
+requires Starlette 0.49.1 or newer, and requires `cryptography` 46.0.7 or
+newer without requiring any SPAPS application-code migration.
+
+Downstream services should refresh their dependency lockfile after bumping
+`spaps-server-quickstart` to 0.6.2, then run their normal lint, typecheck, test,
+and security-audit gates.
+
 ## 0.6.1
 
 This is a dependency-bound patch release only. It permits FastAPI 0.119.x

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "spaps-server-quickstart"
-version = "0.6.1"
+version = "0.6.2"
 description = "Shared FastAPI/Celery scaffolding for Sweet Potato service backends."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -23,7 +23,8 @@ classifiers = [
   "Topic :: Internet :: WWW/HTTP",
 ]
 dependencies = [
-  "fastapi>=0.118.0,<0.120",
+  "fastapi>=0.120.0,<1.0",
+  "starlette>=0.49.1,<2.0",
   "uvicorn[standard]>=0.37.0,<0.38",
   "sqlalchemy>=2.0.30,<3.0",
   "asyncpg>=0.30.0,<0.31",
@@ -55,7 +56,7 @@ dependencies = [
   # Phase 3-4: Stripe + Entitlements
   "stripe>=8.0.0,<12.0",
   # Phase 7: PII Encryption (AES-256-GCM + HKDF-SHA256)
-  "cryptography>=42.0.0,<46.0",
+  "cryptography>=46.0.7,<49.0",
 ]
 
 [project.optional-dependencies]

{spaps_server_quickstart-0.6.1 → spaps_server_quickstart-0.6.2}/src/spaps_server_quickstart/__init__.py

@@ -60,7 +60,7 @@ from .sdk import (
     FeatureContext,
 )
 
-__version__ = "0.6.1"
+__version__ = "0.6.2"
 
 __all__ = [
     "create_app",