spaps-server-quickstart 0.6.5__tar.gz → 0.6.6__tar.gz

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/CHANGELOG.md

@@ -12,6 +12,14 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
   through callers that omit `application_id`; unscoped WebSocket ticket
   consumers now only accept tokens stored without an application binding.
 
+## [0.6.6] - 2026-08-19
+
+### Security
+
+- Raised `cryptography` to `>=50.0.0,<51.0` so downstream services receive the
+  fixes for PYSEC-2026-3552, PYSEC-2026-3553, and PYSEC-2026-3554 without
+  audit exceptions.
+
 ## [0.6.5] - 2026-07-13
 
 ### Fixed

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: spaps-server-quickstart
-Version: 0.6.5
+Version: 0.6.6
 Summary: Shared FastAPI/Celery scaffolding for Sweet Potato service backends.
 Project-URL: Homepage, https://api.sweetpotato.dev
 Project-URL: Repository, https://github.com/sweet-potato/spaps
@@ -24,7 +24,7 @@ Requires-Dist: bech32<2.0,>=1.2.0
 Requires-Dist: botocore<2.0,>=1.35.0
 Requires-Dist: celery<6.0,>=5.5.3
 Requires-Dist: coincurve<22.0,>=20.0.0
-Requires-Dist: cryptography<49.0,>=46.0.7
+Requires-Dist: cryptography<51.0,>=50.0.0
 Requires-Dist: email-validator<3.0,>=2.1.0
 Requires-Dist: eth-account<1.0,>=0.13.0
 Requires-Dist: fastapi<0.137,>=0.120.0

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "spaps-server-quickstart"
-version = "0.6.5"
+version = "0.6.6"
 description = "Shared FastAPI/Celery scaffolding for Sweet Potato service backends."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -88,7 +88,7 @@ dependencies = [
   # Phase 3-4: Stripe + Entitlements
   "stripe>=8.0.0,<12.0",
   # Phase 7: PII Encryption (AES-256-GCM + HKDF-SHA256)
-  "cryptography>=46.0.7,<49.0",
+  "cryptography>=50.0.0,<51.0",
 ]
 
 [project.optional-dependencies]

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/src/spaps_server_quickstart/__init__.py

@@ -60,7 +60,7 @@ from .sdk import (
     FeatureContext,
 )
 
-__version__ = "0.6.5"
+__version__ = "0.6.6"
 
 __all__ = [
     "create_app",

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/src/spaps_server_quickstart/testing.py

@@ -74,10 +74,10 @@ try:
         PortWaitStrategy,
     )
 except ImportError:  # pragma: no cover
-    DockerContainer = None  # type: ignore[assignment]
-    CompositeWaitStrategy = None  # type: ignore[assignment]
-    LogMessageWaitStrategy = None  # type: ignore[assignment]
-    PortWaitStrategy = None  # type: ignore[assignment]
+    DockerContainer = None  # type: ignore[assignment,misc]
+    CompositeWaitStrategy = None  # type: ignore[assignment,misc]
+    LogMessageWaitStrategy = None  # type: ignore[assignment,misc]
+    PortWaitStrategy = None  # type: ignore[assignment,misc]
 
 try:
     import docker as docker_lib

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/tests/test_package_metadata.py

@@ -1,7 +1,10 @@
 import importlib
 import pathlib
+import tomllib
 
 import pytest
+from packaging.requirements import Requirement
+from packaging.version import Version
 
 
 def project_root() -> pathlib.Path:
@@ -13,11 +16,6 @@ def test_runtime_version_matches_pyproject() -> None:
     if not pyproject_path.exists():
         pytest.fail("pyproject.toml not found")
 
-    try:
-        import tomllib  # Python 3.11+
-    except ModuleNotFoundError:  # pragma: no cover
-        pytest.skip("tomllib not available")
-
     with pyproject_path.open("rb") as fp:
         pyproject = tomllib.load(fp)
 
@@ -25,3 +23,15 @@ def test_runtime_version_matches_pyproject() -> None:
     module = importlib.import_module("spaps_server_quickstart")
 
     assert module.__version__ == expected_version
+
+
+def test_cryptography_security_release_is_installable() -> None:
+    with (project_root() / "pyproject.toml").open("rb") as fp:
+        pyproject = tomllib.load(fp)
+    requirement = next(
+        Requirement(raw)
+        for raw in pyproject["project"]["dependencies"]
+        if Requirement(raw).name == "cryptography"
+    )
+
+    assert Version("50.0.0") in requirement.specifier

{spaps_server_quickstart-0.6.5 → spaps_server_quickstart-0.6.6}/tests/test_testing_db_resolution.py

@@ -16,7 +16,6 @@ REPO_ROOT = Path(__file__).resolve().parents[3]
 
 
 def _clear_test_db_env(monkeypatch: pytest.MonkeyPatch) -> None:
-    monkeypatch.setattr(t, "_SHARED_POSTGRES_CONTAINER", None)
     for key in (
         t.SHARED_POSTGRES_URL_ENV,
         t.TEST_DATABASE_URL_ENV,
@@ -153,6 +152,10 @@ def test_ensure_shared_container_uses_reachable_dev_compose_before_container(
     monkeypatch: pytest.MonkeyPatch,
 ) -> None:
     _clear_test_db_env(monkeypatch)
+    # The plugin may already own a session container when this test runs as
+    # part of the repository-wide release suite. Isolate that process-global
+    # state before exercising fresh resolution.
+    monkeypatch.setattr(t, "_SHARED_POSTGRES_CONTAINER", None)
     monkeypatch.setattr(
         t,
         "_detect_dev_compose_postgres_url",