vpndetection-fastapi 2.0.6__tar.gz → 2.0.7__tar.gz

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.7}/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 What each release changed for you, newest first. Each line is a commit's summary, linked to its full description and diff. Releases before 2.0.5 are described by their release commits.
 
+## 2.0.7 - 2026-09-28
+
+### Fixes
+
+- Require vpndetection 5.5.1: IPv4-mapped visitors are looked up, not waved through ([`976dc44`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/976dc44ca5a65d2a13d6ce1d366a4582de24db89))
+
 ## 2.0.6 - 2026-09-27
 
 ### Features

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vpndetection-fastapi
-Version: 2.0.6
+Version: 2.0.7
 Summary: Official FastAPI and Starlette middleware for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN visitors on every request.
 Project-URL: Homepage, https://vpndetection.io
 Project-URL: Source, https://github.com/vpndetection-io/sdk-python-fastapi
@@ -20,7 +20,7 @@ Classifier: Topic :: Security
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: starlette>=0.37
-Requires-Dist: vpndetection<6,>=5.5.0
+Requires-Dist: vpndetection<6,>=5.5.1
 Provides-Extra: dev
 Requires-Dist: mypy>=1.11; extra == 'dev'
 Requires-Dist: pytest>=8; extra == 'dev'

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.7}/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Security",
     "Typing :: Typed",
 ]
-dependencies = ["vpndetection>=5.5.0,<6", "starlette>=0.37"]
+dependencies = ["vpndetection>=5.5.1,<6", "starlette>=0.37"]
 
 [project.urls]
 Homepage = "https://vpndetection.io"

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.7}/src/vpndetection_fastapi/__init__.py

@@ -39,7 +39,7 @@ __all__ = [
     "xff_ip_selector",
 ]
 
-__version__ = "2.0.6"
+__version__ = "2.0.7"
 
 _SELECTORS: Selectors[Request] = bind_selectors(
     lambda request: RequestView(

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.7}/testdata/testdata.json

@@ -231,6 +231,50 @@
       "why": "first address past 192.0.2.0/24; a mask one bit too wide claims it"
     }
   ],
+  "ipv4Mapped": [
+    {
+      "ip": "::ffff:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "a public IPv4 visitor, as a server listening on :: sees every one: judged, sent and cached as 8.8.8.8, never as a bogon in ::ffff:0:0/96"
+    },
+    {
+      "ip": "::ffff:10.0.0.1",
+      "carries": "10.0.0.1",
+      "expect": true,
+      "why": "RFC 1918, mapped: a bogon for the same reason 10.0.0.1 is"
+    },
+    {
+      "ip": "::ffff:127.0.0.1",
+      "carries": "127.0.0.1",
+      "expect": true,
+      "why": "loopback, mapped: a local client of a server listening on ::"
+    },
+    {
+      "ip": "::ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address with its IPv4 half in hex"
+    },
+    {
+      "ip": "0:0:0:0:0:ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address written in full"
+    },
+    {
+      "ip": "::FFFF:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "upper-case hex digits"
+    },
+    {
+      "ip": "::8.8.8.8",
+      "carries": "::8.8.8.8",
+      "expect": true,
+      "why": "IPv4-compatible, not mapped: stays IPv6 and inside ::/96"
+    }
+  ],
   "bogonResponse": {
     "why": "A bogon is answered locally in the full max shape. Every flag is present and false, every detail object is present and empty, and is_bogon marks it as computed rather than served.",
     "flagsFalse": [