vpndetection-fastapi 2.0.6__tar.gz → 2.0.8__tar.gz

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 What each release changed for you, newest first. Each line is a commit's summary, linked to its full description and diff. Releases before 2.0.5 are described by their release commits.
 
+## 2.0.8 - 2026-09-29
+
+### Fixes
+
+- Require vpndetection 5.5.2: 26 more reserved ranges are answered locally ([`73b34b6`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/73b34b6ca355cc56fcfcbf159a241ec114541c78))
+
+## 2.0.7 - 2026-09-28
+
+### Fixes
+
+- Require vpndetection 5.5.1: IPv4-mapped visitors are looked up, not waved through ([`976dc44`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/976dc44ca5a65d2a13d6ce1d366a4582de24db89))
+
 ## 2.0.6 - 2026-09-27
 
 ### Features

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vpndetection-fastapi
-Version: 2.0.6
+Version: 2.0.8
 Summary: Official FastAPI and Starlette middleware for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN visitors on every request.
 Project-URL: Homepage, https://vpndetection.io
 Project-URL: Source, https://github.com/vpndetection-io/sdk-python-fastapi
@@ -20,7 +20,7 @@ Classifier: Topic :: Security
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: starlette>=0.37
-Requires-Dist: vpndetection<6,>=5.5.0
+Requires-Dist: vpndetection<6,>=5.5.2
 Provides-Extra: dev
 Requires-Dist: mypy>=1.11; extra == 'dev'
 Requires-Dist: pytest>=8; extra == 'dev'
@@ -124,7 +124,7 @@ Skip what you do not care about:
 skip = lambda request: request.url.path.startswith("/static")
 ```
 
-Beyond a few million distinct visitors a day, stop calling the API per request: [download the dataset](https://vpndetection.io/databases) and look addresses up locally instead.
+Beyond a few million distinct visitors a day, stop calling the API per request: [download the dataset](https://vpndetection.io/#databases) and look addresses up locally instead.
 
 ## Absent is not false
 

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/README.md

@@ -95,7 +95,7 @@ Skip what you do not care about:
 skip = lambda request: request.url.path.startswith("/static")
 ```
 
-Beyond a few million distinct visitors a day, stop calling the API per request: [download the dataset](https://vpndetection.io/databases) and look addresses up locally instead.
+Beyond a few million distinct visitors a day, stop calling the API per request: [download the dataset](https://vpndetection.io/#databases) and look addresses up locally instead.
 
 ## Absent is not false
 

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Security",
     "Typing :: Typed",
 ]
-dependencies = ["vpndetection>=5.5.0,<6", "starlette>=0.37"]
+dependencies = ["vpndetection>=5.5.2,<6", "starlette>=0.37"]
 
 [project.urls]
 Homepage = "https://vpndetection.io"

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/src/vpndetection_fastapi/__init__.py

@@ -39,7 +39,7 @@ __all__ = [
     "xff_ip_selector",
 ]
 
-__version__ = "2.0.6"
+__version__ = "2.0.8"
 
 _SELECTORS: Selectors[Request] = bind_selectors(
     lambda request: RequestView(

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/testdata/bogons.json

@@ -8,53 +8,79 @@
     "172.16.0.0/12",
     "192.0.0.0/24",
     "192.0.2.0/24",
+    "192.88.99.2/32",
     "192.168.0.0/16",
     "198.18.0.0/15",
     "198.51.100.0/24",
     "203.0.113.0/24",
     "224.0.0.0/4",
-    "240.0.0.0/4",
-    "255.255.255.255/32"
+    "255.255.255.255/32",
+    "240.0.0.0/4"
   ],
   "v6": [
     "::/128",
     "::1/128",
     "::ffff:0:0/96",
     "::/96",
+    "64:ff9b::/96",
+    "64:ff9b:1::/48",
     "100::/64",
+    "100:0:0:1::/64",
+    "2001:2::/48",
     "2001:10::/28",
     "2001:db8::/32",
+    "3fff::/20",
+    "5f00::/16",
     "fc00::/7",
     "fe80::/10",
     "fec0::/10",
     "ff00::/8",
     "2002::/24",
     "2002:a00::/24",
+    "2002:6440::/26",
     "2002:7f00::/24",
     "2002:a9fe::/32",
     "2002:ac10::/28",
     "2002:c000::/40",
     "2002:c000:200::/40",
+    "2002:c058:6302::/48",
     "2002:c0a8::/32",
     "2002:c612::/31",
     "2002:c633:6400::/40",
     "2002:cb00:7100::/40",
     "2002:e000::/20",
-    "2002:f000::/20",
     "2002:ffff:ffff::/48",
+    "2002:f000::/20",
     "2001::/40",
     "2001:0:a00::/40",
+    "2001:0:6440::/42",
     "2001:0:7f00::/40",
     "2001:0:a9fe::/48",
     "2001:0:ac10::/44",
     "2001:0:c000::/56",
     "2001:0:c000:200::/56",
+    "2001:0:c058:6302::/64",
     "2001:0:c0a8::/48",
     "2001:0:c612::/47",
     "2001:0:c633:6400::/56",
     "2001:0:cb00:7100::/56",
     "2001:0:e000::/36",
+    "2001:0:ffff:ffff::/64",
     "2001:0:f000::/36",
-    "2001:0:ffff:ffff::/64"
+    "2001:1::/32",
+    "2001:2::/31",
+    "2001:4::/30",
+    "2001:8::/29",
+    "2001:20::/27",
+    "2001:40::/26",
+    "2001:80::/25",
+    "2001:100::/24",
+    "::/3",
+    "4000::/3",
+    "6000::/3",
+    "8000::/3",
+    "a000::/3",
+    "c000::/3",
+    "e000::/3"
   ]
 }

{vpndetection_fastapi-2.0.6 → vpndetection_fastapi-2.0.8}/testdata/testdata.json

@@ -137,8 +137,18 @@
     },
     {
       "ip": "fe00::",
+      "expect": true,
+      "why": "past fc00::/7 but inside e000::/3, outside global unicast"
+    },
+    {
+      "ip": "3fff:fff:ffff:ffff:ffff:ffff:ffff:ffff",
+      "expect": true,
+      "why": "last address inside 3fff::/20; pins the /20 mask width"
+    },
+    {
+      "ip": "3fff:1000::",
       "expect": false,
-      "why": "first address past fc00::/7; a mask one bit too wide claims it"
+      "why": "first address past 3fff::/20; a mask one bit too wide claims it"
     },
     {
       "ip": "2001:db8:ffff:ffff:ffff:ffff:ffff:ffff",
@@ -177,8 +187,18 @@
     },
     {
       "ip": "100:0:0:1::",
+      "expect": true,
+      "why": "past 100::/64 but inside 100:0:0:1::/64 and ::/3"
+    },
+    {
+      "ip": "2001:1ff:ffff:ffff:ffff:ffff:ffff:ffff",
+      "expect": true,
+      "why": "last address inside 2001::/23; pins the /23 mask width"
+    },
+    {
+      "ip": "2001:200::",
       "expect": false,
-      "why": "first address past 100::/64; a mask one bit too wide claims it"
+      "why": "first address past 2001::/23; a mask one bit too wide claims it"
     },
     {
       "ip": "10.255.255.255",
@@ -231,6 +251,50 @@
       "why": "first address past 192.0.2.0/24; a mask one bit too wide claims it"
     }
   ],
+  "ipv4Mapped": [
+    {
+      "ip": "::ffff:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "a public IPv4 visitor, as a server listening on :: sees every one: judged, sent and cached as 8.8.8.8, never as a bogon in ::ffff:0:0/96"
+    },
+    {
+      "ip": "::ffff:10.0.0.1",
+      "carries": "10.0.0.1",
+      "expect": true,
+      "why": "RFC 1918, mapped: a bogon for the same reason 10.0.0.1 is"
+    },
+    {
+      "ip": "::ffff:127.0.0.1",
+      "carries": "127.0.0.1",
+      "expect": true,
+      "why": "loopback, mapped: a local client of a server listening on ::"
+    },
+    {
+      "ip": "::ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address with its IPv4 half in hex"
+    },
+    {
+      "ip": "0:0:0:0:0:ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address written in full"
+    },
+    {
+      "ip": "::FFFF:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "upper-case hex digits"
+    },
+    {
+      "ip": "::8.8.8.8",
+      "carries": "::8.8.8.8",
+      "expect": true,
+      "why": "IPv4-compatible, not mapped: stays IPv6 and inside ::/96"
+    }
+  ],
   "bogonResponse": {
     "why": "A bogon is answered locally in the full max shape. Every flag is present and false, every detail object is present and empty, and is_bogon marks it as computed rather than served.",
     "flagsFalse": [
@@ -6601,54 +6665,80 @@
       "172.16.0.0/12",
       "192.0.0.0/24",
       "192.0.2.0/24",
+      "192.88.99.2/32",
       "192.168.0.0/16",
       "198.18.0.0/15",
       "198.51.100.0/24",
       "203.0.113.0/24",
       "224.0.0.0/4",
-      "240.0.0.0/4",
-      "255.255.255.255/32"
+      "255.255.255.255/32",
+      "240.0.0.0/4"
     ],
     "v6": [
       "::/128",
       "::1/128",
       "::ffff:0:0/96",
       "::/96",
+      "64:ff9b::/96",
+      "64:ff9b:1::/48",
       "100::/64",
+      "100:0:0:1::/64",
+      "2001:2::/48",
       "2001:10::/28",
       "2001:db8::/32",
+      "3fff::/20",
+      "5f00::/16",
       "fc00::/7",
       "fe80::/10",
       "fec0::/10",
       "ff00::/8",
       "2002::/24",
       "2002:a00::/24",
+      "2002:6440::/26",
       "2002:7f00::/24",
       "2002:a9fe::/32",
       "2002:ac10::/28",
       "2002:c000::/40",
       "2002:c000:200::/40",
+      "2002:c058:6302::/48",
       "2002:c0a8::/32",
       "2002:c612::/31",
       "2002:c633:6400::/40",
       "2002:cb00:7100::/40",
       "2002:e000::/20",
-      "2002:f000::/20",
       "2002:ffff:ffff::/48",
+      "2002:f000::/20",
       "2001::/40",
       "2001:0:a00::/40",
+      "2001:0:6440::/42",
       "2001:0:7f00::/40",
       "2001:0:a9fe::/48",
       "2001:0:ac10::/44",
       "2001:0:c000::/56",
       "2001:0:c000:200::/56",
+      "2001:0:c058:6302::/64",
       "2001:0:c0a8::/48",
       "2001:0:c612::/47",
       "2001:0:c633:6400::/56",
       "2001:0:cb00:7100::/56",
       "2001:0:e000::/36",
+      "2001:0:ffff:ffff::/64",
       "2001:0:f000::/36",
-      "2001:0:ffff:ffff::/64"
+      "2001:1::/32",
+      "2001:2::/31",
+      "2001:4::/30",
+      "2001:8::/29",
+      "2001:20::/27",
+      "2001:40::/26",
+      "2001:80::/25",
+      "2001:100::/24",
+      "::/3",
+      "4000::/3",
+      "6000::/3",
+      "8000::/3",
+      "a000::/3",
+      "c000::/3",
+      "e000::/3"
     ]
   }
 }