wlc 2.1.0__tar.gz → 2.2.0__tar.gz

{wlc-2.1.0 → wlc-2.2.0}/CHANGES.rst

@@ -1,3 +1,28 @@
+2.2.0
+-----
+
+* Released on 1st September 2026.
+* Hardened authentication by disabling automatic ``netrc`` credentials,
+  rejecting credentials embedded in URLs, and redacting credentials from HTTP
+  failure logs.
+* Scoped insecure HTTP and TLS exceptions to explicitly trusted origins and
+  prevented project configuration from enabling them.
+* Hardened downloads against symbolic links, non-regular files, and
+  destination replacement races.
+* Escaped control characters in structured CSV fields and improved handling of
+  non-text output values.
+* Added a threat model and clarified configuration discovery and precedence.
+* Updated development dependencies, CI actions, and Docker base images.
+
+2.1.1
+-----
+
+* Released on 25th July 2026.
+* Prevented URL parser differential SSRF in server-provided URLs by validating
+  request origins with the same parser used by the HTTP transport.
+* Improved type annotations.
+* Updated development dependencies, CI actions, and Docker base images.
+
 2.1.0
 -----
 

{wlc-2.1.0 → wlc-2.2.0}/MANIFEST.in

@@ -1,4 +1,5 @@
 include README.md
+include THREAT_MODEL.md
 include SECURITY.md
 include LICENSE
 include wl
@@ -8,3 +9,4 @@ include MANIFEST.in
 include completion/wlc
 graft tests
 prune tests/__pycache__
+global-exclude *.swp

wlc-2.2.0/PKG-INFO

@@ -0,0 +1,84 @@
+Metadata-Version: 2.4
+Name: wlc
+Version: 2.2.0
+Summary: A command-line utility for Weblate, translation tool with tight version control integration
+Author-email: Michal Čihař <michal@weblate.org>
+License-Expression: GPL-3.0-or-later
+Project-URL: Documentation, https://docs.weblate.org/
+Project-URL: Download, https://github.com/WeblateOrg/wlc
+Project-URL: Funding, https://weblate.org/donate/
+Project-URL: Homepage, https://weblate.org/
+Project-URL: Issue Tracker, https://github.com/WeblateOrg/wlc/issues
+Project-URL: Source Code, https://github.com/WeblateOrg/wlc
+Project-URL: Twitter, https://twitter.com/WeblateOrg
+Keywords: i18n,l10n,gettext,git,mercurial,translate
+Platform: any
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Software Development :: Internationalization
+Classifier: Topic :: Software Development :: Localization
+Classifier: Topic :: Utilities
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: argcomplete
+Requires-Dist: python-dateutil
+Requires-Dist: pyxdg
+Requires-Dist: requests>=2.33.0
+Requires-Dist: urllib3>=2.7.0
+Dynamic: license-file
+
+<a href="https://weblate.org/"><img alt="Weblate" src="https://s.weblate.org/cdn/Logo-Darktext-borders.png" height="80px" /></a>
+
+**Weblate is libre software web-based continuous localization system,
+used by over 2500 libre projects and companies in more than 165 countries.**
+
+# wlc
+
+wlc is a [Weblate](https://weblate.org/) command-line client and Python library
+using [Weblate's REST API](https://docs.weblate.org/en/latest/api.html).
+
+[![Website](https://img.shields.io/badge/website-weblate.org-blue.svg)](https://weblate.org/)
+[![Translation status](https://hosted.weblate.org/widgets/weblate/-/svg-badge.svg)](https://hosted.weblate.org/engage/weblate/?utm_source=widget)
+[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/552/badge)](https://bestpractices.coreinfrastructure.org/projects/552)
+[![PyPI package](https://img.shields.io/pypi/v/wlc.svg)](https://pypi.org/project/wlc/)
+[![Documentation](https://readthedocs.org/projects/weblate/badge/)](https://docs.weblate.org/en/latest/wlc.html)
+
+## Installation
+
+Install wlc from PyPI:
+
+```console
+pip install wlc
+```
+
+## Documentation
+
+See the Weblate documentation for complete usage information:
+
+- [Command-line client, configuration, and Docker usage](https://docs.weblate.org/en/latest/wlc.html)
+- [Python API](https://docs.weblate.org/en/latest/python.html)
+
+Container images are published on
+[Docker Hub](https://hub.docker.com/r/weblate/wlc) and the
+[GitHub Container Registry](https://github.com/WeblateOrg/wlc/pkgs/container/wlc).
+
+## Security
+
+The [wlc threat model](https://github.com/WeblateOrg/wlc/blob/main/THREAT_MODEL.md)
+documents the supported trust boundaries and security properties. Report security issues using the
+[Weblate vulnerability reporting process](https://docs.weblate.org/en/latest/security/issues.html).
+
+## Contributing
+
+Contributions are welcome! See the
+[contributor documentation](https://docs.weblate.org/en/latest/contributing/modules.html).

wlc-2.2.0/README.md

@@ -0,0 +1,45 @@
+<a href="https://weblate.org/"><img alt="Weblate" src="https://s.weblate.org/cdn/Logo-Darktext-borders.png" height="80px" /></a>
+
+**Weblate is libre software web-based continuous localization system,
+used by over 2500 libre projects and companies in more than 165 countries.**
+
+# wlc
+
+wlc is a [Weblate](https://weblate.org/) command-line client and Python library
+using [Weblate's REST API](https://docs.weblate.org/en/latest/api.html).
+
+[![Website](https://img.shields.io/badge/website-weblate.org-blue.svg)](https://weblate.org/)
+[![Translation status](https://hosted.weblate.org/widgets/weblate/-/svg-badge.svg)](https://hosted.weblate.org/engage/weblate/?utm_source=widget)
+[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/552/badge)](https://bestpractices.coreinfrastructure.org/projects/552)
+[![PyPI package](https://img.shields.io/pypi/v/wlc.svg)](https://pypi.org/project/wlc/)
+[![Documentation](https://readthedocs.org/projects/weblate/badge/)](https://docs.weblate.org/en/latest/wlc.html)
+
+## Installation
+
+Install wlc from PyPI:
+
+```console
+pip install wlc
+```
+
+## Documentation
+
+See the Weblate documentation for complete usage information:
+
+- [Command-line client, configuration, and Docker usage](https://docs.weblate.org/en/latest/wlc.html)
+- [Python API](https://docs.weblate.org/en/latest/python.html)
+
+Container images are published on
+[Docker Hub](https://hub.docker.com/r/weblate/wlc) and the
+[GitHub Container Registry](https://github.com/WeblateOrg/wlc/pkgs/container/wlc).
+
+## Security
+
+The [wlc threat model](https://github.com/WeblateOrg/wlc/blob/main/THREAT_MODEL.md)
+documents the supported trust boundaries and security properties. Report security issues using the
+[Weblate vulnerability reporting process](https://docs.weblate.org/en/latest/security/issues.html).
+
+## Contributing
+
+Contributions are welcome! See the
+[contributor documentation](https://docs.weblate.org/en/latest/contributing/modules.html).