PyNext 0.1.1

PyNext 0.1.1 consolidates PR #17 and includes PR #18's review fixes.

Use only for small websites and controlled pilots. Public production suitability has not been established; further specification and improvement are planned.

• Header-stage HTTP admission, shared HTTP/WebSocket decision capacity, and explicit no-refund behavior.
• Static CORS parity, navigation race fixes, scheme/port-aware CSRF validation, and cooperative synchronous-handler cancellation with retained capacity.
• Non-root, read-only Docker deployment; Python/native/image SBOMs and dependency/image vulnerability checks.
• Public API stubs and py.typed, verified from installed wheels with mypy and pyright.
• Repeated production-build benchmark: 84,000 requests, zero HTTP errors; same-host regression evidence with tail latency and limitations preserved.
• Pillow 13.0.0 and PyO3 0.29.3 security updates.

Validation: 45/45 remote checks, Python 3.13 and 3.14 each 812 passed, 1 skipped, Rust checks, both browser server modes, eight verified wheels and one sdist. The release commit acffbbf25e5e885454ee89e2aee7e407cf806ecc has exactly the tested b98ccb2 tree.

pip install pynext-framework==0.1.1

Release notes · Implementation scope and limits · Production roadmap · PyPI

Assets include SHA256 checksums, Python and native CycloneDX SBOMs, the image SPDX SBOM, audit reports and the raw repeated benchmark. Python/native inventories include development/tool dependencies; the image inventory describes the runtime. Image audit gating covers fixable High/Critical findings. The native SBOM was generated with Syft 1.57.0 from this release's complete Cargo.lock; Python/image reports came from the passing PR workflow.

Prepared by Codex; publishing uses the connected maintainer account and registered PyPI token. Existing historical tags remain intact.