2.1.0

python-pam 2.1.0 — Poetry packaging, thread-safe authenticate, and refreshed tooling.

Features & changes

• Switch to Poetry; drop Python 2 support
• Make PAM handle checks more robust
• Update documentation with a better example
• CI tox suite covers Python 3.11–3.14
• pam.authenticate() no longer reuses a process-global PamAuthenticator (thread-safe concurrent auth); libpam ctypes bindings are loaded once and shared (#40)
• Document the threading model (do not share one PamAuthenticator across threads)
• Document when to use resetcreds=True vs False (#52)

Tooling

• Bump pip to 26.2.1 (CVE-2026-13346 / GHSA-qwm4-qh6w-59xr)
• Refresh tox, pylint, mypy, pytest-env, and pip-tools pins