Skip to content

Releases: Raze-Systems/fastapi-paseto

Release list

v1.3.1

v1.3.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Mar 20:38
v1.3.1
481534d

v1.3.1 (2026-03-10)

This release is published under the MIT License.

Bug Fixes

  • docs: Document secure paseto key management (1f4c50b)

Detailed Changes: v1.3.0...v1.3.1

Verification

Release commit: 481534d5d30fbc1f992bd7230f6280dc96b40ceb

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.3.1-py3-none-any.whl a6a955e8f8fbb915e9740a0983815c27d19d921706baa043a6702abba1f5d19b fastapi_paseto-1.3.1-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.3.1.tar.gz d8c95d22927da5f3bc072c76c58cdef78ea93fb67aee67a001d475e43235710e fastapi_paseto-1.3.1.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.3.1-py3-none-any.whl.spdx.json, and fastapi_paseto-1.3.1.tar.gz.spdx.json.

gh release verify "v1.3.1" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.3.1" "./fastapi_paseto-1.3.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.3.1" "./fastapi_paseto-1.3.1.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.3.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.3.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not main. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.3.1"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Assets 7
Loading

v1.3.0

v1.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Mar 02:04
v1.3.0
b95ffa9

v1.3.0 (2026-03-10)

This release is published under the MIT License.

Documentation

  • docs: Align documentation with current implementation (d5a0705)

Features

  • auth: Align paseto support with footer and assertion features (3d3cf84)

Detailed Changes: v1.2.2...v1.3.0

Verification

Release commit: b95ffa971cbc6f13a6c3eef51341e81fb197d2c0

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.3.0-py3-none-any.whl 6f988b2b7e2d9be38775b81740b1835f50de337f7c9d415884e649881d096732 fastapi_paseto-1.3.0-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.3.0.tar.gz 17397cdf51155dd18a018563603f4f51a0db03227595a5847ca01238c50aba94 fastapi_paseto-1.3.0.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.3.0-py3-none-any.whl.spdx.json, and fastapi_paseto-1.3.0.tar.gz.spdx.json.

gh release verify "v1.3.0" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.3.0" "./fastapi_paseto-1.3.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.3.0" "./fastapi_paseto-1.3.0.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.3.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.3.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not main. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.3.0"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Loading

v1.2.2

v1.2.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Mar 00:46
v1.2.2
6b648cf

v1.2.2 (2026-03-10)

This release is published under the MIT License.

Bug Fixes

  • auth: Isolate request state and harden token parsing (d8d82c4)

Detailed Changes: v1.2.1...v1.2.2

Verification

Release commit: 6b648cf8c2952c83aa2d3771050d9a8c125ad5c5

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.2.2-py3-none-any.whl 421c3bd820b0707c8364f2a8f1e21936c1c0f559ab9c97726a3746951133456a fastapi_paseto-1.2.2-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.2.2.tar.gz d4932b3ba8458b9aac45aaf5f7c548f08a2f709d973c3c38fcc65e23e0fa4bc5 fastapi_paseto-1.2.2.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.2.2-py3-none-any.whl.spdx.json, and fastapi_paseto-1.2.2.tar.gz.spdx.json.

gh release verify "v1.2.2" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.2" "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.2" "./fastapi_paseto-1.2.2.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not main. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.2.2"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Loading

v1.2.1

v1.2.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 23:52
v1.2.1
1c6ba4d

v1.2.1 (2026-03-09)

This release is published under the MIT License.

Bug Fixes

  • repo: Update branch references to main (8de8ec6)

Detailed Changes: v1.2.0...v1.2.1

Verification

Release commit: 1c6ba4d24b003326cd85b523eb5acff82024b793

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.2.1-py3-none-any.whl 5dfc6402a69144301e089b256d3cb1d8e2a95bda4dede4dd81b1ad15fa36c2f9 fastapi_paseto-1.2.1-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.2.1.tar.gz d1659158d02bcafdf84a368038be2beedbfcf8962bf1d50287a2a7dfeb98c8bc fastapi_paseto-1.2.1.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.2.1-py3-none-any.whl.spdx.json, and fastapi_paseto-1.2.1.tar.gz.spdx.json.

gh release verify "v1.2.1" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.1" "./fastapi_paseto-1.2.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.1" "./fastapi_paseto-1.2.1.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.2.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.2.1-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not main. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.2.1"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Loading

v1.2.0

v1.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 22:28
v1.2.0
d3be42e

v1.2.0 (2026-03-09)

This release is published under the MIT License.

Features

  • websocket: Add websocket authorization support (3e9103d)

Refactoring

  • auth: Modularize paseto internals (db6e5d5)

Detailed Changes: v1.1.0...v1.2.0

Verification

Release commit: 61c31ee611c6dfd07209b08e2f312ae35c6dff77

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.1.0-py3-none-any.whl 2d55991827ed17c20e6ae082d6f529e0941204218c25fb35f59e5f117e322692 fastapi_paseto-1.1.0-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.1.0.tar.gz 62798240f98e4b54e4166ec0648abb78465a7fee7ff9de7202becb9dc29597c6 fastapi_paseto-1.1.0.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.1.0-py3-none-any.whl.spdx.json, and fastapi_paseto-1.1.0.tar.gz.spdx.json.

gh release verify "v1.2.0" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.0" "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.0" "./fastapi_paseto-1.1.0.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not master. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.2.0"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Loading

v1.1.0

v1.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 21:29
v1.1.0
1900c55

v1.1.0 (2026-03-09)

This release is published under the MIT License.

Features

  • ci: Add release sbom and provenance (48651a2)

Detailed Changes: v1.0.3...v1.1.0

Verification

Release commit: 1900c5552b6e3ff2bfee6ab9fd6e5026f8ff4b80

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.1.0-py3-none-any.whl 35bf203367b9604cb849d8bfc7d2a3ce91c0f618705b92c5dec5e006f76336bc fastapi_paseto-1.1.0-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.1.0.tar.gz 40b70ae2cb30af40650f2c77ff3681d8f6c394e18c2b18537286d6ed6c426eb9 fastapi_paseto-1.1.0.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.1.0-py3-none-any.whl.spdx.json, and fastapi_paseto-1.1.0.tar.gz.spdx.json.

gh release verify "v1.1.0" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.1.0" "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.1.0" "./fastapi_paseto-1.1.0.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.1.0-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not master. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.1.0"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Loading

v1.0.3

v1.0.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 21:04
v1.0.3
1f8e47f

v1.0.3 (2026-03-09)

This release is published under the MIT License.

Bug Fixes

  • ci: Publish Python distributions as (ddac7dd)

Detailed Changes: v1.0.2...v1.0.3

Loading

v1.0.2

v1.0.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 20:37
v1.0.2
c7d08a2

v1.0.2 (2026-03-09)

This release is published under the MIT License.

Bug Fixes

  • ci: Use default uv sync in release workflow (a479187)

Detailed Changes: v1.0.1...v1.0.2

Loading

v1.0.1

v1.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 20:31
v1.0.1
860ba4f

v1.0.1 (2026-03-09)

This release is published under the MIT License.

Bug Fixes

  • ci: Keep lockfile in sync (fede11a)

  • ci: Remove unsupported semantic-release flag (2eb31e8)

  • ci: Use frozen sync after release version bump (ff1c48d)

Detailed Changes: v1.0.0...v1.0.1

Loading

v1.0.0

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Mar 20:11
v1.0.0
a6fc65d

v1.0.0 (2026-03-09)

This release is published under the MIT License.

Bug Fixes

  • ci: Build package outside semantic- (01dcd39)

Detailed Changes: v0.6.0...v1.0.0

Loading