Skip to content

v1.2.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Mar 00:46
· 5 commits to main since this release
v1.2.2
6b648cf

v1.2.2 (2026-03-10)

This release is published under the MIT License.

Bug Fixes

  • auth: Isolate request state and harden token parsing (d8d82c4)

Detailed Changes: v1.2.1...v1.2.2

Verification

Release commit: 6b648cf8c2952c83aa2d3771050d9a8c125ad5c5

Artifact SHA256 SPDX SBOM Provenance SBOM attestation
fastapi_paseto-1.2.2-py3-none-any.whl 421c3bd820b0707c8364f2a8f1e21936c1c0f559ab9c97726a3746951133456a fastapi_paseto-1.2.2-py3-none-any.whl.spdx.json build provenance SBOM attestation
fastapi_paseto-1.2.2.tar.gz d4932b3ba8458b9aac45aaf5f7c548f08a2f709d973c3c38fcc65e23e0fa4bc5 fastapi_paseto-1.2.2.tar.gz.spdx.json build provenance SBOM attestation

Release assets also include SHA256SUMS, fastapi_paseto-1.2.2-py3-none-any.whl.spdx.json, and fastapi_paseto-1.2.2.tar.gz.spdx.json.

gh release verify "v1.2.2" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.2" "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto"
gh release verify-asset "v1.2.2" "./fastapi_paseto-1.2.2.tar.gz" --repo "Raze-Systems/fastapi-paseto"
gh attestation verify "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml
gh attestation verify "./fastapi_paseto-1.2.2-py3-none-any.whl" --repo "Raze-Systems/fastapi-paseto" --signer-workflow .github/workflows/release.yml --predicate-type https://spdx.dev/Document/v2.3

Install from Git with an immutable ref, not main. Example:

pip install "fastapi-paseto @ git+https://github.com/Raze-Systems/fastapi-paseto.git@v1.2.2"

pip and uv record VCS origin metadata in direct_url.json, but mutable branch installs cannot be strongly verified after the fact. Prefer a signed tag or commit hash and verify the matching release artifacts.

Assets 7
Loading