Skip to content

4.4.0

Choose a tag to compare

@allenlkq allenlkq released this 23 Jul 05:59
· 1 commit to main since this release
6e8ce0b

Changed

  • Bumped cryptography to >=49.0.0, cachetools to >=6.2.6, and urllib3 to >=2.6.3 to meet the SDOL-005 12-month component-age requirement. cachetools is floored at 6.2.6 (not 7.x) and urllib3 at 2.6.3 (not 2.7.0) to retain Python 3.9 support, as the newer releases require Python >=3.10.

Removed

  • Removed the unused six dependency.
  • Removed the deprecation dependency (upstream abandoned since 2020) and replaced its single decorator usage with an in-repo DeprecationWarning decorator. Public behavior of get_identity_zone() is unchanged. ### Security
  • Added SDOL-005.md documenting the OSS update and maintenance strategy, including a risk assessment for httpx. Downstream SAP consumers may reference this document in their own SDOL-005 evidence.