1.2.1 Release

[liquidsec]

1.2.1 Release

Rolls up the changes accumulated on dev for the 1.2.1 patch release.

Bug fixes

Django signed cookie identify_regex false positives (#427)

The DjangoSignedCookies identify regex matched any two colon-separated alphanumeric segments with no minimum length, producing IdentifyOnly false positives on short values like abc:def, JSESSIONID:abcdef1234, and tokens such as 0000Qs-hTQlwlgXAYBlmgEFoQTR:1ffkg4vkm.

It now anchors to the real django.core.signing structure — optional leading dot, base64url payload, optional 4–8 char base62 timestamp, and a 27+ char base64url HMAC signature:

identify_regex = re.compile(r"^\.?[a-zA-Z0-9_-]+(?::[a-zA-Z0-9_-]{4,8})?:[a-zA-Z0-9_-]{27,}$")

The {27,} minimum covers both legacy SHA-1 (27 char) and default SHA-256 (43 char) signatures, so all real Signer/TimestampSigner/dumps outputs still match while the short false positives are rejected. Adds test_django_identify_false_positives.

CI / release

Publish on patch-level version changes (#428)

The publish job compared only major.minor of the current version against the latest tag, so patch bumps like 1.2.0 → 1.2.1 were treated as "no change" and never built, published, or tagged. It now compares the full version string (matching the fix already in baddns), and the tag step is renamed to "Tag the release if version changed".

Version bump to 1.2.1.

Dependencies

• blasthttp 0.8.0 → 0.9.0 (build(deps): bump blasthttp from 0.8.0 to 0.9.0 #422)
• cryptography 48.0.0 → 48.0.1 (build(deps): bump cryptography from 48.0.0 to 48.0.1 #425)
• pytest (dev) 9.0.3 → 9.1.1 (build(deps-dev): bump pytest from 9.0.3 to 9.1.0 #423, build(deps-dev): bump pytest from 9.1.0 to 9.1.1 #424)

[codecov-commenter]

Codecov Report

❌ Patch coverage is 66.66667% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 99.45%. Comparing base (f14e50d) to head (f5b67ea).
⚠️ Report is 29 commits behind head on main.

Files with missing lines	Patch %	Lines
badsecrets/__version__.py	0.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #426   +/-   ##
=======================================
  Coverage   99.45%   99.45%           
=======================================
  Files          30       30           
  Lines        3102     3102           
=======================================
  Hits         3085     3085           
  Misses         17       17           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.