Skip to content

v0.1.1

Choose a tag to compare

@joaovitoriasilva joaovitoriasilva released this 21 Aug 21:40
· 6 commits to main since this release

Security

  • The reverse-geocoding backend no longer logs the coordinates it was asked to resolve. A latitude/longitude pair is a location fix belonging to the host's user, and a library does not get to decide that belongs in someone's log. The debug line still names the upstream service, which is what it was useful for. Only the geocoding extra reached this, and only at DEBUG.

Changed

  • Development lockfile only: cryptography moved to 50.0.0 for CVE-2026-69247. It is reached through the hatch toolchain and is not a dependency of JASIL or any of its extras, so no installed copy of 0.1.0 ever contained it.