v0.1.2

Built from 3c99640c161839243df166ac22883269f72791fc by run 34810448566, never from a working tree.
Provenance is attested; verify with:

gh attestation verify <file> --repo ferinazumaDEV/politeclient

SHA-256

ef8da49eee3a557eb972355a89a7b48d6105be71303b4c9cb2e34144fafa3c8b  politeclient-0.1.2-py3-none-any.whl
ea14dcf4283918e7499a5ab04e69c10e0639a3e84f0dad0e11f81edd751365d9  politeclient-0.1.2.tar.gz

sbom.cyclonedx.json describes the package and its runtime dependencies as installed from this wheel.

How this release was assembled. The tag and this release were created by hand before the workflow ran, so the run's own "GitHub Release" step failed with "a release with the same tag name already exists" after PyPI had already accepted the upload. Per RELEASING.md the run was not repeated; the assets above are the run's dist artefact — the same bytes PyPI holds — and were attached on 2026-09-14 after checking SHA256SUMS, the attestations, the PyPI digests and the Integrity API provenance by hand.

Changelog

Deprecated

• Python below 3.11 is compatibility, not support. The floor becomes 3.11 in 0.2.0 (3.10 reaches
  end of life in October 2026). Nothing changes within 0.1.x; CI keeps running on every version the
  package still declares.

Fixed

• RetryPolicy.backoff_for no longer raises OverflowError past attempt ~1024. 2 ** attempt
  is an exact int in Python and stops fitting a float there, so a client configured with a large
  max_retries crashed on the attempt it should simply have slept max_backoff for. It now does.
• parse_retry_after follows the delay-seconds grammar of RFC 9110 (ASCII digits only).
  int() also accepted +5, -5 and digits from other scripts (٣, １２); those now return
  None, so the computed backoff applies instead. A value with more digits than a float can hold
  raised OverflowError; it now means "never", which compute_delay clamps to max_backoff.
• TokenBucket.acquire rejects zero, negative and NaN token counts with ValueError. A negative
  amount refilled the bucket past its capacity (acquire(-10) on a bucket of 2 left 12 tokens: a
  limiter you could bypass), zero was a silent no-op, and NaN never returned because it compares
  false with everything.
• TokenBucket.acquire no longer spins when the refill lands a few ULPs short of the request.
  With a deterministic clock (what the clock/sleep parameters exist for) the sub-ULP sleep was
  absorbed and the loop never advanced; with the real clock it busy-waited until the monotonic clock
  ticked. A deficit within floating-point noise now counts as satisfied.
• RateLimit, TokenBucket and RetryPolicy reject non-finite configuration at construction.
  rate=inf overflowed in capacity, rate=nan slipped past rate <= 0 and blew up in math.ceil,
  burst=inf built a bucket that never limits, and max_backoff=nan would have slept NaN. Rate-limit
  cases raise RateLimitConfigError; retry-policy cases raise ValueError.

All five were found by tests/test_adversarial.py, a new suite that states the invariants a caller
relies on (a bounded, finite backoff; a bucket whose tokens only go down when acquired; the RFC
grammar) and feeds the code the inputs a real client meets at the edges. Every test in it failed
against the previous code before the fix was written.

Archived at Software Heritage

Resolved on 2026-09-14 against the archive, after a Save Code Now visit that followed this tag.

• Directory (the tree this release is): swh:1:dir:80cf731c5327beb320c0131487fafd89dedb7dc2
• Revision (the commit 3c99640c1618): swh:1:rev:3c99640c161839243df166ac22883269f72791fc
• Snapshot of the visit: swh:1:snp:85751834094dc7920eab8a206c5af8e78749969e
• Resolve: https://archive.softwareheritage.org/swh:1:dir:80cf731c5327beb320c0131487fafd89dedb7dc2;origin=https://github.com/ferinazumaDEV/politeclient;visit=swh:1:snp:85751834094dc7920eab8a206c5af8e78749969e;anchor=swh:1:rev:3c99640c161839243df166ac22883269f72791fc

v0.1.1

See CHANGELOG.md for what changed.

Built from bd24b269f1045034de0911a7bdb99d7f86fffe05 by this run, never from a working tree.
Provenance is attested; verify with:

gh attestation verify <file> --repo ferinazumaDEV/politeclient

SHA-256

08eb7f2c4b507a45b730b8b0a7678381c3a5090fca3fd965ce50635e01db3a49  politeclient-0.1.1-py3-none-any.whl
795ffb5c7a251d3a06dc51d0f3342ad4f029cb1d6e10e3f79c155a214cc0ebbe  politeclient-0.1.1.tar.gz

sbom.cyclonedx.json describes the package and its runtime dependencies as installed from this wheel.

Archived at Software Heritage

Resolved on 2026-09-14 against the archive, after a Save Code Now visit that followed this tag.

• Directory (the tree this release is): swh:1:dir:16cf85ea744fb01935904cfc124be6043c9682fd
• Revision (the commit bd24b269f104): swh:1:rev:bd24b269f1045034de0911a7bdb99d7f86fffe05
• Snapshot of the visit: swh:1:snp:da911a9be74433e94c4aca36837ae866b204e68d
• Resolve: https://archive.softwareheritage.org/swh:1:dir:16cf85ea744fb01935904cfc124be6043c9682fd;origin=https://github.com/ferinazumaDEV/politeclient;visit=swh:1:snp:da911a9be74433e94c4aca36837ae866b204e68d;anchor=swh:1:rev:bd24b269f1045034de0911a7bdb99d7f86fffe05

politeclient v0.1.0

First tagged release, and the first published to PyPI: pip install politeclient.

It ships the state of main after the verified audit of 2026-09-04 — every fix in it was reproduced before being applied and its verification command recorded in the pull request.

See the repository README for what this does and its limits.