Skip to content

0.7.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 21 Oct 23:02
· 1 commit to develop since this release
0.7.1
544d533
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release notes for libsbgnpy 0.7.1

This is a security release: the emSign root certificates, whose intermediate keys were compromised, are no longer trusted.

Security

  • libsbgnpy requires certifi>=2026.10.19 (#114, GHSA-6q48-6c7w-9gw2): earlier versions of the CA bundle, with which requests verifies the rendering web service of render_sbgn, trust the emSign roots.
  • The lock of the development environment uses uv 0.13.4 instead of 0.12.21 (#114, GHSA-hq85-5cpj-mr62), whose bundled CA store no longer contains the emSign roots; certifi 2026.10.19 is locked (#113).

Development

  • Continuous integration runs the tests of python 3.14 on linux, macos and windows in parallel with pytest-xdist, the other python versions are tested locally with tox run-parallel; every workflow cancels a superseded run, uv caches the interpreters, and dependabot proposes its updates monthly (#110).
  • The citation information carries the DOI of 0.7.0 (#107).
  • Update development dependencies: ruff 0.16.10, ty 0.0.85, tox 4.64.9, tox-uv 1.36.1, Zensical 0.0.68 and virtualenv 21.7.13 (#105, #108, #109, #111).
Assets 2
Loading