Repository navigation
Release notes for libsbgnpy 0.7.2
This is a maintenance release: the dependencies are updated, the package itself is unchanged.
Security
- The lock of the development environment uses filelock 4.2.1 instead of 3.32.5 (GHSA-v4x8-3wr5-3wq8, GHSA-9vhv-jxww-xfm5) and virtualenv 21.15.1 instead of 21.7.13 (fixed in 21.14.9, e.g. GHSA-394h-qwmc-48pf, GHSA-6w3r-xr62-4xcp, GHSA-c978-59m8-c77v, GHSA-vxj4-q4g9-crj7) (#118). Both are tools of the development environment and do not reach an installation of libsbgnpy.
Development
- The lock uses certifi 2026.10.23 and xsdata 26.10, with which the generated bindings are unchanged (#120).
- Update development dependencies: ruff 0.17.3, ty 0.0.95, tox 4.67.4, tox-uv 1.37.2, pre-commit 4.7.0, pytest 9.2.0, Zensical 0.0.73, mkdocstrings-python 2.0.10 and bump-my-version 1.6.7 (#120); the pre-commit hooks run the locked ruff and ty (#122).
- ty ignores the nested
Metaclasses of the generated bindings, which ty 0.0.94 reports as invalid overrides ofSbgnbase.Meta(#121). - The workflows use astral-sh/setup-uv 10.3.3 and pypa/gh-action-pypi-publish 1.14.3 (#119).
- The citation information carries the DOI of 0.7.1 (#117).