v0.12.0

[0.12.0] - 2026-07-23

Added

• Asynchronous access token refresh for AsyncClient. Authenticator.async_auth_flow and the new async_refresh_access_token refresh the token without blocking the event loop, guarded by an asyncio.Lock (bound to the running event loop) so that multiple concurrent requests trigger only a single refresh. The synchronous refresh_access_token is likewise guarded by a threading.Lock.

Changed

• API requests now authenticate with the x-amz-access-token header instead of the legacy Authorization: Bearer scheme, matching the current Audible API (see #832). Header construction is centralized in the new audible.utils.build_access_token_header helper. The obsolete client-id: 0 header is no longer sent with bearer auth.

Fixed

• OrjsonProvider now honors the ensure_ascii parameter. Non-ASCII characters were previously left unescaped, so the serialized output depended on which JSON library was installed.

Security

• Raised the minimum versions of the optional cryptography (>=48.0.1), orjson (>=3.11.6) and ujson (>=5.13.0) dependencies to exclude releases with known vulnerabilities.