Skip to content

Pytincture 1.0.0rc13

Pre-release
Pre-release

Choose a tag to compare

View all tags
@schapman1974 schapman1974 released this 07 Oct 13:17
· 38 commits to main since this release
v1.0.0rc13
0cae8c7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

RC13 includes Microsoft organization sign-in, isolated session cookie names, Windows and editable-package fixes, and dependency/acceptance updates.

  • Add opt-in Microsoft sign-in across organizations using a platform-owned
    registration. Keep explicit-tenant login as the default, validate tenant
    and signing-key issuers, and preserve application admission rules (#382).
  • Update Swagger UI and its locked asset integrity, the CodeMirror browser
    acceptance fixture, the conformance multidict dependency, and setup-uv
    (#373, #360, #380, #366).
  • Support contained application-file opens on Windows, editable widget package
    discovery, and loopback development email login without the password extra
    (#377, #379, #378).
  • Add cookie_namespace / AUTH_COOKIE_NAMESPACE (default pytincture) so
    services sharing a host can use distinct session, CSRF, and SAML handshake
    cookie names (#375). Browsers scope cookies by host, not port, so two
    services on one host previously signed each other out. HTTPS names keep the
    __Host- prefix; the browser runtime and generated BFF clients accept
    __Host-<namespace>-csrf and <namespace>-dev-csrf instead of the two fixed
    names. Default cookie names are unchanged.

Validation: all 24 signed-tag checks and all 25 release CI/attestation checks passed, including Python 3.13/3.14, Chromium/Firefox/WebKit, clean optional-extra installs, release artifact validation, security scans, SAML, production topology, and full application/runtime parity.

CI: https://github.com/pytincture/pytincture/actions/runs/37627280842

Published on PyPI. Public wheel and source-package hashes match the attested artifacts, and a fresh Python 3.13 public-index installation passed the release smoke check. The exact packages and SHA256SUMS.json are attached.

This is a release candidate. Microsoft organization sign-in is opt-in and requires a platform-owned multi-tenant app registration; customer IT approval may still be required.

Assets 6
Loading