Skip to content

v2.7.0 — Enterprise Hardening

Choose a tag to compare

View all tags
@shanewas shanewas released this 18 Jul 11:11
· 12 commits to master since this release
Immutable release. Only release title and notes can be modified.
v2.7.0
06c1e84

Auditability, supply-chain, and business-facing hardening from a full enterprise audit. No breaking changes; no runtime behavior change on existing flows.

Added

  • Acceptable Use Policy (ACCEPTABLE_USE.md) + README Legal & Acceptable Use section — authorized-use scope, prohibited uses (ToS/robots/CFAA/GDPR-CCPA), operator responsibility. Procurement-ready for an anti-bot tool.
  • Compliance docs: docs/INCIDENT_RESPONSE.md, docs/KEY_MANAGEMENT.md, docs/DATA_HANDLING.md.
  • Navigation metrics: safe_goto now emits requests_success/requests_failed + record_error("navigation", …), so MetricsCollector.success_rate reflects real traffic (was permanently 100%).

Changed / Security

  • Dependency lower bounds pinned to CVE-safe floors (aiohttp>=3.10.11, cryptography>=43.0.1, jinja2>=3.1.5, …); no upper caps, existing installs unaffected.
  • twine check --strict gate added to the publish workflow before upload.
  • SECURITY.md supported-versions corrected (0.8.x → 2.7.x); README claims hedged to a point-in-time canary snapshot.
  • 5 live-Chromium attach tests marked @pytest.mark.e2e so the default CI run stays deterministic.

Full detail in CHANGELOG.md. CI green on master before release.

Assets 3
Loading