Skip to content

Emboss v1.0.0

Choose a tag to compare

@vouchagent vouchagent released this 29 Jul 23:26
· 34 commits to main since this release

The first stable release. Development Status is now 5 - Production/Stable,
and the public API (emboss.__all__) is covered by semantic versioning.

Added

  • Mermaid parser: parse_mermaid (and a ```mermaid Markdown fence) maps flowchart/graph, sequenceDiagram, and erDiagram source onto Emboss's existing diagram builders, so Mermaid-authored documentation renders as native vector graphics. An unsupported kind raises MermaidError naming it, rather than rendering wrong.
  • Include-from-source: include_source(path, lines=, marker=) pulls a code block's content from a source file by line range or a named region, so documented examples cannot drift from the code. A fenced block with file=PATH loads through it in Markdown.
  • emboss build: concatenates a directory of Markdown files, in order, into one tagged PDF -- the build-step workflow a documentation team already has.
  • Controlled-document block: DocumentControl/Approval/RevisionEntry for ISO 9001 / IEC 62304 / medical-device documentation -- a document identifier, version, status, an approvals table, and a revision history, expanding into real, fully tagged tables.

Security

  • pip-audit against the full dependency set found two transitive vulnerabilities Emboss never imports directly: pillow (via pikepdf) and starlette (via mcp), neither pinned to an upper bound by the package declaring them. Known-patched floors (pillow>=12.3.0, starlette>=1.3.1) are now pinned in Emboss's own optional-dependencies. Re-scan: no known vulnerabilities across base + every extra.

Full suite: 2025 passed, 5 skipped, verified against the patched dependency set. ruff clean. veraPDF conformance green.