GrantTrace v2.4.1

GrantTrace v2.4.1

GrantTrace v2.4.1 improves the installed-package demo experience and strengthens project quality gates while preserving the existing authorization detection and write-safety semantics.

Highlights

• Add granttrace demo for a one-command installed-package demonstration.
• Package fictional OpenAPI, configuration and mock data with the distribution.
• Run the demo only on a dynamic 127.0.0.1 loopback server.
• Add --output-dir and --read-only controls.
• Resolve the previous 20 mypy errors across six files.
• Make mypy a blocking CI quality gate.
• Enforce a minimum 80% test coverage threshold.
• Add weekly Dependabot checks for Python dependencies and GitHub Actions.

Safety

• Default auditing remains read-only.
• The built-in demo accepts no external target or user credentials.
• Existing BOLA / IDOR and Mass Assignment detection semantics are unchanged.
• Existing allowlist, independent GET readback, snapshot, restoration and rollback verification remain in place.
• OAuth / mTLS automation, POST / PUT active testing, GraphQL, gRPC and SARIF are not included in this release.

Verification

Release source commit:

8ba6cb46c9bbd670449989a5bd54fb233543d81f

• Python 3.9 / 3.12 / 3.14 passed
• 304 tests passed
• Mypy: 0 errors
• Ruff: passed
• Runtime dependency audit: passed
• CodeQL: passed
• Coverage: 80.83%–80.85%
• Read-only demo: 0 PATCH
• Active demo: rollback_verified=true
• Full mock database restoration verified
• Wheel and sdist passed twine check --strict

Install

After PyPI publication:

pip install granttrace
granttrace demo