Supersedes 6.0.4

What's Changed

• Add MyPy Typing and modernize options parsing by @corydolphin in #409 (this broke strict type checking when using Blueprints)
• Restore Blueprint support in CORS type signatures (#410) by @corydolphin in #411

Full Changelog: 6.0.3...6.0.5

What's Changed

• Add MyPy Typing by @corydolphin in #409

Full Changelog: 6.0.3...6.0.4

What's Changed

• Derive package version from git tag via setuptools-scm by @corydolphin in #405
• Improve CI/CD security with least privilege and build separation by @corydolphin in #406

Full Changelog: 6.0.2...6.0.3

What's Changed

• Derive package version from git tag via setuptools-scm by @corydolphin in #405
• Improve CI/CD security with least privilege and build separation by @corydolphin in #406

Full Changelog: 6.0.2...6.0.3

What's Changed

• Update license pyproject.toml by @wagenrace in #395

New Contributors

• @wagenrace made their first contribution in #395

Full Changelog: 6.0.1...6.0.2

What's Changed

• Fix regex sorting issue from #391 by @joshuamorton in #392
• Fix README file extension in pyproject.toml by @lafrech in #386

New Contributors

• @joshuamorton made their first contribution in #392
• @lafrech made their first contribution in #386

Full Changelog: 6.0.0...6.0.1.dev

What's Changed

• Invert regex sorting to make it correctly match the intent (sorting by specificity descending) #391 by @joshuamorton in #392
• Fix README file extension in pyproject.toml by @lafrech in #386

New Contributors

• @joshuamorton made their first contribution in #392
• @lafrech made their first contribution in #386

Full Changelog: 6.0.0...6.0.1

Breaking

Path specificity ordering has changed to improve specificity. This may break users who expected the previous incorrect ordering.

• [CVE-2024-6839] Sort Paths by Regex Specificity by @adrianosela in #391
• [CVE-2024-6844] Replace use of (urllib) unquote_plus with unquote by @adrianosela in #389

What's Changed

• [CVE-2024-6866] Case Sensitive Request Path Matching by @adrianosela in #390

Full Changelog: 5.0.1...6.0.0

What's Changed

This primarily changes packaging to use uv and a new release pipeline, along with some small documentation improvements

• [Docs] Fix links to documentation by @coren-frankel in #369
• Fix minor typos by @kkirsche in #371
• Migrate packaging and environment management to use uv by @corydolphin in #377
• Fix release pipeline by @corydolphin in #378
• Always use trusted publishing by @corydolphin in #379
• Workaround license publishing issue by @corydolphin in #380
• Fix packaging: missing source files by @corydolphin in #381

New Contributors

• @coren-frankel made their first contribution in #369
• @kkirsche made their first contribution in #371

Full Changelog: 5.0.0...5.0.01

What's Changed

• Breaking: Change default to disable private network access by @corydolphin in #368
  This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71

Full Changelog: 4.0.2...5.0.0