Skip to content

Typedframes

v0.2.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Affected surfaces

deps

Summary

AI summary

Fixed CI failures, updated Rust toolchain and benchmark runner, and upgraded dependencies.

Full changelog

What's Changed

  • fix(rust): collapse match guard to fix clippy::collapsible_match CI failure by @w-martin in https://github.com/w-martin/typedframes/pull/21
  • fix(ci): exit with error if pip install retries exhausted in test-published by @w-martin in https://github.com/w-martin/typedframes/pull/24
  • fix(benchmark): run typedframes checker against actual corpus by @w-martin in https://github.com/w-martin/typedframes/pull/19
  • chore(packaging): add [project.urls] table to pyproject.toml by @w-martin in https://github.com/w-martin/typedframes/pull/13
  • chore(ci): migrate coverage reporting from Codecov to Coveralls by @w-martin in https://github.com/w-martin/typedframes/pull/29
  • chore(packaging): add PyPI classifiers, keywords, and author email by @w-martin in https://github.com/w-martin/typedframes/pull/14
  • Bump the uv group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/w-martin/typedframes/pull/32
  • chore(ci): add Python 3.15-dev to test-published matrix by @w-martin in https://github.com/w-martin/typedframes/pull/26
  • Bump the cargo group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/w-martin/typedframes/pull/30
  • chore(ci): add cargo-audit and pip-audit security scanning by @w-martin in https://github.com/w-martin/typedframes/pull/25
  • Bump pyo3 from 0.24.1 to 0.29.0 in /rust in the cargo group across 1 directory by @dependabot[bot] in https://github.com/w-martin/typedframes/pull/33
  • fix(security): bump pygments to 2.20.0 and sync uv.lock for pip-audit by @w-martin in https://github.com/w-martin/typedframes/pull/34
  • chore(ci): add weekly scheduled CI run against main by @w-martin in https://github.com/w-martin/typedframes/pull/23
  • docs: add dataframely and patito to comparison table by @w-martin in https://github.com/w-martin/typedframes/pull/15
  • chore(deps): loosen optional dependency lower bounds by @w-martin in https://github.com/w-martin/typedframes/pull/16
  • chore: update pre-commit hook versions by @w-martin in https://github.com/w-martin/typedframes/pull/17
  • fix(benchmark): correct pyright and ruff cache clearing paths by @w-martin in https://github.com/w-martin/typedframes/pull/18
  • chore(rust): pin Rust toolchain to 1.95.0 via rust-toolchain.toml by @w-martin in https://github.com/w-martin/typedframes/pull/22
  • Bump msgpack from 1.2.0 to 1.2.1 in the uv group across 1 directory by @dependabot[bot] in https://github.com/w-martin/typedframes/pull/35
  • docs: add comparison examples and correct README table by @w-martin in https://github.com/w-martin/typedframes/pull/36

New Contributors

  • @w-martin made their first contribution in https://github.com/w-martin/typedframes/pull/21
  • @dependabot[bot] made their first contribution in https://github.com/w-martin/typedframes/pull/32

Full Changelog: https://github.com/w-martin/typedframes/compare/v0.2.1...v0.2.2

Security Fixes

  • Bump pygments to 2.20.0 and sync uv.lock for pip-audit (fix(security))

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Typedframes

Get notified when new releases ship.

Sign up free

About Typedframes

All releases →

Related context

Beta — feedback welcome: [email protected]