Changes

Unreleased

Version 1.9.3

Released 2026-05-15

  • Relax cryptography upper bound to <52. #681

  • Update dependencies.

    • Bump cryptography to 48.0.0. #674

  • Update dev dependencies.

    • Bump requests to 2.34.0. #680

    • Bump coverage to 7.14.0. #678

    • Bump idna to 3.14. #677

    • Bump urllib3 to 2.7.0. #675

    • Bump virtualenv to 21.3.2. #673

    • Bump wcwidth to 0.7.0. #672

    • Bump virtualenv to 21.3.0. #670

  • Update GitHub Actions.

    • Bump github/codeql-action to 4.35.4. #676

    • Bump github/codeql-action to 4.35.3. #671

Version 1.9.2

Released 2026-04-29

  • Refactor registered claims helpers. #642

  • Add dict[str, Any] type to footer argument in encode wrapper. #611

  • Update changelog references from commit hashes to pull request numbers. #566

  • Update dependencies.

    • Bump cryptography to 47.0.0. #665

  • Update dev dependencies.

    • Bump ruff to 0.15.12. #666

    • Bump pre-commit to 4.6.0. #661

    • Bump pytest to 9.0.3. #645

    • Bump pytest-cov to 7.1.0. #622

    • Bump pip-licenses to 5.5.5. #637

    • Bump sphinx-rtd-theme to 3.1.0. #578

Version 1.9.1

Released 2025-12-29

  • Refactor CI/CD workflows.

    • Split CD workflow into build and deploy jobs. #562

    • Simplify requirements.txt generation and remove unnecessary steps. #561

    • Pin actions/download-artifact to v7.0.0. #563

    • Grant required permissions for zizmor code scanning. #558

    • Add push trigger to security workflow. #549

    • Remove paths filter from workflow. #552

  • Security improvements.

    • Introduce zizmor-action for workflow security. #551

    • Introduce pip-license. #551

    • Add requirements.txt for snyk integration. #554

  • Documentation improvements.

    • Add security section to README. #555

    • Fix snyk badge link URL. #557

    • Fix GitHub CI badge markdown syntax. #556

  • Taskfile improvements.

    • Simplify uv:dev task by using uv sync directly. #564

    • Use correct uv export format for requirements.txt. #559

    • Refine Taskfile.yml. #550

Version 1.9.0

Released 2025-12-24

  • Migrate from poetry to uv. #522

  • Drop support for Python 3.9. #520

  • Add support for Python 3.14. #533

  • Replace black/flake8/isort with ruff. #523

  • Remove tox. #525

  • Split security scans into separate workflow. #544

  • Introduce trivy for security scanning. #532

  • Introduce pip-audit for dependency scanning. #543

  • Integrate mypy setting to pyproject.toml. #534

  • Enhance mypy setting. #540

  • Add detect-private-key to pre-commit hooks. #547

  • Introduce Bandit/S rules for ruff. #538

  • Introduce actionlint for workflow linting. #537

  • Introduce pypa/gh-action-pypi-publish. #526

  • Introduce zizmor for workflow security. #524

  • Introduce aikido-safe-chain to CI. #546

  • Introduce cooldown. #527

  • Add pre-commit to dependabot. #542

  • Introduce –no-build option. #545

  • Remove redundant checking tools. #531

  • Fix workflow security alert. #528

  • Fix readthedocs config to use uv. #535

  • Update dependencies.

    • Bump cryptography to 46.0.3. #514

    • Bump urllib3 to 2.6.0. #517

  • Update dev dependencies.

    • Bump ruff-pre-commit to v0.14.10. #541

    • Bump pytest-cov to 7.0.0. #503

Version 1.8.5

Released 2025-09-17

  • Update dependencies.

    • Bump cryptography to 46.0.2. #506

    • Bump argon2-cffi to 25.1.0. #473

  • Update dev dependencies.

    • Bump pytest-cov to 7.0.0. #503

    • Bump blacken-docs to 1.20.0. #502

    • Bump tox to 4.30.2. #500

    • Bump pytest to 8.4.2. #499

    • Bump pre-commit-hooks to 6.0.0. #494

    • Bump pre-commit to 4.3.0. #493

    • Bump freezegun to 1.5.5. #492

    • Bump mirrors-mypy to 1.15.0. #485

    • Bump urllib3 to 2.5.0. #480

    • Bump requests to 2.32.4. #475

    • Bump zipp to 3.22.0. #474

Version 1.8.4

Released 2025-05-20

  • Refine pyproject.toml to use poetry group. #455

  • Update dependencies.

    • Bump pycryptodomex to 3.23.0. #468

    • Bump cryptography to 45.0.2. #467

  • Update dev dependencies.

    • Bump tox to 4.26.0. #465

    • Bump pytest-cov to 6.1.1. #463

    • Bump flake8 to 7.2.0. #461

    • Bump pre-commit to 4.2.0. #458

    • Bump jinja2 to 3.1.6. #456

    • Bump isort to 6.0.1. #451

Version 1.8.3

Released 2025-03-02

  • Update dependencies.

    • Bump cryptography to 44.0.2. #448

  • Update dev dependencies.

    • Bump certifi to 2025.01.31. #448

    • Bump flake8 to 7.1.2. #447

    • Bump black to 25.1.0. #445

    • Bump isort to 6.0.0. #445

    • Bump mirrors-mypy to 1.15.0. #445

    • Bump tox to 4.24.1. #444

    • Bump pre-commit to 4.1.0. #443

Version 1.8.2

Released 2025-01-11

  • Fix readthedoc deploy error. #440

  • Update dev dependencies.

    • Bump mirrors-mypy to 1.14.1. #441

    • Bump certifi to 2024.12.14. #439

    • Bump jinja2 to 3.1.5. #439

    • Bump urllib3 to 2.3.0. #439

    • Bump zipp to 3.21.0. #439

    • Bump pytest to 8.3.4. #437

Version 1.8.1

Released 2024-11-29

  • Update dependencies.

    • Bump cryptography to 44.0.0. #433

Version 1.8.0

Released 2024-11-16

  • Add Support Python 3.13. #430

  • Drop Support for Python 3.8. #426

  • Fix link on README. #407

  • Rename CI/CD files. #404

  • Fix error on populating codecov token. #402

  • Update dependencies.

    • Bump cryptography to 43.0.3. #423

    • Bump pycryptodomex to 3.21.0. #416

  • Update dev dependencies.

    • Bump sphinx-rtd-theme to 3.0.2. #429

    • Bump pytest-cov to 6.0.0. #428

    • Bump blacken-docs to 1.19.1. #427

    • Bump mirrors-mypy to 1.13.0. #427

    • Bump idna to 3.10. #426

    • Bump urllib3 to 2.2.3. #426

    • Bump certifi to 2024.8.30. #426

    • Bump requests to 2.32.3. #426

    • Bump zipp to 3.20.2. #426

    • Bump tox to 4.23.2. #425

    • Bump black to 24.4.2. #419

    • Bump flake8 to 7.1.0. #419

    • Bump pre-commit-hooks to 5.0.0. #419

    • Bump pytest to 8.3.3. #412

Version 1.7.9

Released 2024-08-03

  • Add Python 3.12 to CI. #361

  • Update dependencies.

    • Bump cryptography to 43.0.0. #397

  • Update dev dependencies.

    • Bump codecov/codecov-action to v4. #398

    • Bump setuptools to 70.0.0. #396

    • Bump zipp to 3.19.1. #395

    • Bump certifi to 2024.7.4. #394

    • Bump tox to 4.16.0. #393

    • Bump blacken-docs to 1.18.0. #392

    • Bump pre-commit/mirrors-mypy to 1.11.0. #392

    • Bump pytest to 8.2.2. #390

    • Bump urllib3 to 2.2.2. #389

    • Bump requests to 2.32.0. #387

    • Bump freezegun to 1.5.1. #386

    • Bump jinja2 to 3.1.4. #385

    • Bump idna to 3.7. #382

    • Bump sphinx-autodoc-typehints to 2.0.1. #381

    • Bump pre-commit/black to 24.4.2. #380

    • Bump pre-commit/flake8 to 7.1.0. #380

    • Bump pre-commit/mirrors-mypy to 1.10.0. #380

    • Bump pre-commit/pre-commit-hooks to 4.6.0. #380

    • Bump pytest-cov to 5.0.0. #379

Version 1.7.8

Released 2024-01-27

  • Update dependencies.

    • Bump cryptography to 42.0.1. #358

    • Bump jinja2 to 3.1.3. #354

    • Bump pycryptodomex to 3.20.0. #353

  • Update dev dependencies.

    • Bump sphinx-autodoc-typehints to 1.25.3. #342

    • Bump tox to 4.12.1. #356

    • Bump pytest to 7.4.4. #352

    • Bump pre-commit/black to 23.12.1. #350

    • Bump pre-commit/mirrors-mypy to 1.8.0. #350

    • Bump pre-commit/flake8 to 7.0.0. #350

    • Bump freezegun to 1.4.0. #349

    • Bump pre-commit/isort to 5.13.2. #348

    • Bump sphinx-rtd-theme to 2.0.0. #341

Version 1.7.7

Released 2023-11-25

  • Add py312 to tox.ini. #337

  • Fix .readthedocs.yml. #336

Version 1.7.6

Released 2023-11-22

  • Loosen the range of pyca/cryptography version. #334

  • Bump actions/checkout to v4. #333

  • Bump actions/setup-python to v4. #333

  • Update dependencies.

    • Bump cryptography to 41.0.5. #326

    • Bump urllib3 to 2.0.7. #323

  • Update dev dependencies.

    • Bump pre-commit/black to 23.11.0. #331

    • Bump pre-commit/mirrors-mypy to 1.7.0. #331

    • Bump sphinx-autodoc-typehints to 1.25.2. #330

    • Bump pytest to 7.4.3. #325

    • Bump pre-commit to 3.5.0. #321

    • Bump pre-commit/pre-commit-hooks to 4.5.0. #320

Version 1.7.5

Released 2023-10-08

  • Replace passlib with argon2-cffi. #315

  • Update dependencies.

    • Bump iso8601 to 2.1.0. #317

    • Bump urllib3 to 2.0.6. #316

    • Bump cryptography to 41.0.4. #313

    • Bump pycryptodomex to 3.19.0. #312

  • Update dev dependencies.

    • Bump pre-commit/black to 23.9.1. #290

Version 1.7.4

Released 2023-09-09

  • Update dependencies.

    • Bump cryptography to 41.0.3. #293

  • Update dev dependencies.

    • Bump tox to 4.11.2. #309

    • Bump pytest to 7.4.2. #308

    • Bump pre-commit to 3.4.0. #306

    • Bump sphinx-autodoc-typehints to 1.24.0. #303

    • Bump sphinx to 7.1.2. #302

    • Bump certifi to 2023.7.22. #301

    • Bump sphinx-rtd-theme to 1.3.0. #299

    • Bump pre-commit/black-docs to 1.16.0. #298

    • Bump pre-commit/mirrors-mypy to 1.5.1. #298

    • Bump pre-commit/flake8 to 6.1.0. #292

    • Bump pre-commit/black to 23.7.0. #290

Version 1.7.3

Released 2023-07-03

  • Drop support for Python 3.7. #285

  • Update dependencies.

    • Bump cryptography to 41.0.1. #286

    • Bump iso8601 to 2.0.0. #277

    • Bump pycryptodomex to 3.18.0. #268

  • Update dev dependencies.

    • Bump pre-commit/mirrors-mypy to 1.4.1. #282

    • Bump pytest to 7.4.0. #281

    • Bump tox to 4.6.3. #280

    • Bump pre-commit/black-docs to 1.14.0. #279

    • Bump sphinx-rtd-theme to 1.2.2. #276

    • Bump pytest-cov to 4.1.0. #272

Version 1.7.2

Released 2023-04-23

  • Update SECURITY.md. #245

  • Add SECURITY.md. #244

  • Fix CHANGES. #233

  • Update dependencies.

    • Bump cryptography to 40.0.2. #262

  • Update dev dependencies.

    • Bump pytest to 7.3.1. #263

    • Bump tox to 4.4.12. #261

    • Bump pre-commit/mirrors-mypy to 1.2.0. #260

    • Bump pre-commit/black to 23.3.0. #256

    • Bump sphinx-rtd-theme to 1.2.0. #243

    • Bump pre-commit/black to 23.1.0. #240

    • Bump pre-commit/isort to 5.12.0. #237

Version 1.7.1

Released 2023-01-21

  • Use allowlist_externals on tox. #208

  • Update dependencies.

    • Bump cryptography to 39.0.0. #212

  • Update dev dependencies.

    • Bump tox to 4.3.5. #230

    • Bump pre-commit/black-docs to 1.13.0. #227

    • Bump pre-commit/isort to 5.11.4. #227

    • Bump sphinx-autodoc-typehints to 1.21.0. #226

    • Bump pytest to 7.2.1. #225

    • Bump pre-commit to 2.20.0. #200

Version 1.7.0

Released 2022-12-17

  • Drop support for Python 3.6. #196

  • Add CI for Python 11. #191

  • Fix typo on PASETO usage document. #183

  • Update dependencies.

    • Bump pycryptodomex to 3.16.0. #195

    • Bump cryptography to 38.0.4. #195

  • Update dev dependencies.

    • Bump pytest to 7.2.0. #195

    • Bump pre-commit/isort to 5.11.1. #193

    • Bump pre-commit/black to 22.12.0. #193

    • Bump pre-commit/pre-commit-hooks to 4.4.0. #190

    • Bump pre-commit/flake8 to 6.0.0. #190

    • Bump pre-commit/mirrors-mypy to 0.991. #187

    • Bump tox to 3.27.1. #185

    • Bump sphinx-rtd-theme to 1.1.1. #184

Version 1.6.12

Released 2022-11-03

  • Update dependencies.

    • Bump cryptography to 38.0.3. #180

  • Update dev dependencies.

    • Bump sphinx-rtd-theme to 1.1.0. #179

    • Bump tox to 3.27.0. #178

    • Bump sphinx to 5.3.0. #177

    • Bump pre-commit/mirrors-mypy to 0.982. #176

    • Bump pre-commit/black to 22.10.0. #176

Version 1.6.11

Released 2022-10-08

  • Update dependencies.

    • Bump iso8601 to 1.1.0. #171

    • Bump cryptography to 38.0.1. #167

  • Update dev dependencies.

    • Bump pre-commit/mirrors-mypy to 0.981. #174

    • Bump sphinx to 5.2.3. #173

    • Bump pytest-cov to 4.0.0. #172

    • Bump tox to 3.26.0. #168

    • Bump pre-commit/black to 22.8.0. #166

    • Bump freezegun to 1.2.2. #165

Version 1.6.10

Released 2022-08-10

  • Update dependencies.

    • Bump cryptography to 37.0.4. #157

    • Bump pycryptodomex to 3.15.0. #153

  • Update dev dependencies.

    • Bump pre-commit/flake8 to 5.0.4. #162

    • Bump sphinx to 5.1.1. #160

    • Bump pre-commit/mirrors-mypy to 0.971. #159

    • Bump pre-commit/black to 22.6.0. #156

    • Bump tox to 3.25.1. #155

  • Drop support for Python3.6. #154

Version 1.6.9

Released 2022-06-18

  • Update dependencies.

    • Bump cryptography to 37.0.2. #146

  • Update dev dependencies.

    • Bump sphinx to 5.0.2. #151

    • Bump pre-commit/mirrors-mypy to 0.961. #150

    • Bump pre-commit/pre-commit-hooks to 4.3.0. #150

Version 1.6.8

Released 2022-05-01

  • Compare MACs in constant time. #143

  • Refine pyproject to add tool.poetry.extras. #138

  • Update dependencies.

    • Bump cryptography to 37.0.1. #142

  • Update dev dependencies.

    • Bump pre-commit/pre-commit-hooks from 4.1.0 to 4.2.0. #140

    • Bump tox from 3.24.5 to 3.25.0. #139

Version 1.6.7

Released 2022-04-03

  • Update dependencies.

    • Bump cryptography from 36.0.1 to 36.0.2. #132

  • Update dependencies.

    • Bump sphinx from 4.4.0 to 4.5.0. #135

    • Bump freezegun from 1.1.0 to 1.2.1. #133

    • Bump pre-commit/mirrors-mypy from 0.931 to 0.940. #131

Version 1.6.6

Released 2022-03-01

  • Fix bug on to_peer_paserk_id for v1/2 local key. #128

  • Add support for to_peer_paserk_id on v1/v3. #128

Version 1.6.5

Released 2022-01-20

  • Avoid re-encoding/decoding output from serializer. #118

Version 1.6.4

Released 2022-01-14

  • Fix bug on deserializing payload in local paseto. #114

Version 1.6.3

Released 2022-01-03

  • Add optional flag to docs dependencies. #109

  • Remove tool.poetry.extra from pyproject.toml. #109

  • Add pre-commit hooks for checking json, toml and yaml files. #108

Version 1.6.2

Released 2022-01-02

  • Introduce freezegun for test. #106

  • Add 2022 to copyright and license. #105

  • Add license information to PyPI. #104

Version 1.6.1

Released 2021-12-31

  • Refine github actions. #99

  • Use pytest-cov instead of coverage. #98

  • Refine pyproject.toml. #97

  • Refine tox.ini. #96

  • Update pytest requirement form ^5.2 to ^6.2. #91

Version 1.6.0

Released 2021-12-11

  • Migrate to poetry. #89

  • Update max line length to 128. #89

Version 1.5.0

Released 2021-11-24

  • Add support for aud verification. #86

  • Add to_peer_paserk_id to KeyInterface. #85

Version 1.4.0

Released 2021-11-22

  • Add is_secret to KeyInterface. #82

  • Disclose KeyInterface class. #81

  • Disclose Token class. #80

Version 1.3.0

Released 2021-11-20

  • Add support for nbf validation. #76

  • Add support for dict typed footer. #75

  • Add leeway for exp validation. #74

  • Add Paseto class. #72

  • Add support for exp claim. #71

Version 1.2.0

Released 2021-11-14

  • Refine README (Add CONTRIBUTING, etc.). #68

  • Introduce serializer/deserializer for payload. #67

  • Sync official test vectors. #64

Version 1.1.0

Released 2021-10-16

  • Add support for Python 3.10. #60

  • Add support for k2.seal and k4.seal. #57

  • Add py.typed. #56

Version 1.0.0

Released 2021-09-25

  • [Breaking Change] Remove str support for version. #53

  • [Breaking Change] Rename type of Key.new to purpose. #52

  • Add support for PASERK password-based key wrapping. #47

  • Add support for PASERK key wrapping. #46

Version 0.7.1

Released 2021-09-18

  • Make PASERK secret for Ed25519 compliant with PASERK spec. #44

Version 0.7.0

Released 2021-09-16

  • Add from_paserk to Key. #41

  • Add support for paserk lid. #40

  • Add support for paserk local. #40

  • Add to_paserk_id to KeyInterface. #39

  • Add to_paserk to KeyInterface. #38

  • Fix public key compression for v3.

Version 0.6.1

Released 2021-09-12

  • Add usage examples and related tests. #36

Version 0.6.0

Released 2021-09-11

  • Add tests for sample code. #34

  • Allow int type version for Key.new. #33

Version 0.5.0

Released 2021-09-11

  • Add API reference about Token. #30

  • Add support for multiple keys on decode. #29

Version 0.4.0

Released 2021-09-10

  • Add tests for public and fix error message. #26

  • Add tests for local and fix error message. #25

  • Add tests for Token. #24

  • Add tests for Key and fix checking argument. #22

  • Add docstrings for KeyInterface. #21

Version 0.3.2

Released 2021-09-07

  • Add API reference. #17

Version 0.3.1

Released 2021-09-06

  • Fix readthedocs build error. #13

Version 0.3.0

Released 2021-09-06

  • Add docs. #10

  • Add Key.from_asymmetric_key_params. #8

  • Make NotSupportedError public. #8

Version 0.2.0

Released 2021-09-05

  • Add Token object as a response of decode(). #6

Version 0.1.0

Released 2021-09-05

  • First public preview release.