What's Changed

• Fix regex sorting issue from #391 by @joshuamorton in #392
• Fix README file extension in pyproject.toml by @lafrech in #386

New Contributors

• @joshuamorton made their first contribution in #392
• @lafrech made their first contribution in #386

Full Changelog: 6.0.0...6.0.1.dev

What's Changed

• Invert regex sorting to make it correctly match the intent (sorting by specificity descending) #391 by @joshuamorton in #392
• Fix README file extension in pyproject.toml by @lafrech in #386

New Contributors

• @joshuamorton made their first contribution in #392
• @lafrech made their first contribution in #386

Full Changelog: 6.0.0...6.0.1

Breaking

Path specificity ordering has changed to improve specificity. This may break users who expected the previous incorrect ordering.

• [CVE-2024-6839] Sort Paths by Regex Specificity by @adrianosela in #391
• [CVE-2024-6844] Replace use of (urllib) unquote_plus with unquote by @adrianosela in #389

What's Changed

• [CVE-2024-6866] Case Sensitive Request Path Matching by @adrianosela in #390

Full Changelog: 5.0.1...6.0.0

What's Changed

This primarily changes packaging to use uv and a new release pipeline, along with some small documentation improvements

• [Docs] Fix links to documentation by @coren-frankel in #369
• Fix minor typos by @kkirsche in #371
• Migrate packaging and environment management to use uv by @corydolphin in #377
• Fix release pipeline by @corydolphin in #378
• Always use trusted publishing by @corydolphin in #379
• Workaround license publishing issue by @corydolphin in #380
• Fix packaging: missing source files by @corydolphin in #381

New Contributors

• @coren-frankel made their first contribution in #369
• @kkirsche made their first contribution in #371

Full Changelog: 5.0.0...5.0.01

What's Changed

• Breaking: Change default to disable private network access by @corydolphin in #368
  This effectively resolves GHSA-hxwh-jpp2-84pm https://osv.dev/vulnerability/PYSEC-2024-71

Full Changelog: 4.0.2...5.0.0

What's Changed

• Bump requests from 2.31.0 to 2.32.0 in /docs by @dependabot in #358
• Backwards Compatible Fix for CVE-2024-6221 by @adrianosela in #363
• Add unit tests for Private-Network by @corydolphin in #367

New Contributors

• @dependabot made their first contribution in #358
• @adrianosela made their first contribution in #363

Full Changelog: 4.0.1...4.0.2

What's Changed

• Fix Read the Docs builds by @kurtmckee in #345
• Update extension.py to clean request.path before logging it by @aneshujevic in #351
• Update CI to include Python 3.12 and flask 3.0.3 by @corydolphin in #354
• Release 4.0.1 by @corydolphin in #353

New Contributors

• @kurtmckee made their first contribution in #345
• @aneshujevic made their first contribution in #351

Full Changelog: 4.0.0...4.0.1

What's Changed

• Remove support for Python versions older than 3.8 by @WAKayser in #330
• Add GHA tooling by @corydolphin in #331

New Contributors

• @WAKayser made their first contribution in #330

Full Changelog: 3.1.01...v4.0.0

What's Changed

• Include examples to specify that schema and port must be included in … by @YPCrumble in #294
• two small changes to the documentation, based on issue #290 by @bbbart in #291
• Fix typo by @sunarch in #304
• FIX: typo in CSRF by @sattamjh in #315
• Test against recent Python versions by @pylipp in #314
• Correct spelling mistakes by @EdwardBetts in #311
• 'Access-Control-Allow-Private-Network = true' header for http response by @chelo-kjml in #318
• docs: Fix a few typos by @timgates42 in #323
• [Docs] Fix typo in configuration documentation by @sachit-shroff in #316
• Release Version 3.1.01 by @corydolphin in #329

New Contributors

• @YPCrumble made their first contribution in #294
• @sunarch made their first contribution in #304
• @sattamjh made their first contribution in #315
• @pylipp made their first contribution in #314
• @EdwardBetts made their first contribution in #311
• @chelo-kjml made their first contribution in #318
• @sachit-shroff made their first contribution in #316

Full Changelog: 3.0.10...3.1.01

• Adds support for PPC64 and ARM64 builds for distribution. Thanks @sreekanth370
• Fixes warnings for invalid escape sequences Thanks @tirkarthi