From 7b94e31c89a43cbc5daf159b65f27767538abe10 Mon Sep 17 00:00:00 2001 From: Tomaz Muraus Date: Thu, 30 Jul 2026 12:28:14 +0200 Subject: [PATCH] release: cut 5.6.0 and file the 5.5.2 to 5.5.5 entries under their tags The CHANGELOG's Unreleased section had been accumulating since 5.2.0 while five releases were tagged out of it, so work that shipped weeks ago was still listed as unreleased. Each block now sits under the version whose tag actually carries it, dated from that tag's commit: - 5.5.2 (July 17): cloudsec fleet overview, provider manifests, CSV exports and the inventory provider filter, plus Client.request(raw_response=True) and Client.mint_jwt() (#312) - 5.5.3 (July 20): requests 2.33.0 and the Python 3.10 minimum (#318) - 5.5.4 (July 23): org set-description (#320) - 5.5.5 (July 28): the --brief document-hive listings (#321), which had been filed under 5.2.0 by mistake, and the resolver_ready fix in the chunked resolve merge (#323) - 5.6.0 (this release): the search open-query and limits commands (#327), and the last four cloudsec routes with the findings owner filter (#329) No entry text changes, only regrouping: every non-heading line is byte identical to master. Nothing else in the tree carries a version. setuptools-scm derives the package version from the git tag, so pushing the 5.6.0 tag once this lands is what builds and publishes 5.6.0 to PyPI. Co-Authored-By: Claude Opus 5 --- CHANGELOG.md | 78 +++++++++++++++++++++++++++++++--------------------- 1 file changed, 46 insertions(+), 32 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index a35220e3..9f00d776 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -## Unreleased +## 5.6.0 - July 30, 2026 ### Search @@ -26,16 +26,6 @@ `capabilities.openQueryListing` says whether `search queries` can report searches that are open but idle on this deployment. -### Organization - -- **Set org description (org info)**: `Organization.set_description()` / - `limacharlie org set-description --description ...` update an organization's - description without renaming it (the helper re-submits the current name so - only the description changes). `Organization.rename()` and `limacharlie org - rename` also take an optional `description` to set both at once. The - backend only exposes the description through the rename endpoint, so these - are thin wrappers over `POST /v1/orgs/{oid}/name`. - ### Cloud Security (CNAPP) - **Findings owner filter**: `cloudsec finding list|facets --owner ALICE @@ -87,6 +77,22 @@ so an upgrade prompt can precede the limit. It only describes the limits; the collector and the provider-record validator enforce them. +## 5.5.5 - July 28, 2026 + +### CLI + +- **`--brief` listings for document hives**: `sop list --brief`, `note list + --brief` and `ai-skill list --brief` reduce each record's `data` to the + fields that say what it is (`description`, and for skills also `name` / + `when_to_use`), dropping the body. The hive listing endpoint returns whole + records, so listing these otherwise pulls back every procedure, note, and + SKILL.md — including skills' bundled supporting files. That is costly when + the caller is an agent deciding what applies and paying for the output in + context: `--brief` gives it the index, and `get --key ` fetches the + ones that matter. Default output is unchanged. + +### Cloud Security (CNAPP) + - **Sensor↔cloud resolution keeps the resolver-readiness signal**: `CloudSec.resolve_sensors()` / `resolve_assets()` chunk large batches and merge the responses; the merge dropped `resolver_ready`, so a caller could @@ -95,6 +101,35 @@ (one not-ready chunk makes the whole batch not-ready), and stays absent when the backend never sent it. +## 5.5.4 - July 23, 2026 + +### Organization + +- **Set org description (org info)**: `Organization.set_description()` / + `limacharlie org set-description --description ...` update an organization's + description without renaming it (the helper re-submits the current name so + only the description changes). `Organization.rename()` and `limacharlie org + rename` also take an optional `description` to set both at once. The + backend only exposes the description through the rename endpoint, so these + are thin wrappers over `POST /v1/orgs/{oid}/name`. + +## 5.5.3 - July 20, 2026 + +### Dependencies & Python support + +- **`requests` 2.32.3 -> 2.33.0**: picks up the fix for GHSA-gc5v-m9x4-r6x2 + (insecure temp-file reuse in `extract_zipped_paths()`; vulnerable `<2.33.0`). +- **Minimum Python is now 3.10** (was 3.9). `requests` 2.33.0 requires Python + `>=3.10`, and Python 3.9 reached end-of-life in October 2025. The 3.9 entries + in the CI matrices, Cloud Build, and PyPI classifiers are removed, and the + orjson/pytest version shims that existed only to keep 3.9 working are + simplified (orjson uncapped `>=3.10.0`; pytest pinned to the CVE-fixed 9.0.3 + for all supported versions). + +## 5.5.2 - July 17, 2026 + +### Cloud Security (CNAPP) + - **Multi-org fleet overview**: `limacharlie cloudsec fleet overview` / `CloudSec.get_fleet_overview()` — one posture row per authorized org plus cross-tenant rollups, narrowable with `--oid` (repeatable) and org @@ -118,31 +153,10 @@ request-scoped JWT (multi-org for user credentials when `oid` is omitted) without touching the client's own token, cache, or refresh callback. -### Dependencies & Python support - -- **`requests` 2.32.3 -> 2.33.0**: picks up the fix for GHSA-gc5v-m9x4-r6x2 - (insecure temp-file reuse in `extract_zipped_paths()`; vulnerable `<2.33.0`). -- **Minimum Python is now 3.10** (was 3.9). `requests` 2.33.0 requires Python - `>=3.10`, and Python 3.9 reached end-of-life in October 2025. The 3.9 entries - in the CI matrices, Cloud Build, and PyPI classifiers are removed, and the - orjson/pytest version shims that existed only to keep 3.9 working are - simplified (orjson uncapped `>=3.10.0`; pytest pinned to the CVE-fixed 9.0.3 - for all supported versions). - ## 5.2.0 - March 20, 2026 ### CLI -- **`--brief` listings for document hives**: `sop list --brief`, `note list - --brief` and `ai-skill list --brief` reduce each record's `data` to the - fields that say what it is (`description`, and for skills also `name` / - `when_to_use`), dropping the body. The hive listing endpoint returns whole - records, so listing these otherwise pulls back every procedure, note, and - SKILL.md — including skills' bundled supporting files. That is costly when - the caller is an agent deciding what applies and paying for the output in - context: `--brief` gives it the index, and `get --key ` fetches the - ones that matter. Default output is unchanged. - - **Lazy command loading**: CLI startup is significantly faster. Commands are now loaded on-demand via a static map instead of eagerly importing all 49 modules. `limacharlie.output` import is deferred to the CLI callback.