Skip to content

Fix 1930 - #1931

Merged
oberstet merged 2 commits into
crossbario:masterfrom
oberstet:fix_1930
Jul 15, 2026
Merged

Fix 1930#1931
oberstet merged 2 commits into
crossbario:masterfrom
oberstet:fix_1930

Conversation

@oberstet

Copy link
Copy Markdown
Contributor

fixes #1930

oberstet added 2 commits July 15, 2026 16:28
Finalise the version for the 26.7.1 stable release via `just prep-release`,
which strips the .devN suffix from both version files (pyproject.toml and
src/autobahn/_version.py). autobahn does not track uv.lock, so there is no lock
to refresh.

26.7.1 carries the completed WebSocket/RawSocket payload size-limit security
epic (crossbario#1907, advisory GHSA-hxp9-w8x3-p566): crossbario#1908 (deflate max_message_size cap
truncating instead of rejecting), crossbario#1909 (maxMessagePayloadSize enforced against
the compressed wire length instead of the uncompressed reassembled size - the
advisory itself), crossbario#1910 (backend-agnostic bounded decompression) and crossbario#1911
(asyncio RawSocket receive limit made configurable, at parity with Twisted).
It also ships the musllinux (Alpine / musl libc) CPython wheels from crossbario#1877,
which have been merged but unpublished until now.

Also fix a pre-existing docs nit while here: the "Replace actions/*-artifact@v4"
changelog entry left a bare `*`, which docutils parsed as an emphasis
start-string ("Inline emphasis start-string without end-string"). Quote it as
literal text, matching how the rest of the changelog marks up code. This was the
only such warning in the file; the docs build is now clean of it.

Verified locally: full Twisted suite 357 tests / 325 successes, ruff clean,
sphinx build free of the emphasis warning, and autobahn.__version__ == "26.7.1"
consistent across both version files.

Note: This work was completed with AI assistance (Claude Code).
@oberstet
oberstet merged commit 22055b5 into crossbario:master Jul 15, 2026
48 of 51 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FEATURE] Release Autobahn|Python 26.7.1

1 participant