Skip to content

chore(release): 0.6.1 - #39

Merged
jqnatividad merged 2 commits into
mainfrom
release/0.6.1
Oct 27, 2026
Merged

jqnatividad merged 2 commits into
mainfrom
release/0.6.1

Conversation

@jqnatividad

@jqnatividad jqnatividad commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

Release 0.6.1, to accompany qsv 27.0.1, which replaces the withdrawn qsv 27.0.0 as the first qsv whose Data Schematics connect to qsv-clientd.

Changes

  • Version 0.6.1 in pyproject.toml, __version__ and uv.lock.
  • CHANGELOG: [0.6.1] - 2026-10-27 with a short intro, fix(daemon): keep qsv get downloads private with qsv 26.x; name qsv 27.0.1 #38 links on its entries, and updated compare links.
  • docs/DAEMON.md: serving a schematic over http (add its origin to browser_origins, expect the "not a local file" warning), and Chrome not asking for local network permission for a page served from 127.0.0.1 (seen while recording the qsv 27.0.1 release GIF).

What the release contains (all from #38):

  • Security: with qsv 26.x or older that has get, qsv get uses an owner-only cache of qsv-clientd's own.
  • Security: downloads through qsv get (viz <URL>, register --download) are never readable by others while qsv writes them. qsv 27.0.1 writes --output with the umask (fix(get): --output files follow the umask, not the cache's 0600 qsv#4945).
  • Changed: docs and the older-qsv message name qsv 27.0.1. The version checks stay at 27.0.0, so dev builds reporting it still count as new enough.

Before publishing

  • Publishing the GitHub release 0.6.1 triggers the PyPI upload (publish.yml checks the tag matches the version).
  • The README and the older-qsv message point users at qsv 27.0.1, so publish after qsv 27.0.1 is released, and adjust the CHANGELOG date if it slips.

Testing

  • Full suite: 773 passed, 2 skipped (Windows-only) against a qsv 27.0.1 build that includes fix(get): --output files follow the umask, not the cache's 0600 qsv#4945.
  • Manual qsv-clientd viz <URL> with that build at umask 022: downloaded through qsv get, the data came out 0600 and no temporary directory was left behind.
  • ruff, mypy, mypy --platform win32 clean; uv build produces the 0.6.1 wheel and sdist.

🤖 Generated with Claude Code

Bump to 0.6.1 for qsv 27.0.1, which replaces the withdrawn 27.0.0 as
the first qsv with live Data Schematics. The release keeps data that
qsv-clientd downloads through `qsv get` owner-only (#38).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@codecov

codecov Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.29%. Comparing base (a3a2563) to head (f7d5eb5).

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #39   +/-   ##
=======================================
  Coverage   99.29%   99.29%           
=======================================
  Files          30       30           
  Lines        4247     4247           
  Branches      552      552           
=======================================
  Hits         4217     4217           
  Misses         16       16           
  Partials       14       14           
Files with missing lines Coverage Δ
src/qsv_client/__init__.py 100.00% <100.00%> (ø)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

A schematic served over http (for a browser automation tool that can't
open file:// pages) needs its origin in `browser_origins`, and its
pairing code then comes with the "not a local file" warning. Chrome
didn't ask for local network permission for a page served from
127.0.0.1, seen while recording the qsv 27.0.1 release GIF.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@jqnatividad
jqnatividad merged commit 0f7415c into main Oct 27, 2026
21 checks passed
@jqnatividad
jqnatividad deleted the release/0.6.1 branch October 27, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant