Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 11 additions & 4 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,12 @@ All notable changes to this project are documented here. The format follows

## [Unreleased]

## [0.6.1] - 2026-10-27

This release accompanies qsv 27.0.1, which replaces the withdrawn 27.0.0 as the first qsv
whose Data Schematics connect to `qsv-clientd`. It also keeps data that `qsv-clientd`
downloads through `qsv get` readable only by you.

### Security

- With qsv 26.x or older that has `get` (`qsvdp` or a source build; the prebuilt `qsv` has it
Expand All @@ -14,20 +20,20 @@ All notable changes to this project are documented here. The format follows
umask's modes and the data may be private. qsv 27 already keeps the cache owner-only on
Unix, so its cache stays where it is; so does a `QSV_CACHE_DIR` you set yourself. This
corrects 0.6.0's note that qsv's cache "follows your umask": that is only true of qsv 26.x
and older.
and older. ([#38](https://github.com/dathere/qsv-client/pull/38))
- `qsv-clientd viz <URL>` and `register --download` through a qsv with `get` no longer leave
the download readable by others while qsv writes it. qsv writes it with your umask's modes,
like its other output files, so 0.6.0 restricted it to you only after qsv was done, in the
folder you chose for the data, where other users might open it in the meantime. qsv now
writes it in a directory only you can enter. Fetch latest was never affected: it downloads
into the daemon's own private directory.
into the daemon's own private directory. ([#38](https://github.com/dathere/qsv-client/pull/38))

### Changed

- qsv 27.0.0 was withdrawn before its release, so live Data Schematics need **qsv 27.0.1 or
later**, not 27.0.0 as the 0.6.0 notes say. The README, and the message `qsv-clientd serve`
and the tray show with an older qsv, now name 27.0.1. Builds of qsv's development version
that report 27.0.0 have everything 27.0.1 does, and work as it does.
that report 27.0.0 have everything 27.0.1 does, and work as it does. ([#38](https://github.com/dathere/qsv-client/pull/38))

## [0.6.0] - 2026-10-26

Expand Down Expand Up @@ -327,7 +333,8 @@ First release. ([#1](https://github.com/dathere/qsv-client/pull/1))
environment variables, so keys never appear on the command line.
- Type hints (`py.typed`), no runtime dependencies, Python 3.10+.

[Unreleased]: https://github.com/dathere/qsv-client/compare/0.6.0...HEAD
[Unreleased]: https://github.com/dathere/qsv-client/compare/0.6.1...HEAD
[0.6.1]: https://github.com/dathere/qsv-client/compare/0.6.0...0.6.1
[0.6.0]: https://github.com/dathere/qsv-client/compare/0.5.0...0.6.0
[0.5.0]: https://github.com/dathere/qsv-client/compare/0.4.0...0.5.0
[0.4.0]: https://github.com/dathere/qsv-client/compare/0.3.0...0.4.0
Expand Down
8 changes: 7 additions & 1 deletion docs/DAEMON.md
Original file line number Diff line number Diff line change
Expand Up @@ -250,7 +250,13 @@ a minute. It cannot pair without your approval.
Browsers' private/local network access rules for loopback requests (Chrome's Local Network
Access, Safari's and Firefox's equivalents) are still changing. The daemon answers
`Access-Control-Request-Private-Network` preflights, but a browser may still ask you for
permission the first time a schematic connects.
permission the first time a schematic connects. (In October 2026, Chrome didn't ask for a
page served from `127.0.0.1`.)

A schematic is usually opened as a file. To serve one over http instead, for a browser
automation tool that can't open `file://` pages for example, add the page's origin (such as
`"http://127.0.0.1:8765"`) to `browser_origins`. Approving its code then shows the "not a
local file" warning, as for any origin but `null`. Remove the origin when you're done.

## Protocol (API v1)

Expand Down
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ build-backend = "hatchling.build"

[project]
name = "qsv-client"
version = "0.6.0"
version = "0.6.1"
description = "Run the qsv CSV toolkit (25.0.0+) from Python: timeouts that kill the whole process tree, typed errors, capability detection, and a local daemon (with an optional system tray) for live Data Schematics (qsv 27.0.1+)."
readme = "README.md"
license = "AGPL-3.0-or-later"
Expand Down
2 changes: 1 addition & 1 deletion src/qsv_client/__init__.py
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@
QsvWriteError,
)

__version__ = "0.6.0"
__version__ = "0.6.1"

__all__ = [
"DEFAULT_BINARIES",
Expand Down
2 changes: 1 addition & 1 deletion uv.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading