Skip to content

Commit 89718f5

Browse files
authored
Release 3.2.2: require agentscore-py 2.8.1 for its certifi floor (#166)
## Summary Release 3.2.2. This raises the `agentscore-py` floor from 2.8.0 to 2.8.1. agentscore-py 2.8.1 requires `certifi>=2026.10.19`. Older certifi releases trust emSign roots whose intermediate CA keys were compromised (GHSA-6q48-6c7w-9gw2). With the new floor, any install of agentscore-commerce 3.2.2 resolves a certifi that does not trust those roots. The floor lives in agentscore-py, so this package does not repeat it. In the lockfile, agentscore-py moves to 2.8.1 and certifi moves from 2026.10.18 to 2026.10.19. Worked with Varun. ## Type of change - [x] Bug fix (no breaking change) - [ ] New feature (no breaking change) - [ ] Breaking change (existing callers must update) - [ ] Docs, tests, or internal maintenance only ## Public API Unchanged. The one changed requirement is `agentscore-py>=2.8.1`. ## Test plan - `uv sync --frozen --all-extras --all-groups`, then: - `uv run pytest`: 1674 passed, 4 skipped. - `uv run ruff check .` and `uv run ruff format --check .`: clean. - `uv run ty check`: clean. - `uv run vulture . --min-confidence 80 --exclude .venv`: clean. - `osv-scanner` on `uv.lock`: no issues found. ## Checklist - [ ] Tests cover the new behavior, and the suite passes locally (a dependency floor adds no behavior to test; the existing suite passes) - [x] Lint, format, and type checks pass - [ ] Docs and README examples updated if the public surface changed (the public surface did not change) - [x] No secrets, credentials, or personal data in the diff or the tests
1 parent 5c8672c commit 89718f5

2 files changed

Lines changed: 11 additions & 10 deletions

File tree

‎pyproject.toml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,15 +4,15 @@ build-backend = "hatchling.build"
44

55
[project]
66
name = "agentscore-commerce"
7-
version = "3.2.1"
7+
version = "3.2.2"
88
description = "Agentic commerce SDK for Python: identity middleware (FastAPI, Flask, Django, AIOHTTP, Sanic, ASGI) + payment helpers + 402 builders + discovery + Stripe multichain. The full merchant-side toolkit for AgentScore-powered agentic commerce."
99
readme = "README.md"
1010
license = "MIT"
1111
requires-python = ">=3.11"
1212
keywords = ["agentscore", "agentic-commerce", "agentic-payments", "402", "x402", "mpp", "machine-payments-protocol", "fastapi", "starlette", "flask", "django", "aiohttp", "sanic", "middleware", "kyc", "identity", "stripe", "tempo", "solana", "base", "ai-agent"]
1313
dependencies = [
1414
"httpx>=0.25.0,<1.0.0",
15-
"agentscore-py>=2.8.0",
15+
"agentscore-py>=2.8.1",
1616
]
1717
classifiers = [
1818
"Development Status :: 5 - Production/Stable",

‎uv.lock‎

Lines changed: 9 additions & 8 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)