From 08d7cbd99847bbb9b61f18e9ea4448f68b524ff9 Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 22:30:35 -0400
Subject: [PATCH 1/6] Bound runtime dependency ranges and pin build backend

Add version bounds to the runtime dependencies: requests was fully
unbounded and typing-extensions had no upper bound, so a fresh install
could resolve either to any just-published release. As a library,
socketdev declares bounded ranges rather than exact pins - exact pins
in package metadata would conflict with consumers that pin their own
dependencies, including socket-python-cli, which pins its entire
runtime closure (socketsecurity 2.5.10+) and relies on this package's
ranges staying compatible.

Floors match the versions already resolved and tested in uv.lock;
ceilings exclude the next major. Also pins the hatchling build backend
used for sdist builds. Dependabot (uv ecosystem, 7-day cooldown)
already keeps the lockfile fresh within these bounds.

Companion to the socket-python-cli dependency pinning work (CE-359).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 pyproject.toml       | 6 +++---
 socketdev/version.py | 2 +-
 uv.lock              | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 56dd376..2d15d6e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling"]
+requires = ["hatchling==1.31.0"]
 build-backend = "hatchling.build"
 
 [project]
@@ -7,8 +7,8 @@ name = "socketdev"
 version = "3.4.2"
 requires-python = ">= 3.9"
 dependencies = [
-    'requests',
-    'typing-extensions>=4.12.2'
+    'requests>=2.32.5,<3',
+    'typing-extensions>=4.12.2,<5'
 ]
 readme = "README.rst"
 license = {file = "LICENSE"}
diff --git a/socketdev/version.py b/socketdev/version.py
index 46aa803..567bfde 100644
--- a/socketdev/version.py
+++ b/socketdev/version.py
@@ -1 +1 @@
-__version__ = "3.4.2"
+__version__ = "3.4.3"
diff --git a/uv.lock b/uv.lock
index bf4ff76..c1fd6a1 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1381,10 +1381,10 @@ requires-dist = [
     { name = "hatchling", marker = "extra == 'dev'", specifier = ">=1.27.0" },
     { name = "pytest", marker = "extra == 'test'", specifier = ">=7.0.0" },
     { name = "pytest-cov", marker = "extra == 'test'", specifier = ">=4.0.0" },
-    { name = "requests" },
+    { name = "requests", specifier = ">=2.32.5,<3" },
     { name = "ruff", marker = "extra == 'dev'", specifier = ">=0.3.0" },
     { name = "twine", marker = "extra == 'dev'", specifier = ">=4.0.0" },
-    { name = "typing-extensions", specifier = ">=4.12.2" },
+    { name = "typing-extensions", specifier = ">=4.12.2,<5" },
 ]
 provides-extras = ["dev", "test"]
 

From 9e849c25cb5d3d57a9e0a82b7e0121d9c26cd4b0 Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 22:34:39 -0400
Subject: [PATCH 2/6] Add CHANGELOG.md

Seed a changelog in the socket-python-cli format, starting at 3.4.3,
with a pointer to GitHub releases for earlier history.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 CHANGELOG.md | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..8382659
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,18 @@
+# Changelog
+
+## 3.4.3
+
+### Changed: bound runtime dependency ranges and pin build backend
+
+- Added version bounds to the runtime dependencies: `requests>=2.32.5,<3`
+  (previously unbounded) and `typing-extensions>=4.12.2,<5` (previously no
+  upper bound). As a library, socketdev declares bounded ranges rather than
+  exact pins so its constraints compose with consumers that pin their own
+  dependencies, such as the Socket Python CLI.
+- Pinned the `hatchling` build backend used for sdist builds.
+
+---
+
+Releases prior to 3.4.3 predate this changelog. See the
+[GitHub releases](https://github.com/SocketDev/socket-sdk-python/releases)
+for earlier release notes.

From 8cc8334bef8a460c0acd89e7bcce6a044eee04b9 Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 22:40:42 -0400
Subject: [PATCH 3/6] Backfill changelog from GitHub release notes

Import all 53 published releases (v1.0.15 through v3.4.2) from the
auto-generated GitHub release notes: one dated entry per version,
pre-releases labeled, body headings demoted one level so version
headings stay the top-level structure.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 CHANGELOG.md | 475 ++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 472 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8382659..cbb360a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,475 @@
 
 ---
 
-Releases prior to 3.4.3 predate this changelog. See the
-[GitHub releases](https://github.com/SocketDev/socket-sdk-python/releases)
-for earlier release notes.
+Entries below are imported from the auto-generated
+[GitHub release notes](https://github.com/SocketDev/socket-sdk-python/releases).
+
+## 3.4.2 (2026-08-05)
+
+### What's Changed
+* ci(deps): bump pypa/gh-action-pypi-publish from ab69e431e9c9f48a3310be0a56527c679f56e04d to dc37677b2e1c63e2034f94d8a5b11f265b73ba33 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/91
+* ci(deps): bump actions/checkout from 6.0.2 to 7.0.1 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/96
+* chore(deps): bump the python-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/95
+* Make SDK preview publication opt-in by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/100
+* Add missing purl types and per-artifact parse resilience to full-scan stream by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/101
+* Add cached diff-scan polling support to DiffScans.get by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/99
+* fix(purl): expose fail-open batch params and harden dedupe by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/98
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.3.0...v3.4.2
+
+## 3.3.0 (2026-06-10)
+
+### What's Changed
+* Add transient-error classification to APIFailure by @mtorp in https://github.com/SocketDev/socket-sdk-python/pull/93
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.2.1...v3.3.0
+
+## 3.2.1 (2026-06-03)
+
+### What's Changed
+* Add `sfw` aggregator gate to enforce required CI checks by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/89
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.2.0...v3.2.1
+
+## 3.2.0 (2026-06-03)
+
+### What's Changed
+* Add `OTHER` category to SocketCategory enum by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/85
+* ci(deps): bump actions/setup-python from 5.2.0 to 6.2.0 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/86
+* ci(deps): bump actions/github-script from 7.0.1 to 9.0.0 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/87
+* chore(deps): bump the python-minor-patch group with 2 updates by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/88
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.1.2...v3.2.0
+
+## 3.1.2 (2026-06-02)
+
+### What's Changed
+* Dependabot hardening + dependency update bundle by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/84
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.1.1...v3.1.2
+
+## 3.1.1 (2026-05-22)
+
+### What's Changed
+* ci(version-check): require uv.lock sync alongside pyproject changes by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/82
+* Fix stale `didYouMean` props by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/81
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.1.0...v3.1.1
+
+## 3.1.0 (2026-05-21)
+
+### What's Changed
+* Support org-scoped batch package endpoint by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/76
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.33...v3.1.0
+
+## 3.0.33 (2026-04-24)
+
+### What's Changed
+* fix: harden GitHub Actions workflows by @reberhardt7 in https://github.com/SocketDev/socket-sdk-python/pull/72
+* fix: tolerate unknown SocketCategory values in SocketAlert.from_dict by @dc-larsen in https://github.com/SocketDev/socket-sdk-python/pull/79
+
+### New Contributors
+* @reberhardt7 made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/72
+* @dc-larsen made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/79
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.32...v3.0.33
+
+## 3.0.32 (2026-02-27)
+
+### What's Changed
+* Fixing issue where incorrect workspace was being set as None by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/71
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.31...v3.0.32
+
+## 3.0.31 (2026-02-26)
+
+### What's Changed
+* Bump urllib3 from 2.6.2 to 2.6.3 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/67
+* Bump virtualenv from 20.35.4 to 20.36.1 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/66
+* Bump cryptography from 46.0.3 to 46.0.5 by @dependabot[bot] in https://github.com/SocketDev/socket-sdk-python/pull/69
+* Add `workspace` param support by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/68
+* Update CODEOWNERS to reflect team ownership by @lelia in https://github.com/SocketDev/socket-sdk-python/pull/70
+
+### New Contributors
+* @dependabot[bot] made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/67
+* @lelia made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/68
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.29...v3.0.31
+
+## 3.0.29 (2026-01-21)
+
+### What's Changed
+* Add scan_type query param to full scan API by @mtorp in https://github.com/SocketDev/socket-sdk-python/pull/64
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.28...v3.0.29
+
+## 3.0.28 (2026-01-05)
+
+### What's Changed
+* Updating README with latest changes by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/63
+* Updated README with new Slack bot directions by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/65
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.25...v3.0.28
+
+## 3.0.25 (2026-01-01)
+
+### What's Changed
+* Added option to override user agent string by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/62
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.24...v3.0.25
+
+## 3.0.24 (2026-01-01)
+
+### What's Changed
+* Upgraded dependencies and fixed versioning by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/61
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.23...v3.0.24
+
+## 3.0.23 (2026-01-01)
+
+### What's Changed
+* feat: Add comprehensive SDK enhancements and new endpoint modules by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/60
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.22...v3.0.23
+
+## 3.0.22 (2025-12-10)
+
+### What's Changed
+* Changed version to be optional so that if it isn't there in a diff or… by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/59
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.21...v3.0.22
+
+## 3.0.21 (2025-11-27)
+
+### What's Changed
+* create function for finalizing Tier 1 reachability analyses by @mtorp in https://github.com/SocketDev/socket-sdk-python/pull/58
+
+### New Contributors
+* @mtorp made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/58
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.20...v3.0.21
+
+## 3.0.20 (2025-11-15)
+
+### What's Changed
+* Fixing versioning as didn't add project files in last branch by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/57
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.19...v3.0.20
+
+## 3.0.19 (2025-11-15)
+
+### What's Changed
+* Doug/add unverified option by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/56
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.17...v3.0.19
+
+## 3.0.17 (2025-11-07)
+
+### What's Changed
+* Fixed logic for upload manifest files to not strip the folder names f… by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/55
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.16...v3.0.17
+
+## 3.0.16 (2025-11-07)
+
+### What's Changed
+* Added upload manifests endpoint for reachability by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/54
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.14...v3.0.16
+
+## 3.0.14 (2025-10-17)
+
+### What's Changed
+* Fix the normalization for file names to work for specifying a file, p… by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/53
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.13...v3.0.14
+
+## 3.0.13 (2025-10-14)
+
+### What's Changed
+* Fixing workflows with pinned versions by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/50
+* Update action versions in pr-preview.yml by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/51
+* Update PyPI publish action version by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/52
+* Fix dedupe logic to work with compact mode for the purl endpoint by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/49
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.6...v3.0.13
+
+## 3.0.6 (2025-09-12)
+
+### What's Changed
+* feat: Add support for base_paths parameter in fullscans and diffscans by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/48
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.5...v3.0.6
+
+## 3.0.5 (2025-09-09)
+
+### What's Changed
+* fix: Align SDK endpoints and tests with OpenAPI spec by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/47
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.4...v3.0.5
+
+## 3.0.4 (2025-09-03)
+
+### What's Changed
+* feat: Complete API endpoint coverage with comprehensive tests and doc… by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/45
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.2...v3.0.4
+
+## 3.0.2 (2025-08-24)
+
+### What's Changed
+* Fix README typos by @Planeshifter in https://github.com/SocketDev/socket-sdk-python/pull/43
+* fix: include namespace in deduplicated purl construction by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/44
+
+### New Contributors
+* @Planeshifter made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/43
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v3.0.0...v3.0.2
+
+## 3.0.0 (2025-08-23)
+
+### What's Changed
+* feat: migrate to socketdev 3.0.0 and switch to uv dependency management by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/42
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.2.3...v3.0.0
+
+## 2.2.3 (2025-08-23)
+
+### What's Changed
+* Adding deprecation notice by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/41
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.1.8...v2.2.3
+
+## 2.1.8 (2025-08-22)
+
+### What's Changed
+* Doug/fix diff scan license options by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/40
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.1.5...v2.1.8
+
+## 2.1.5 (2025-06-20)
+
+### What's Changed
+* Improvements to unit tests for new diff scans by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/39
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.1.4...v2.1.5
+
+## 2.1.4 (2025-06-10)
+
+### What's Changed
+* Added missing property by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/38
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.1.3...v2.1.4
+
+## 2.1.3 (2025-06-09)
+
+### What's Changed
+* Fixed logging to use logging instead of print by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/37
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.1.0...v2.1.3
+
+## 2.1.0 (2025-06-02)
+
+### What's Changed
+* Doug/add new endpoints by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/36
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.22...v2.1.0
+
+## 2.0.22 (2025-04-25)
+
+### What's Changed
+* Fixed the logic for dedeupe and ths missing alert fields by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/35
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.21...v2.0.22
+
+## 2.0.21 (2025-04-03)
+
+### What's Changed
+* Fix attributes being dropped during dedupe by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/34
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.20...v2.0.21
+
+## 2.0.20 (2025-04-01)
+
+### What's Changed
+* Doug/add dedupe logic to sdk by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/33
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.16...v2.0.20
+
+## 2.0.16 (2025-03-31)
+
+### What's Changed
+* Fixed purl logic to accept params by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/31
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.15...v2.0.16
+
+## 2.0.15 (2025-03-24)
+
+### What's Changed
+* Fixed deployment process to ensure the versions are being pushed to pypi by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/30
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.14...v2.0.15
+
+## 2.0.14 (2025-03-24)
+
+### What's Changed
+* Doug/fix api error by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/29
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.13...v2.0.14
+
+## 2.0.13 (2025-03-19)
+
+### What's Changed
+* Doug/make params url safe by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/28
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.11...v2.0.13
+
+## 2.0.11 (2025-03-15)
+
+### What's Changed
+* Add support for include_license_details for the streaming diff endpoint by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/27
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.10...v2.0.11
+
+## 2.0.10 (2025-03-13)
+
+### What's Changed
+* Doug/fix missing repo field by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/26
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.9...v2.0.10
+
+## 2.0.9 (2025-02-28)
+
+### What's Changed
+* Fix for the validation test being in the get instead of post by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/24
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.8...v2.0.9
+
+## 2.0.8 (2025-02-27)
+
+### What's Changed
+* Return headers on request exception by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/23
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.7...v2.0.8
+
+## 2.0.7 (2025-02-25)
+
+### What's Changed
+* improved error handling by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/22
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.6...v2.0.7
+
+## 2.0.6 (2025-02-24)
+
+### What's Changed
+* Fix for params already being a dict by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/21
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.5...v2.0.6
+
+## 2.0.5 (2025-02-14)
+
+### What's Changed
+* small fixes to support CLI bugfixes @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/20
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.4...v2.0.5
+
+## 2.0.4 (2025-02-12)
+
+### What's Changed
+* updated type definitions and logic to align with the updates to the Socket API (diff endpoint)
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.2...v2.0.4
+
+## 2.0.2 (2025-02-06)
+
+_No release notes provided._
+
+## 2.0.1 (2025-02-06, pre-release)
+
+### What's Changed
+* github workflow improvements and python version compatibility updates by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/17
+
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v2.0.0...v2.0.1
+
+## 2.0.0 (2025-02-05, pre-release)
+
+### What's Changed
+- Version bumped to 2 to indicate potentially breaking changes
+- Typing was added to most endpoints (specifically those used by the python CLI)
+
+- Since this is such a large change-set, we aren't suggesting everyone move to v2 immediately. If you do, and run into any bugs, please open an issue so we can address them.
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/compare/v1.0.15...v2.0.0
+
+## 1.0.15 (2025-01-24)
+
+### What's Changed
+* Initial code by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/1
+* Orlando/add new endpoints by @obarrera in https://github.com/SocketDev/socket-sdk-python/pull/2
+* Adding code owners file by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/3
+* Added the Purl API endpoint by @obarrera in https://github.com/SocketDev/socket-sdk-python/pull/4
+* Orgs full scans by @obarrera in https://github.com/SocketDev/socket-sdk-python/pull/5
+* Update README.rst by @obarrera in https://github.com/SocketDev/socket-sdk-python/pull/6
+* Doug/add new features by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/7
+* Added missing endpoints and updated documentation by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/8
+* Fixed issue in the newly added endpoints by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/9
+* Add the missing folder to the by @dacoburn in https://github.com/SocketDev/socket-sdk-python/pull/10
+* added endpoints to python sdk by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/11
+* fixed build script and README formatting by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/12
+* hotfix - add export to socketdev and toml by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/13
+* added pr-preview and release workflows by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/15
+* updated load_files to omit the path to workspace if specified by @flowstate in https://github.com/SocketDev/socket-sdk-python/pull/16
+
+### New Contributors
+* @dacoburn made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/1
+* @obarrera made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/2
+* @flowstate made their first contribution in https://github.com/SocketDev/socket-sdk-python/pull/11
+
+**Full Changelog**: https://github.com/SocketDev/socket-sdk-python/commits/v1.0.15

From 934d4910c118be4097de0cc2072783a39985c08b Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 22:57:09 -0400
Subject: [PATCH 4/6] Bump version to 3.5.0

The new requests floor is a newly binding constraint for consumers on
older versions, so this warrants a minor bump rather than a patch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 CHANGELOG.md         | 2 +-
 socketdev/version.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index cbb360a..14a7ce2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## 3.4.3
+## 3.5.0
 
 ### Changed: bound runtime dependency ranges and pin build backend
 
diff --git a/socketdev/version.py b/socketdev/version.py
index 567bfde..dcbfb52 100644
--- a/socketdev/version.py
+++ b/socketdev/version.py
@@ -1 +1 @@
-__version__ = "3.4.3"
+__version__ = "3.5.0"

From 793d9d6ee3ce4d26927bdfd891150f6341a76c61 Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 23:32:50 -0400
Subject: [PATCH 5/6] Fix static project version and use a Python
 3.9-compatible hatchling

The [project] version in pyproject.toml is static ([tool.hatch.version]
is only consulted when version is declared dynamic), so bumping
version.py alone left the packaging metadata and uv.lock at 3.4.2.
Set the static version to 3.5.0 to match.

Pin hatchling to 1.27.0 instead of 1.31.0: 1.28+ requires Python 3.10,
while this package's requires-python still includes 3.9, so the newer
pin would break sdist builds on 3.9.

Addresses PR#103 review findings.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 pyproject.toml | 6 ++++--
 uv.lock        | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 2d15d6e..6272f47 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,10 +1,12 @@
 [build-system]
-requires = ["hatchling==1.31.0"]
+# 1.27.0 is the newest hatchling that supports Python 3.9, which this
+# package's requires-python still includes.
+requires = ["hatchling==1.27.0"]
 build-backend = "hatchling.build"
 
 [project]
 name = "socketdev"
-version = "3.4.2"
+version = "3.5.0"
 requires-python = ">= 3.9"
 dependencies = [
     'requests>=2.32.5,<3',
diff --git a/uv.lock b/uv.lock
index c1fd6a1..e6489c4 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1353,7 +1353,7 @@ wheels = [
 
 [[package]]
 name = "socketdev"
-version = "3.4.2"
+version = "3.5.0"
 source = { editable = "." }
 dependencies = [
     { name = "requests" },

From 64898c323e779e95aef00dd0feafa39b8e48d42d Mon Sep 17 00:00:00 2001
From: lelia <2418071+lelia@users.noreply.github.com>
Date: Wed, 5 Aug 2026 23:34:25 -0400
Subject: [PATCH 6/6] Declare the version dynamic so version.py is the single
 source of truth

Per review on PR#103: with dynamic = ["version"], hatchling reads
socketdev/version.py (the file version-check.yml already validates),
so packaging metadata can never drift from the checked version again.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Signed-off-by: lelia <2418071+lelia@users.noreply.github.com>
---
 pyproject.toml | 2 +-
 uv.lock        | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 6272f47..fdf7974 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "socketdev"
-version = "3.5.0"
+dynamic = ["version"]
 requires-python = ">= 3.9"
 dependencies = [
     'requests>=2.32.5,<3',
diff --git a/uv.lock b/uv.lock
index e6489c4..f00f016 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1353,7 +1353,6 @@ wheels = [
 
 [[package]]
 name = "socketdev"
-version = "3.5.0"
 source = { editable = "." }
 dependencies = [
     { name = "requests" },