Merge branch 'main' into fix/sub-package-version-drift

Author: Koosha-Owji

CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to the Kinde Python SDK will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.3.0] - 2026-04-16
+
+### Added
+- **OAuth & management**: Invitation codes in the OAuth login flow; management client regenerated from the latest spec (OpenAPI Generator 7.19) with improved dynamic OpenAPI class generation
+- **Documentation**: README development setup and refreshed management client examples
+
+### Fixed
+- **Auth & frameworks**: OAuth fixes for FastAPI and Flask (including call signatures and namespaced state keys), hardened example apps, and more reliable Flask async handling and tests
+- **Management client**: Wrapper and token handling corrections, plus fetching the OpenAPI spec from the canonical URL
+- **Build & tests**: Dependency and security alignment (`requirements.txt` / Snyk), pytest-cov v7–compatible coverage configuration
+
+### Improved
+- **Management client**: DRYer delegation over the generated management API
+- **Dependencies & CI**: Wider compatible ranges (including Python-specific `requests` pins), routine dependency bumps, updated GitHub Actions, Python 3.9–friendly pylint tooling, and removal of unused generated OpenAPI test stubs
+
 ## [2.2.0] - 2025-10-14
 
 ### Fixed

pyproject.toml

@@ -38,12 +38,12 @@ dependencies = [
     "Authlib >=1.3.0, <2.0",
     "pyjwt >=2.10.0, <3.0",
     "requests ~=2.32.5; python_version < '3.10'",
-    "requests ~=2.33.0; python_version >= '3.10'",
+    "requests ~=2.34.2; python_version >= '3.10'",
     "typing-extensions >=4.11.0, <5.0",
     "frozendict >=2.4.3, <3.0",
     "certifi >=2026.1.4",
     "PyYAML >=6.0.1, <7.0.0",
-    "cryptography >=43.0.1, <47.0",
+    "cryptography >=48.0.1, <48.1",
     "python-dotenv >=1.0.0, <2.0.0",
     "itsdangerous >=2.2.0, <3.0.0",
     "nest-asyncio >=1.5.8, <2.0.0",
@@ -68,8 +68,8 @@ dev = [
     "pytest-django >=4.5.2",
     "mypy >=1.5.0",
     "bandit >=1.7",
-    "pylint >=4.0.0; python_version >= '3.10'",
-    "pylint >=2.0, <4.0; python_version < '3.10'",
+    "pylint >=4.0.5, <4.1.0; python_version >= '3.10'",
+    "pylint >=3.3.9, <4.0.0; python_version < '3.10'",
     "pycodestyle >=2.0",
     "pytest-asyncio >=0.26.0",
     "pytest-timeout >=2.2.0",
@@ -110,7 +110,10 @@ coverage = ">=7.10.6"
 pytest-django = "^4.5.2"
 mypy = "^1.5.0"
 bandit = "^1.7"
-pylint = ">=4.0.0"
+pylint = [
+    {version = ">=3.3.9,<4.0.0", python = "~3.9"},
+    {version = ">=4.0.5,<4.1.0", python = ">=3.10"}
+]
 pycodestyle = "^2.0"
 pytest-asyncio = "^0.26.0"
 pytest-timeout = "^2.2.0"

requirements.txt

@@ -1,9 +1,10 @@
 requests~=2.32.5; python_version < "3.10"
-requests~=2.33.0; python_version >= "3.10"
+requests~=2.34.2; python_version >= "3.10"
 # Core dependencies
-django>=4.2.0,<5.0.0
+django>=4.2.0,<5.0.0; python_version < "3.12"
+django>=6.0.6,<6.1.0; python_version >= "3.12"
 python-dotenv>=1.0.0
-cryptography>=43.0.1,<47.0
+cryptography>=48.0.1,<48.1
 pyjwt>=2.10.0
 fastapi>=0.110.0
 flask>=3.0.0
@@ -39,3 +40,4 @@ twine>=4.0.2
 
 # Other dependencies
 httpx>=0.25.0,<0.29.0
+pygments>=2.20.0 # not directly required, pinned by Snyk to avoid a vulnerability