3.6.1
COLEMAN 3.6.1 strengthens the dependency and CI foundations behind reproducible test prioritization and selection. This maintenance release prepares a safer base for the planned 4.0 feature release.
Security maintenance¶
- Refresh affected runtime and optional-tool dependencies, including documentation, notebook and release tooling. The complete all-platform lock audit reports zero known vulnerabilities at the time of validation, without an advisory ignore list.
- Add a recurring dependency audit that checks every registry package in the committed lock, including extras and packages for other operating systems, and retains machine-readable evidence in CI.
- Pin and verify the CI package-manager download, use locked build/release/audit tools, and disable third-party source builds in Linux CI.
- Protect documentation generation against symlink/path escapes and interrupted output publication.
Upgrade¶
Requires Python 3.14 or later:
python -m pip install --upgrade "https://github.com/jacksonpradolima/coleman/releases/download/v3.6.1/coleman-3.6.1-py3-none-any.whl#sha256=ad22e85da1ac9ca42d3e70d10e9ff0d6fecca5f7841f01bcb144a15beffc0646"
For contributors, synchronize the updated lock and requested extras. Zensical and Marimo are updated to admit patched transitive dependencies. Native numerical dependency pins and decision/artifact semantics are preserved.
See the dependency security guide for exact audit commands, scope and platform limitations. A clean advisory query means no known matching reports; it does not prove the absence of undisclosed vulnerabilities.