Release 7.2.0

Housekeeping:

• Slim down the default request context to headers, ip, and library; the client id is carried by headers (the X-Castle-Client-Id header / __cid cookie) and resolved server-side.
• Remove the internal ClientIdExtract service and the unused cookies plumbing in ContextGetDefault / ContextPrepare.

Release 7.1.0

Features

• Add events_schema, query_events, and group_events for the Events API

Documentation

• Restructure README (quick start, advanced configuration)
• Update DEVELOPMENT.rst and RELEASING.rst

Release 7.0.0

Breaking changes

• Require Python 3.9 or newer
• Remove track, authenticate, device management, and impersonation client methods; use risk, filter, and log instead
• Remove ImpersonationFailed

Features

• Lists and List Items APIs
• Privacy API (request_user_data, delete_user_data)
• RateLimitError for HTTP 429 responses

Bug fixes

• Fix Client.filter and Client.risk failover when user is missing; fall back to matching_user_id

Enhancements

• Remove unused ValidatorsNotSupported validator
• Migrate CI to GitHub Actions (Python 3.9–3.13)
• Migrate packaging to pyproject.toml (PEP 621)
• Replace pylint/autopep8 with ruff
• Bump requests minimum to 2.31

Release v6.1.0

• #111 fix context preparation issues
• #111 remove SDK based validations

Features:

• #111 add InvalidRequestTokenError

Enhancements:

• #111 remove X-Castle headers from the allowlist
• #112 extend failover response with policy action

Release v6.0.0

Breaking Changes:

• #101 remove identify and review commands - they are no longer supported
• #101 remove Castle::Events - please use [recognized events] (https://docs.castle.io/v1/reference/events) instead

Features:

• #104 add "filter", "log" and "risk" actions

Enhancements:

• #100 add X-Requested-With header support

Release v5.0.1

Enhancements:

• #98 rename the namespace from IP to IPs

Release v5.0.0

Breaking Changes:

• #92 change the impersonation-related DSL
• #80, #81 reorganize structure of the SDK
• #79 rename config.url to config.base_url

Features:

• #97 allow to instantiate the configuration
• #95 add webhooks verification
• #88, #89, #90, #91 allow to manage the devices
• #86, #87 add more tests
• #85 add Verdict and Failover strategy constants
• #84 update the default timeout
• #83 add logger config option
• #82 drop origin from the default context

Release v4.0.0

Features:

• #69 added impersonator to properties

Breaking Changes:

• #70 dropped blacklist and whitelist support, in favour of denylist and allowlist

Release v3.3.0

• #67 add trusted_proxy_depth and trust_proxy_chain configuration options

Release v3.2.0

• #64. dropped X-Client-Id from calculation of ip, drop appending default ip headers to the ip_header list config when config is provided (in that case default headers have to be explicitly provided)