From 966c44cf126f71c8717b6ef49b48a12c78621e14 Mon Sep 17 00:00:00 2001 From: Brady Holt Date: Wed, 21 Oct 2026 15:20:56 -0500 Subject: [PATCH 1/3] Bumping version for 4.4.1 --- openapi-generator-config.yaml | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/openapi-generator-config.yaml b/openapi-generator-config.yaml index 204f5be..7900bae 100644 --- a/openapi-generator-config.yaml +++ b/openapi-generator-config.yaml @@ -1,5 +1,5 @@ packageName: ynab -packageVersion: 4.4.0 +packageVersion: 4.4.1 packageDescription: Official Python client for the YNAB API. API documentation available at https://api.ynab.com. licenseInfo: name: Apache-2.0 diff --git a/pyproject.toml b/pyproject.toml index c641262..e0acfc1 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [tool.poetry] name = "ynab" -version = "4.4.0" +version = "4.4.1" description = "Official Python client for the YNAB API. API documentation available at https://api.ynab.com. Generated from server specification version 1.86.0" authors = ["YNAB"] license = "Apache-2.0" From edd5863ce7c99ce02416f04aef5c706db860d989 Mon Sep 17 00:00:00 2001 From: Brady Holt Date: Wed, 21 Oct 2026 15:25:19 -0500 Subject: [PATCH 2/3] Add AGENTS.md so agents bump the version with consumer-facing changes Changes like the certifi floor raise in #100 need a version bump before they can be published, which otherwise takes a second PR. --- AGENTS.md | 12 ++++++++++++ CLAUDE.md | 1 + 2 files changed, 13 insertions(+) create mode 100644 AGENTS.md create mode 100644 CLAUDE.md diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..242cd98 --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,12 @@ +# AGENTS.md + +See [DEVELOPMENT.md](DEVELOPMENT.md) for setup, generating the client, and publishing. + +## Version bumps + +A change that alters what consumers install or run must bump the package version in the same PR, so it can be published without a follow-up PR. This includes runtime dependency ranges in `pyproject.toml` or `templates/pyproject.mustache`, generated code under `ynab/`, and other templates. + +- Run `python3 scripts/update_version.py patch` (or `minor` / `major`). It updates both `pyproject.toml` and `openapi-generator-config.yaml`; never edit only one. +- Use `patch` for dependency range changes and bug fixes, `minor` for new API surface, `major` for breaking changes. +- `scripts/generate.sh` already bumps the version, so don't bump again after running it. +- Don't bump for changes that don't ship to consumers: dev and test dependencies, lockfile-only updates, CI workflows, docs. diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 0000000..43c994c --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1 @@ +@AGENTS.md From 52c712225a36b57b5fa5fa06ffde0ef83681d26e Mon Sep 17 00:00:00 2001 From: Brady Holt Date: Wed, 21 Oct 2026 15:26:52 -0500 Subject: [PATCH 3/3] Scope AGENTS.md version bump guidance to security update PRs --- AGENTS.md | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index 242cd98..7e794e2 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -1,12 +1,9 @@ # AGENTS.md -See [DEVELOPMENT.md](DEVELOPMENT.md) for setup, generating the client, and publishing. +## Security update PRs -## Version bumps +A PR that changes a runtime dependency for security reasons (raising a version floor in `pyproject.toml` and `templates/pyproject.mustache`, for example) must also bump the package version, so it can be published without a follow-up PR. -A change that alters what consumers install or run must bump the package version in the same PR, so it can be published without a follow-up PR. This includes runtime dependency ranges in `pyproject.toml` or `templates/pyproject.mustache`, generated code under `ynab/`, and other templates. - -- Run `python3 scripts/update_version.py patch` (or `minor` / `major`). It updates both `pyproject.toml` and `openapi-generator-config.yaml`; never edit only one. -- Use `patch` for dependency range changes and bug fixes, `minor` for new API surface, `major` for breaking changes. -- `scripts/generate.sh` already bumps the version, so don't bump again after running it. -- Don't bump for changes that don't ship to consumers: dev and test dependencies, lockfile-only updates, CI workflows, docs. +- Run `python3 scripts/update_version.py patch`. It updates both `pyproject.toml` and `openapi-generator-config.yaml`; never edit only one. +- Don't regenerate the client as part of a security update. +- Dev and test dependency updates don't ship to consumers and don't need a bump.