lite-bootstrap 1.4.0 — Litestar access logging off by default

lite-bootstrap 1.3.2 — fix lite-bootstrap[litestar] import (guard pro…

…metheus plugin)

lite-bootstrap 1.3.1 — fix bare-install import (declare typing-extens…

…ions)

lite-bootstrap 1.3.0 — free-threaded Python support, orjson opt-in, O…

…TLP-http exporter

ci: publish to PyPI via Trusted Publishing (OIDC) (#145)

* ci: publish to PyPI via Trusted Publishing (OIDC)

Drop the long-lived PYPI_TOKEN secret in favor of OIDC. uv publish
auto-detects the GitHub Actions id-token, so the release job grants
id-token: write and runs under a `pypi` environment that scopes the
PyPI Trusted Publisher.

Requires a matching Trusted Publisher on the lite-bootstrap PyPI project
(workflow: release.yml, environment: pypi) before the next tag.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* docs(release): add 1.2.3 notes (Trusted Publishing pipeline)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

lite-bootstrap 1.2.2

chore: lift fastapi<0.137 cap; require instrumentator>=8.0.1 (#133)

The cap (1.1.1) existed only because prometheus-fastapi-instrumentator <=8.0.0
crashed on FastAPI 0.137's _IncludedRouter. Fixed upstream in instrumentator
8.0.1 (issue #370). Remove fastapi<0.137 and raise the fastapi-metrics floor to
>=8.0.1 so the fix is guaranteed wherever metrics are installed. Verified against
FastAPI 0.138.0 + instrumentator 8.0.2: full suite green at 100%.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs: release notes for 1.2.0

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

lite-bootstrap 1.1.1 — FastAPI 0.137 compatibility

Patch release. Restores FastAPI 0.137 compatibility (offline-docs helper no
longer crashes on the new _IncludedRouter route type) and caps fastapi<0.137
until prometheus-fastapi-instrumentator handles it upstream
(trallnag/prometheus-fastapi-instrumentator#370). Single PR: #122.

docs: release notes for 1.1.0

Bug-audit-v2 cycle: 26 findings across 4 PRs (#108-#111). Lifecycle hardening,
config validation, CI gate, generalized TeardownError aggregation. Two
behavior changes called out: FastAPIConfig no longer stomps user app fields;
CorsConfig wildcard+credentials now raises.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>