# proxmox-sdk v0.0.15

proxmox-sdk 0.0.15

| Field |Value |
| --- | --- |
| Canonical URL | https://emersonfelipesp.com/proxmox-sdk/releases/v0.0.15 |
| GitHub URL | https://github.com/emersonfelipesp/proxmox-sdk/releases/tag/v0.0.15 |
| Tag | v0.0.15 |
| State | latest |
| Author | emersonfelipesp |
| Created | 2026-09-16 06:03 UTC |
| Published | 2026-09-16 06:21 UTC |
| Target | 6ea5ed3a9f4b7f7d7df8bc2f2e9a8da7be8619df |
| Synced | 2026-09-20 10:37 UTC |
| Assets | 0 |

## Release notes

<!-- proxmox-sdk-release-evidence:v1 -->

## Release evidence

Release version: `0.0.15`
Package-of-record manifest SHA256: `928d57c15328a6fce9df1f5110f4de2aedbf0a6c41f5bde27f1143bf895615cd`

- [x] **REQ**: Bounded JSON response reads, redirect refusal on every transport, and Proxmox VE 9.2 API coverage are each traced to unit tests and to the live certification suite, which passed 14 checks with 2 documented expected failures against Proxmox VE 9.2.20.
- [x] **ARCH**: The additive SDK read contract, transport-level redirect handling, and the release pipeline's verify-and-seal boundary were reviewed; no public interface was removed.
- [x] **IMPL**: Ruff, Ty, and Pyright standards; uv 0.11.28 with a locked dependency graph; pinned Alpine 3.24 image inputs; reproducible builds under the commit timestamp with byte-identical double builds.
- [x] **STATIC**: Ruff lint and format, Ty, Pyright, actionlint with shellcheck, compile and import contracts, and the dependency vulnerability audit passed.
- [x] **TEST**: 874 unit and integration tests passed with 19 skips; the latest, 9.2, and 9.1.11 schema regression lanes passed; the installed-wheel contract passed; the nine-cell served-artifact matrix (Python 3.11, 3.12, 3.13 across three schema versions) passed for the release candidate; raw, nginx, and granian container images built and passed smoke tests on amd64 and arm64.
- [x] **COVERAGE**: Coverage was measured at 85 percent line coverage for the feature scope; uncovered code is limited to live-only transport paths exercised by the certification suite.
- [x] **DEFECTS**: Release-lane defects found during candidate validation (test harness credential masking, verifier interpreter selection, sdist metadata selection, container package pins, reusable workflow credentials) were fixed and verified before this version; no open defects affect the published package.
- [x] **SECURITY**: Package credentials are exposed only to the final publish step of a dedicated release lane; dependency security advisories were resolved; secrets are never inherited wholesale by reusable workflows; the package of record was rebuilt and byte-compared before publication.
- [x] **OPS**: README, SDK and CLI documentation, the live certification runbook, and agent-facing guides describe the shipped behavior and the release process.
- [x] **RECOVERY**: The previous version remains installable; the release is additive with no migration; build inputs, tool versions, and validation evidence are retained with the package record for maintenance.
- [x] **APPROVAL**: Release candidates 4 and 5 were validated from the served artifacts, including a live Proxmox VE 9.2.20 session, and the final package of record was approved for promotion.

## What's new in 0.0.15

- **Bounded JSON response reads** — `ProxmoxSDK` can cap the size of JSON responses it reads, so pull-based metrics collectors cannot be stalled or exhausted by an oversized reply.
- **Redirect refusal on every transport** — 3xx responses are rejected before any body is read, on HTTPS and CLI-backed transports alike, closing a class of silent misrouting.
- **Proxmox VE 9.2.20 certified** — the live suite covers the 9.2 HA affinity rules endpoint, SDN zones, CRS options, and API token lifecycle against a real 9.2.20 node.
- **Dependency security updates** — httpx, httpcore, and mkdocs-material moved to security-patched releases.
- **Test harness** — the live certification suite now works from a whole-tree `pytest -m live` run; credentials are captured only when the live suite is selected and cleared at session end.
- **Container images** — Alpine package pins refreshed; image publication credentials are passed explicitly to the reusable publish workflow.

## Assets

No binary assets attached.

Source archives:

| Format |URL |
| --- | --- |
| zip | https://api.github.com/repos/emersonfelipesp/proxmox-sdk/zipball/v0.0.15 |
| tar.gz | https://api.github.com/repos/emersonfelipesp/proxmox-sdk/tarball/v0.0.15 |