Skip to content

feat(user-agent): rename the client to socket-python-cli - #320

Merged
lelia merged 3 commits into
mainfrom
ua/lowercase-client-name
Nov 3, 2026
Merged

lelia merged 3 commits into
mainfrom
ua/lowercase-client-name

Conversation

@jdalton

@jdalton John-David Dalton (jdalton) commented Aug 27, 2026 •

Copy link
Copy Markdown
Contributor

Use one lowercase socket-python-cli User-Agent name across direct API requests and requests the CLI sends through the Python SDK, so attribution stays consistent. Pin the published Python SDK (socketdev) to 3.6.2, which rejects retired API credentials before use.

The backend accepts both SocketPythonCLI/ and socket-python-cli/ as py-cli, and that support is deployed. This CLI rename can ship independently of the later standalone SDK/Basics attribution work.

Both changes are included in 2.11.11. The changelog and package-constant merge conflicts are resolved, and the existing Coana 15.14.1 release notes are preserved.

Validation

  • All 733 unit and core tests passed in an isolated environment installed from uv.lock, using the published SDK 3.6.2. Prepared-request regression coverage verifies the lowercase CLI identity on both direct and SDK calls.
  • Runtime version, pyproject.toml, and uv.lock all agree on 2.11.11.
  • uv lock --locked --offline, repository-wide Ruff, the CI import smoke check, and git diff --check passed.
  • The Docker release dependency export selects socketdev==3.6.2 with hashes. The lockfile update changes only the SDK artifacts and the project's SDK requirement; other package versions are preserved.
  • The fourth-wall audit found no added code comments or docstrings to revise.

Release readiness

SDK 3.6.2 is published and pinned; no SDK version selection remains outstanding. Backend compatibility is already deployed. Merge after the required review approval and CI checks for the latest commit pass, then tag v2.11.11 for release.

@jdalton
John-David Dalton (jdalton) requested a review from a team as a code owner August 27, 2026 20:04
@lelia lelia self-assigned this Aug 28, 2026
lelia
lelia previously requested changes Sep 2, 2026

@lelia lelia left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

John-David Dalton (@jdalton) thanks for adding this, but I think we need to implement backend changes first before we rename on the client side.

I confirmed that backend attribution currently matches user-agents on exact, case sensitive prefixes, and currently only SocketPythonCLI/ is registered, meaning that this rename will cause us to silently lose Python CLI attribution as users upgrade.

By the way, the same class of change needs to take place on the SDK side, too - in fact, the SocketSDKPython/ user-agent appears to have never been registered on the backend. We may as well fix the gap everywhere in one go, if you're up for it.

@jdalton

This comment was marked as outdated.

Use one client name for CLI and SDK requests. Preserve the current release version and record the change under Unreleased.
@jdalton

Copy link
Copy Markdown
Contributor Author

The backend now recognizes both CLI prefixes and SocketSDKPython/, with regression coverage. I refreshed this branch onto main; all 582 unit tests pass. Please take another look. Production deployment still needs confirmation before release.

@jdalton
John-David Dalton (jdalton) dismissed lelia’s stale review October 29, 2026 15:51

Backend support for both CLI names and the SDK name has landed. The branch is refreshed and CI passes. Requesting a fresh review.

@jdalton
John-David Dalton (jdalton) requested review from lelia and removed request for lelia October 29, 2026 15:52
Merge current main, preserve the 2.11.11 Coana release notes,
and use the lowercase CLI identity for direct and SDK calls.
Verify both request paths at the HTTP transport boundary.

Assisted-by: Codex:GPT-6

@lelia lelia left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[agent] Refreshed this PR onto current main and resolved the merge conflicts. The User-Agent change is included in 2.11.11; the runtime version, pyproject.toml, and uv.lock all agree, and the existing Coana release notes are preserved. All 584 unit tests passed, including prepared-request coverage for both direct API calls and SDK calls. Ruff and the locked dependency check also passed.

Backend deployment evidence: I verified that the depscan change accepting both SocketPythonCLI/ and socket-python-cli/ as py-cli was confirmed deployed. The CLI rename therefore has no dependency on the upcoming SDK/Basics attribution rollout (TBD).

The SDK dependency bump remains pending selection of the target version; this PR currently retains socketdev==3.6.1. After that update, rerun CI before tagging v2.11.11.

Pin the published SDK and refresh its locked artifacts.
Include the upgrade in the 2.11.11 release notes.

Assisted-by: Codex:GPT-6
@lelia
lelia deployed to socket-firewall November 3, 2026 23:23 — with GitHub Actions Active
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​socketdev@​3.6.1 ⏵ 3.6.298 +1100100100100

View full report

@socket-security-staging

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​socketdev@​3.6.1 ⏵ 3.6.298 +1100100100100

View full report

@lelia
lelia merged commit 911331c into main Nov 3, 2026
32 checks passed

This branch was successfully deployed

1 active deployment
socket-firewall — 390dba83 Deployed Nov 3, 2026 by lelia via python-sfw-smoke-enterprise #549
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants