2.1.0

What's Changed

Changes and improvements

• chore: document output handling and use constants by @nijel in #1501
• chore: sync with WeblateOrg/meta by @nijel in #1502
• fix(client): avoid duplicate pagination params by @nijel in #1514
• fix(deps): bump minimal requests/urllib3 by @nijel in #1516
• fix: avoid accidental http usage for tokens by @nijel in #1515
• docs: extend inline docs by @nijel in #1517
• chore: release 2.1.0 by @nijel in #1518

Dependency updates

• chore(deps): update actions/attest action to v4.1.1 by @renovate[bot] in #1503
• chore(deps): update actions/cache action to v6.1.0 by @renovate[bot] in #1504
• chore(deps): update dependency astral-sh/uv to v0.11.25 by @renovate[bot] in #1505
• chore(deps): update dependency ty to v0.0.55 by @renovate[bot] in #1506
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.2.23 by @renovate[bot] in #1508
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.20 by @renovate[bot] in #1507
• chore(deps): update pre-commit hook mongodb/kingfisher to v1.104.0 by @renovate[bot] in #1509
• chore(deps): update pre-commit hook zizmorcore/zizmor-pre-commit to v1.26.1 by @renovate[bot] in #1510
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.2.24 by @renovate[bot] in #1511
• chore(deps): update weblate/base docker tag to v2026.27.0 by @renovate[bot] in #1513

Full Changelog: 2.0.1...2.1.0

2.0.1

What's Changed

Changes and improvements

• Remove TRACE from default allowed HTTP methods by @nijel in #1368
• chore: sync with WeblateOrg/meta by @nijel in #1412
• chore: sync with WeblateOrg/meta by @nijel in #1414
• feat(ci): sign releases and publish SBOMs by @nijel in #1480
• fix: require explicit URL for unscoped API keys by @nijel in #1500

Dependency updates

• chore(deps): update dependency prek to v0.3.10 by @renovate[bot] in #1361
• chore(deps): update dependency mypy to v1.20.2 by @renovate[bot] in #1362
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.78 by @renovate[bot] in #1363
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.79 by @renovate[bot] in #1364
• chore(deps): update aquasecurity/trivy-action action to v0.36.0 by @renovate[bot] in #1365
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.80 by @renovate[bot] in #1366
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.12 by @renovate[bot] in #1369
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.81 by @renovate[bot] in #1370
• chore(deps): update pre-commit hook mongodb/kingfisher to v1.97.0 by @renovate[bot] in #1371
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.82 by @renovate[bot] in #1372
• chore(deps): update weblate/base docker tag to v2026.18.0 by @renovate[bot] in #1373
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.83 by @renovate[bot] in #1374
• chore(deps): update dependency prek to v0.3.11 by @renovate[bot] in #1375
• chore(deps): update dependency astral-sh/uv to v0.11.8 by @renovate[bot] in #1376
• chore(deps): update pre-commit hook crate-ci/typos to v1.45.2 by @renovate[bot] in #1377
• chore(deps): update dependency ty to v0.0.33 by @renovate[bot] in #1378
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.84 by @renovate[bot] in #1379
• chore(deps): update pre-commit hook crate-ci/typos to v1.46.0 by @renovate[bot] in #1380
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.85 by @renovate[bot] in #1381
• chore(deps): update pre-commit hook mongodb/kingfisher to v1.98.0 by @renovate[bot] in #1382
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.86 by @renovate[bot] in #1383
• chore(deps): update github/codeql-action action to v4.35.3 by @renovate[bot] in #1384
• chore(deps): update dependency ty to v0.0.34 by @renovate[bot] in #1385
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.87 by @renovate[bot] in #1386
• chore(deps): update dependency types-requests to v2.33.0.20260503 by @renovate[bot] in #1387
• chore(deps): update weblate/base docker tag to v2026.19.0 by @renovate[bot] in #1388
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.88 by @renovate[bot] in #1389
• chore(deps): update dependency prek to v0.3.12 by @renovate[bot] in #1391
• chore(deps): update dependency astral-sh/uv to v0.11.9 by @renovate[bot] in #1390
• chore(deps): update dependency prek to v0.3.13 by @renovate[bot] in #1392
• chore(deps): update pre-commit hook mongodb/kingfisher to v1.99.0 by @renovate[bot] in #1393
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.89 by @renovate[bot] in #1395
• chore(deps): update dependency astral-sh/uv to v0.11.10 by @renovate[bot] in #1394
• chore(deps): update dependency mypy to v2 by @renovate[bot] in #1397
• chore(deps): update dependency astral-sh/uv to v0.11.11 by @renovate[bot] in #1396
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.90 by @renovate[bot] in #1398
• chore(deps): update github/codeql-action action to v4.35.4 by @renovate[bot] in #1399
• chore(deps): update dependency types-python-dateutil to v2.9.0.20260508 by @renovate[bot] in #1400
• chore(deps): update dependency types-pyxdg to v0.28.0.20260508 by @renovate[bot] in #1401
• chore(deps): update dependency types-requests to v2.33.0.20260508 by @renovate[bot] in #1402
• chore(deps): update actions/dependency-review-action action to v5 by @renovate[bot] in #1403
• chore(deps): update dependency astral-sh/uv to v0.11.12 by @renovate[bot] in #1404
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.91 by @renovate[bot] in #1406
• chore(deps): update pre-commit hook crate-ci/typos to v1.46.1 by @renovate[bot] in #1405
• chore(deps): update weblate/base docker tag to v2026.20.0 by @renovate[bot] in #1407
• chore(deps): update dependency ty to v0.0.35 by @renovate[bot] in #1408
• chore(deps): update dependency mypy to v2.1.0 by @renovate[bot] in #1409
• chore(deps): update dependency types-requests to v2.33.0.20260513 by @renovate[bot] in #1410
• chore(deps): update dependency prek to v0.4.0 by @renovate[bot] in #1411
• chore(deps): update dependency ty to v0.0.36 by @renovate[bot] in #1413
• chore(deps): update github/codeql-action action to v4.35.5 by @renovate[bot] in #1415
• chore(deps): update dependency astral-sh/uv to v0.11.14 by @renovate[bot] in #1416
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.13 by @renovate[bot] in #1417
• chore(deps): update pre-commit hook rvben/rumdl-pre-commit to v0.1.93 by @renovate[bot] in #1418
• chore(deps): update pre-commit hook zizmorcore/zizmor-pre-commit to v1.25.2 by @renovate[bot] in #1419
• chore(deps): update dependency ty to v0.0.37 by @renovate[bot] in #1420
• chore(deps): update pre-commit hook crate-ci/typos to v1.46.2 by @renovate[bot] in #1421
• chore(deps): update weblate/base docker tag to v2026.21.0 by @renovate[bot] in #1422
• chore(deps): update dependency types-python-dateutil to v2.9.0.20260518 by @renovate[bot] in #1423
• chore(deps): update codecov/codecov-action action to v6.0.1 by @renovate[bot] in #1425
• chore(deps): update dependency types-pyxdg to v0.28.0.20260518 by @renovate[bot] in #1424
• chore(deps): update dependency types-requests to v2.33.0.20260518 by @renovate[bot] in #1426
• chore(deps): update dependency ty to v0.0.38 by @renovate[bot] in #1427
• chore(deps): update dependency prek to v0.4.1 by @renovate[bot] in #1428
• chore(deps): update actions/stale action to v10.3.0 by @renovate[bot] in #1429
• chore(deps): update dependency responses to v0.26.1 by @renovate[bot] in #1430
• chore(deps): update github/codeql-action action to v4.36.0 by @renovate[bot] in #1432
• chore(deps): update docker/login-action action to v4.2.0 by @renovate[bot] in #1431
• chore(deps): update dependency ty to v0.0.39 by @renovate[bot] in #1433
• chore(deps): update docker/setup-buildx-action action to v4.1.0 by @renovate[bot] in #1434
• chore(deps): update dependency astral-sh/uv to v0.11.16 by @renovate[bot] in #1435
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.15.14 by @renovate[bot] in #1436
• chore(deps): update pre-commit hook mongodb/kingfisher to v1.101.0 by @renovate[bot] in #1437
• chore(deps): update pre-commit hook rvben/rumdl-pre-...

2.0.0

What's Changed

Possibly breaking changes

• Renamed the retry configuration option from method_whitelist to allowed_methods.
• Tightened configuration loading: explicit --config is authoritative, missing explicit config files fail, and project discovery uses the nearest config file.
• Tightened URL, download, and output safety: invalid or cross-origin URLs are rejected, binary downloads to terminals are refused, and text, CSV, and HTML output is escaped.

Changes and improvements

• Added WLC_URL and WLC_KEY environment variable support.
• Added unit-level CLI commands.
• Updated models and statistics for the current Weblate API while preserving older statistics responses.
• Fixed retry configuration and request adapter wiring.
• Escaped generated HTML output (GHSA-gx2m-mcc2-r4p3), hardened CSV and terminal output, and redacted authorization headers from debug logs.
• Improved nested category handling, unit editing, help texts, and error messages.
• Split implementation modules, moved tests out of the installed package, and updated packaging, dependencies, Docker images, and CI.

New Contributors

• @ratatulieoi made their first contribution in #1260

Full Changelog: 1.17.2...2.0.0

1.17.2

What's Changed

Changes and improvements

• fix: sanitize server-provided paths by @nijel in #1128 (CVE-2026-23535).

Dependency updates

• chore(deps): update dependency astral-sh/uv to v0.9.25 by @renovate[bot] in #1125
• chore(deps): update dependency astral-sh/uv to v0.9.25 by @renovate[bot] in #1126
• chore(deps): update dependency ty to v0.0.12 by @renovate[bot] in #1127
• chore(deps): update dependency astral-sh/uv to v0.9.26 by @renovate[bot] in #1129
• chore(deps): update pre-commit hook astral-sh/ruff-pre-commit to v0.14.13 by @renovate[bot] in #1130

Full Changelog: 1.17.1...1.17.2

1.17.1

What's Changed

Changes and improvements

• feat: improve legacy configuration handling by @nijel in #1124

Dependency updates

• chore(deps): update github/codeql-action action to v4.31.10 by @renovate[bot] in #1121
• chore(deps): update pre-commit hook adrienverge/yamllint to v1.38.0 by @renovate[bot] in #1123

Full Changelog: 1.17.0...1.17.1

1.17.0

• Configuration change might be needed to move API keys to a new location, see https://docs.weblate.org/en/latest/wlc.html#legacy-configuration.
• Dropped support for unscoped key in configuration (CVE-2026-22251).
• Tightened hostname-based SSL verification skip (CVE-2026-22250).
• Modernized packaging.
• Improved type annotations.

Full Changelog: 1.16.1...1.17.0

1.16.1

1.16.1

• Released on 10th October 2025.
• Fixed packages publishing.

1.16

• Released on 10th October 2025.
• Fixed downloading components based on configuration.
• Improved error reporting with Weblate 5.10 and newer.
• Improved handling of categorized components.
• Dropped support for Python 3.8 and 3.9.
• Added support for Python 3.13 and 3.14.

Full Changelog: 1.15...1.16.1