Changed

• Bumped httpx to ^0.27.0, which brings in httpcore >=1.0.0 and h11 >=0.15.0. #755

Security

• Updated h11 to 0.16.0 (via httpx upgrade) to address CVE-2025-XXXX: fixed lenient parsing of chunked encoding that could allow request smuggling. #755

Changed

• Replace pkg_resources (deprecated) with importlib.metadata as the method to retrieve package version. This change removes the dependency on setuptools at runtime. #723
• Update GitHub Actions to use commit hashes instead of tags to improve security and reliability. #723

Deprecated

• BREAKING CHANGE: Drop support for Python 3.9, which has reached its end of life. #723

Removed

• Gitlint dev dependency 685

Changed

• Upgrade Click dependency 681

Changed

• Change requests to httpx. #208

Deprecated

• Drops support for Python 3.7 and Python 3.8 since their EOL were reached out already 678

Feature

• Enable the use of different content types #521

Fixed

• python -m scanapi command #501

@uesleicarvalhoo @Crocmagnon

Fixed

• Content field not rendered properly on Chrome #551

Fixed

• Custom variable evaluated when defined on the path #508
• Add missing --insecure flag to cURL command on report based on request options #555

Added

• Implement new key options to request and endpoint nodes #529

Deprecated

• Drops support for Python 3.6 since its EOL was reached out in December last year 549