5.8.1
(chore): Tighten the generated urllib3 dev-dependency pin to >=2.6.3,<3.0.0
(Python >= 3.9) to address CVE-2026-21441 and several additional
HIGH-severity urllib3 advisories. Projects still supporting Python 3.8
fall back to the tightest safe constraint available for the 1.x line.
5.8.0
(feat): Support omitting username or password from basic auth when configured via
usernameOmit or passwordOmit in the IR. Omitted fields are removed from
the SDK’s public API and treated as empty strings internally (e.g., omitting
password encodes username:, omitting username encodes :password). When
both are omitted, the Authorization header is skipped entirely.