Aiocoap

Latest version: v0.4.14

Safety actively analyzes 720896 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 4

0.4.14

--------------

This is mainly a CLI and integration update.

Enhancements in aiocoap-client
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

* --interactive mode now takes some arguments (eg. --proxy and --credentials) both globally and per request.
Options like --version were removed from inside interactive mode.
* -v/--verbose now prints sent and received messages; add more -v to increase the log levels.
* Sufficiently many -v now produce log messages beyond DEBUG.

Dependencies
~~~~~~~~~~~~

* The websockets module is now also supported in its versions 14 and 15.
* colorlog was added as an optional dependency in the ``[prettyprint]`` feature.

Minor enhancements and fixes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Explicit string representation of CoAP option numbers was added.
* The repr of ContentFormat elide the encoding in the trivial case.
* Workarounds were dropped in the contrib/html-viewer and for websockets.
* The server example is now more explicit in its content formats.
* Testing of doctests was restored.

0.4.13

--------------

Enhancements
~~~~~~~~~~~~

* Lakers was updated to 0.5, enabling
- a larger set of CCS credentials, and
- using EDHOC message 3 without the EDHOC option optimization.
* OSCORE server contexts can now be registered at a Resource Directory, showing all resources.
* Fileserver only sends Block2 and ETag on demand; ETag length can be configured.

Breaking changes
~~~~~~~~~~~~~~~~

* Group OSCORE was updated to reflect the latest draft version -23, and thus incompatible with groups on older versions.

Minor enhancements
~~~~~~~~~~~~~~~~~~

* Logging of OSCORE contexts was enhanced; a tightly checked ``AIOCOAP_REVEAL_KEYS`` variable was introduced to avoid logging secrets in regular operation.
* CLI tools now consistently support --version.
* The DTLS test can be run as a server (like other tests).
* Various error handling fixes, especially on the shutdown path.
* Various documentation updates, addressing OpenSSF best practice concerns.
* Failed CoAP transport selection now raises a ``NoRequestInterface`` error.
* On pyodide, socket based transports are not initialized.
(They would have failed at runtime inside the standard library).
* The ``ProxyForarder`` (client side proxying) is fixed to correctly send requests cross-transport.
* The RD registrant can now use its ``link_source`` argument.

Contrib
~~~~~~~

* An HTML/WASM based CoAP viewer example was added.

0.4.12

--------------

Enhancements
~~~~~~~~~~~~

* Better errors are shown when using malformed (esp. incomplete) URIs, eg. on ``aiocoap-client hostname:port``.
* Support for ephemeral identities (``{"unauthenticated: true}``) is extended to the local side.
* OSCORE groupcomm is updated to the latest draft version.

Breaking changes
~~~~~~~~~~~~~~~~

* By updating to lakers 0.4.1, the EDHOC implementation now complies with the specification regarding credentials-by-value;
due to bugs in prior versions, this breaks EDHOC establishment with credentials-by-value with later versions.
The common case of credentials by KID is unaffected.

Bug fixes
~~~~~~~~~

* Cases of invalid URIs are reported more reliably, rather than producing incorrect requests.

Internal refactoring
~~~~~~~~~~~~~~~~~~~~

* CI and main source hosting now run on codeberg.
* Tests are made resilient to high system load.

0.4.11

--------------

New features
~~~~~~~~~~~~

* Group OSCORE is updated to draft version -21.
* max_regular_block_size_exp can now be set on remotes by the client.
This allows influencing both the Block1 and the Block2 size.
* EDHOC: Allow private keys to be generated in RAM, and specified directly in the credentials file.

Examples
~~~~~~~~

* Add EDHOC demo for Jupyter.

Minor fixes
~~~~~~~~~~~

* IP addresses are subjected to URI syntax normalization.
* Avoid mixups between TLS and non-TLS contexts.
* Send Uri-Host and Uri-Scheme in manually constructed EDHOC message.

0.4.10

--------------

New features
~~~~~~~~~~~~

* Initial experimental support for EDHOC key establishment was added.
* CLI: New aiocoap-keygen command was added.
* Credentials can be processed as CBOR Diagnostic Notation (EDN).
* aiocoap.cli.defaults can be run as a module.

Deprecations
~~~~~~~~~~~~

* OSCORE: The context argument "contextfile" was renamed to "basedir".

Minor fixes
~~~~~~~~~~~

* Many indenting and quoting changes due to the switch to enforced ruff lints and formatting.
* Various broken, missing and duplicate references fixed in the documentation.
* Doctest failure in 0.4.9 _repr_html_ was fixed.

0.4.9

-------------

This is a bugfix release to restore functionality when used through Jupyter and in Python's optimized mode.

Bug fixes
~~~~~~~~~

* enum: Fix visibility of _repr_html_ on Python versions < 3.13.
* numbers: Don't export _code, which is only present with __debug__.

Page 1 of 4

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.