Release 0.6.1 security updates

[asutermo]

Summary by CodeRabbit

• Bug Fixes
  • Updated dependencies to address known security vulnerabilities.
• Chores
  • Released version 0.6.1 with updated dependency requirements.
  • Documented the release changes in the changelog.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 5624a303-607a-4282-8ef9-8e9ae2db7ce3

📥 Commits

Reviewing files that changed from the base of the PR and between d748c5a and 8a0d53b.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• pyproject.toml

🚧 Files skipped from review as they are similar to previous changes (1)

• pyproject.toml

---

📝 Walkthrough

Walkthrough

The project version changes to 0.6.1. UV constraints set minimum versions for Click and Cryptography. The changelog records the release and dependency updates.

Changes

Release dependency update

Layer / File(s)	Summary
Version and security dependency constraints pyproject.toml, CHANGELOG.md	The project version changes to 0.6.1. UV constraints set click>=8.3.3 and cryptography>=50.0.0. The changelog records these updates.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Poem

A rabbit checks the version line,
New constraints keep the release fine.
Click and Cryptography align,
The changelog marks 0.6.1.
“Hop safely!” sings the bunny bright.

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the 0.6.1 release and the security dependency updates documented in the changeset.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch agent/security-dependency-updates

---

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@CHANGELOG.md`:
- Around line 3-8: Move the changelog introduction sentence “Notable additions,
fixes, or breaking changes to the Freeplay SDK.” above the “## [0.6.1]” release
heading, keeping it as global introductory text before all release entries.

In `@pyproject.toml`:
- Around line 28-29: Update the Click entry in [project].dependencies to the
published range click>=8.3.3,<9.0.0, then regenerate uv.lock. Keep cryptography
out of freeplay’s runtime dependency metadata unless it is required at runtime.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e3259037-a706-4152-9146-24479e43c2c1

📥 Commits

Reviewing files that changed from the base of the PR and between 9f55a5c and d748c5a.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• CHANGELOG.md
• pyproject.toml

[callingmedic911]

Can you address the CR comment https://github.com/freeplayai/freeplay-python/pull/62/changes#r3737761341