v0.7.0

Minor Changes

• Added fee payer policy enforcement for sponsored Tempo transactions, validating gas limits, fee caps, total fee budgets, validity windows, and access lists against per-chain policy defaults. Added call pattern validation to restrict sponsored transactions to approved selectors (transfers, and optionally an approve+swap prefix via the stablecoin DEX). (by @brendanryan, #135)

Patch Changes

• Fixed client chain policy enforcement to reject challenges that attempt to switch the client to a different chain. Clients pinned to a chain (via chain_id or rpc_url) now raise a ValueError immediately instead of silently following the challenge's chainId. (by @brendanryan, #135)

What's Changed

• perf: cache Tempo chain IDs per RPC URL by @brendanjryan in #114
• perf: use eth_sendRawTransactionSync in Tempo verify by @brendanjryan in #115
• chore: harden CI workflows and add Dependabot by @grandizzy in #117
• chore: release v0.6.1 by @github-actions[bot] in #116
• fix: deserialize key_authorization in fee payer envelope decode by @decofe in #120
• chore: standardize dependabot cooldowns to weekly by @decofe in #121
• chore: switch to OIDC trusted publishing and harden workflows by @decofe in #119
• chore(deps): bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #122
• fix: default chain_id to 4217 (mainnet), remove hardcoded fee payer by @brendanjryan in #125
• ci: run integration tests against live Tempo container, remove mocks by @brendanjryan in #127
• chore: release v0.6.2 by @github-actions[bot] in #124
• fix: accept attribution memos in pull-mode preflight by @brendanjryan in #130
• chore: release v0.6.3 by @github-actions[bot] in #131
• chore(deps): bump the actions group with 3 updates by @dependabot[bot] in #132
• fix: enforce pympp client chain policy by @brendanjryan in #134
• fee-payer: enforce call pattern and gas policy by @brendanjryan in #135
• chore: release v0.7.0 by @github-actions[bot] in #136
• chore(deps): bump wevm/changelogs from a5032a56dabbb6e8bd7dc1847bde11d755be4c52 to 056ab043d7affcd6871e8d972b5b5362e7349b57 in the actions group by @dependabot[bot] in #133
• fix: align sponsored tempo tx fees with policy by @brendanjryan in #123
• ci: fix PyPI publish 403 by granting OIDC perms to changelogs job by @brendanjryan in #137
• ci: use OIDC trusted publishing via wevm/changelogs by @brendanjryan in #138

New Contributors

• @grandizzy made their first contribution in #117
• @dependabot[bot] made their first contribution in #122

Full Changelog: v0.6.0...v0.7.0