From c9bbc52362c3360f7a8980c3d9fc2838a1650f3b Mon Sep 17 00:00:00 2001 From: Kyle McCullen Date: Sat, 29 Aug 2026 11:09:39 -0400 Subject: [PATCH] release 3.2.1 --- CHANGELOG.md | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7cb2c50..258e0bd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,7 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -## [Unreleased] +## [3.2.1] - 2026-08-29 ### Fixed - `get_payments_by_qr_code` now verifies that the plaintext Bitcoin address parsed from a scanned QR code matches the address decrypted via `branta_id`/`branta_secret`, raising `BrantaPaymentException` with `reason=BrantaPaymentExceptionReason.Tampered` on mismatch. Closes a gap where an attacker could swap the visible address in a `bitcoin:` URI while leaving a legitimate, verified `branta_id`/`branta_secret` pair untouched (ported from `branta-js` 3.2.1) diff --git a/pyproject.toml b/pyproject.toml index 2f7f02a..922de61 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "hatchling.build" [project] name = "branta" -version = "3.2.0" +version = "3.2.1" description = "Python SDK for the Branta V2 API — payment destination lookup and registration with zero-knowledge encryption support" readme = "README.md" license = { text = "MIT" }