feat(wsse): pure-Python WS-Security signing (no xmlsec required)

.bumpversion.cfg

@@ -1,10 +1,10 @@
 [bumpversion]
-current_version = 4.1.0
+current_version = 4.3.2
 commit = true
 tag = true
 tag_name = {new_version}
 
-[bumpversion:file:setup.py]
+[bumpversion:file:pyproject.toml]
 
 [bumpversion:file:docs/conf.py]
 

.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: [mvantellingen]

.github/workflows/python-release.yml

@@ -7,18 +7,22 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     steps:
-    - uses: actions/checkout@v2
-    - name: Set up Python 3.7
-      uses: actions/setup-python@v1
+    - uses: actions/checkout@v4
+
+    - name: Set up Python 3.12
+      uses: actions/setup-python@v5
       with:
-        python-version: 3.7
+        python-version: 3.12
+
     - name: Install build requirements
-      run: python -m pip install wheel
+      run: python -m pip install wheel build
+
     - name: Build package
-      run: python setup.py sdist bdist_wheel
+      run: python -m build
+
     - name: Publish package
-      uses: pypa/gh-action-pypi-publish@master
-      with:
-        user: __token__
-        password: ${{ secrets.pypi_password }}
+      uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/python-test.yml

@@ -1,19 +1,27 @@
 name: Python Tests
 
-on: [push]
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize]
 
 jobs:
 
   format:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
-    - name: Set up Python 3.7
-      uses: actions/setup-python@v2
+    - uses: actions/checkout@v4
+
+    - name: Set up Python 3.12
+      uses: actions/setup-python@v5
       with:
-        python-version: 3.7
+        python-version: 3.12
+
     - name: Install dependencies
       run: pip install tox
+
     - name: Validate formatting
       run: tox -e format
 
@@ -24,56 +32,78 @@ jobs:
       max-parallel: 4
       matrix:
         platform: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        # # TODO: Remove Windows exclusion when binary wheel available for lxml
+        # exclude:
+        #   - { platform: windows-latest, python-version: "3.11" }
+
 
     steps:
     - name: Install system dependencies
       if: matrix.platform == 'ubuntu-latest'
       run: |
         sudo apt-get update
         sudo apt-get install libssl-dev libxmlsec1 libxmlsec1-dev libxmlsec1-openssl libxslt1-dev pkg-config
+
     - name: Install system dependencies
       if: matrix.platform == 'macos-latest'
       run: |
         brew install libxmlsec1 libxslt pkgconfig
-    - uses: actions/checkout@v2
+
+    - uses: actions/checkout@v4
+
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
+
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install tox tox-gh-actions
+
     - name: Test with tox
       run: tox
       env:
           PLATFORM: ${{ matrix.platform }}
+
     - name: Prepare artifacts
       run: mkdir .coverage-data && mv .coverage.* .coverage-data/
-    - uses: actions/upload-artifact@master
+
+    - uses: actions/upload-artifact@v4
       with:
-        name: coverage-data
-        path: .coverage-data/
+        name: coverage-data-${{ matrix.platform }}-${{ matrix.python-version }}
+        path: .coverage-data/.coverage.*
+        include-hidden-files: true
+        retention-days: 1
 
   coverage:
     runs-on: ubuntu-latest
     needs: [test]
     steps:
-    - uses: actions/checkout@v2
-    - uses: actions/download-artifact@master
+    - uses: actions/checkout@v4
+
+    - uses: actions/download-artifact@v4
       with:
-        name: coverage-data
+        pattern: coverage-data-*
+        merge-multiple: true
         path: .
-    - name: Set up Python 3.7
-      uses: actions/setup-python@v2
+
+    - name: Set up Python 3.12
+      uses: actions/setup-python@v5
       with:
-        python-version: 3.7
+        python-version: 3.12
+
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install tox
+
     - name: Prepare Coverage report
       run: tox -e coverage-report
+
     - name: Upload to codecov
-      uses: codecov/codecov-action@v1.0.6
+      if: github.ref == 'refs/heads/main'
+      uses: codecov/codecov-action@v4
+      with:
+        token: ${{ secrets.CODECOV_TOKEN }}

CHANGES

@@ -1,4 +1,26 @@
-4.2.0 (2022-111-03)
+4.3.2 (2025-09-15)
+-----------------
+ - Support newer versions of httpx (#1447)
+
+4.3.1 (2024-10-16)
+------------------
+ - Fix regression in parsing xsd:Date with negative timezone
+
+4.3.0 (2024-10-13)
+------------------
+ - Drop support for Python 3.7 and 3.8 and add support for Python 3.12 and 3.13 (#1421, #1408)
+ - Add workaround to support date values with timezone in combination with
+   isodate 0.7.2 (#1431)
+ - Replace deprecated `datetime.datetime.utcnow()`
+ - Properly close 'file://' resources (#1339)
+ - Complete migration to pyproject.toml (remove setup.py)
+
+
+4.2.1 (2022-11-10)
+-------------------
+ - Fix error regarding closing session in async transport (#1347)
+
+4.2.0 (2022-11-03)
 -------------------
  - Drop support for Python 3.6
  - Allow embedding CDATA elements in simple types (#1339)
@@ -8,6 +30,7 @@
  - Fix IndexError when empty body response (#1287)
  - Add support for context manager on Client (#1166)
  - Allow Ws Addressing plugin to use a different URL (#1328)
+ - Accept strings for xsd base64Binary (#1072)
 
 
 4.1.0 (2021-08-15)

README.md

@@ -0,0 +1,59 @@
+# Zeep: Python SOAP client
+[![Documentation Status](https://readthedocs.org/projects/python-zeep/badge/?version=latest)](https://readthedocs.org/projects/python-zeep/)
+[![Python Tests](https://github.com/mvantellingen/python-zeep/workflows/Python%20Tests/badge.svg)](https://github.com/mvantellingen/python-zeep/actions?query=workflow%3A%22Python+Tests%22)
+[![Coverage](https://codecov.io/gh/mvantellingen/python-zeep/graph/badge.svg?token=zwew4hc8ih)](https://codecov.io/gh/mvantellingen/python-zeep)
+[![PyPI version](https://img.shields.io/pypi/v/zeep.svg)](https://pypi.python.org/pypi/zeep/)
+
+A Python SOAP client
+
+## Highlights:
+- Compatible with Python 3.9, 3.10, 3.11, 3.12, 3.13 and PyPy3
+- Built on top of lxml, requests, and httpx
+- Support for Soap 1.1, Soap 1.2, and HTTP bindings
+- Support for WS-Addressing headers
+- Support for WSSE (UserNameToken / x.509 signing)
+- Support for asyncio using the httpx module
+- Experimental support for XOP messages
+
+Please see the [documentation](http://docs.python-zeep.org/) for more information.
+
+## Status
+
+> [!NOTE]
+> I consider this library to be stable. Since no new developments happen around the SOAP specification, it won't be updated that much. Good PRs which fix bugs are always welcome, however.
+
+
+## Installation
+
+```bash
+pip install zeep
+```
+
+Zeep uses the lxml library for parsing XML. See [lxml installation requirements](https://lxml.de/installation.html).
+
+## Usage
+
+```python
+from zeep import Client
+
+client = Client('tests/wsdl_files/example.rst')
+client.service.ping()
+```
+
+To quickly inspect a WSDL file, use:
+
+```bash
+python -m zeep <url-to-wsdl>
+```
+
+Please see the [documentation](http://docs.python-zeep.org) for more information.
+
+
+# Sponsors
+[![Kraken Tech](https://camo.githubusercontent.com/ecc2b8426b961f8895e4f42741c006839e4488fbe9ba8e92cfa02d48c7fdb3f1/68747470733a2f2f7374617469632e6f63746f70757363646e2e636f6d2f6b746c2f6b72616b656e2d6c6f676f2d772d67726f75702d7365636f6e646172792d323032322e706e67)](https://github.com/octoenergy)
+
+# Support
+
+If you want to report a bug, please first read [the bug reporting guidelines](http://docs.python-zeep.org/en/master/reporting_bugs.html).
+
+Please only report bugs, not support requests, to the GitHub issue tracker.

SECURITY.md

@@ -0,0 +1,4 @@
+# Security Policy
+
+If you discover a security vulnerability, please report it by emailing to michaelvantellingen@gmail.com. 
+I take all security concerns seriously and will respond promptly to evaluate and address the issue.

docs/_templates/sidebar-intro.html

@@ -3,7 +3,7 @@
     <img class="logo" src="{{ pathto('_static/zeep-logo.png', 1) }}">
 </a>
 
-<p>Zeep is a modern SOAP client for Python</p>
+<p>Zeep is a SOAP client for Python</p>
 <p>
   <iframe src="http://ghbtns.com/github-btn.html?user=mvantellingen&repo=python-zeep&type=watch&count=true&size=large"
     allowtransparency="true" frameborder="0" scrolling="0" width="200px" height="35px"></iframe>