unstale

pypi / wlc

wlc

What changed in wlc 1 to 3, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-29.

8 breaking8 security1 performance7 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.9 on npm

wlc 314 changes

Breaking changes 7

  • Object paths are constrained to the selected API collection, and traversal and URL syntax are rejected.

    3.1.0release notes

  • API model objects now inherit from UserDict rather than being dict instances; use get_data() or dict(obj.items()) when a plain dictionary is required.

    3.0.0release notes

  • Cyclic category hierarchies and category nesting deeper than three levels are now rejected.

    3.0.0release notes

  • Client construction, request options, project and language creation, source string creation, upload and download options, throttling error construction, and CLI entry point options now require keyword arguments.

    3.0.0release notes

  • Minimum dependency versions were raised to exclude vulnerable releases.

    3.0.0release notes

  • Returns a pathlib.Path instead of a string when a file is found.

    3.0.0release notes

  • Returns a pathlib.Path instead of a string when a file is found.

    3.0.0release notes

Security 3

  • The CA certificate bundle was updated.

    3.1.0release notes

  • CSV formula prefixes hidden behind leading vertical tabs or form feeds are neutralized.

    3.1.0release notes

  • Configured API keys are masked in handled CLI errors.

    3.1.0release notes

Performance 1

  • Listings stream in all output formats to reduce memory use; later failures can leave partial output, so check the command's exit status before treating it as complete.

    3.1.0release notes

Fixes and other changes 3

  • Missing or empty pagination links are handled, and malformed link values are rejected.

    3.1.0release notes

  • Malformed server timestamps are reported safely.

    3.1.0release notes

  • Unicode display controls are escaped on terminals.

    3.1.0release notes

wlc 27 changes

Breaking changes 1

  • CLI request errors no longer expose API keys, and API keys containing line breaks are rejected.

    2.2.1release notes

Security 2

Fixes and other changes 4

  • Component download output paths are validated before data is fetched.

    2.2.1release notes

  • Fixed component downloads when a slug contains repository.

    2.2.1release notes

  • Local filesystem failures are reported as CLI errors.

    2.2.1release notes

  • An already resolved component is no longer relisted.

    2.2.1release notes

wlc 13 changes

Security 3

  • Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command

    1.17.2security advisory

  • Weblate command-line client susceptible to SSL verification skip

    1.17.0security advisory

  • Weblate wlc has insecure API key configuration

    1.17.0security advisory