[cowan-macady]

implement ENG-9616

Checklist

• pipenv run pytest passes
• tests are included for new or changed behavior
• pre-commit run --all-files passes
• documentation (README, docstrings, examples) is changed or added

Affected client(s)

Description of change

• add new features on schema, token introspect
• update dependencies

[deepsource-io]

DeepSource Code Review

We reviewed changes in a34d2eb...618c157 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Secrets		Nov 3, 2026 9:47a.m.	Review ↗
Python		Nov 3, 2026 9:47a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[Copilot]

🟢 Approval recommended

No active review issues are recorded for the schema-version support, documentation, and maintenance updates.

No open issues 🎉

What changed in this PR

This PR extends the Python SDK’s project configuration with IKG schema-version support, expands token-introspection and audit documentation, and updates dependencies and automation.

Changes:

• Add schema-version support to synchronous and asynchronous project creation, project models, public exports, and unit tests.
• Document token-introspection validation options, audit-signing limits, and audit key availability.
• Refresh dependencies, hooks, and license reporting; enable manual workflow runs and improve release-notification handling.

File	Description
tests/​unit/​config/​test_config.py	Test schema-version serialization and project response parsing.
Pipfile.lock	Update runtime and development dependency pins.
LICENSES.md	Refresh the generated third-party license report.
indykite_sdk/​config/​models/​core.py	Define schema-version values and add the project field.
indykite_sdk/​config/​models/​__init__.py	Export IkgSchemaVersion from the models package.
indykite_sdk/​config/​client.py	Add schema-version input and expand configuration docstrings.
indykite_sdk/​config/​aio.py	Mirror configuration support and documentation for async callers.
indykite_sdk/​config/​__init__.py	Expose IkgSchemaVersion through the configuration package.
indykite_sdk/​audit/​client.py	Clarify audit key retention, availability, and retry documentation.
indykite_sdk/​audit/​aio.py	Clarify async audit key documentation.
indykite_sdk/​audit/​_ops.py	Update the project-specific key-request docstring.
.pre-commit-config.yaml	Update shared hooks and the Renovate validator.
.github/​workflows/​release-notes.yaml	Add manual runs, update token action, and refine release handling.
.github/​workflows/​pre-commit-cache.yaml	Add manual runs and update the token action.

_{Review effort: Balanced}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pytest@​9.1.1 ⏵ 9.2.0	+1
	ruff@​0.17.1 ⏵ 0.17.3	+1
	pytest-asyncio@​1.4.0 ⏵ 1.4.1.post1	+1

View full report

[Copilot]

🟢 Approval recommended

No active review issues remain for the documentation, dependency, and maintenance-workflow updates.

No open issues 🎉

_{Review effort: Balanced}