feat: Phase 2 Modernization: httpx2, Pydantic v2, Retry Engine, and Security Guards

.github/workflows/commit_checks.yaml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
-          python-version: '3.13'  # Specify a Python version explicitly
+          python-version: '3.14'  # Specify a Python version explicitly
       - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
 
   test:
@@ -30,7 +30,7 @@ jobs:
       fail-fast: false
       matrix:
         os: ["ubuntu-latest", "macos-latest", "windows-latest"]
-        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
     env:
       APIKEY: ${{ secrets.APIKEY }}
       DOMAIN: ${{ secrets.DOMAIN }}

.github/workflows/pr_validation.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
-          python-version: '3.13'
+          python-version: '3.14'
 
       - name: Build package
         run: |

.github/workflows/publish.yml

@@ -25,7 +25,7 @@ jobs:
       - name: Set up Python
         uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
         with:
-          python-version: '3.13'
+          python-version: '3.14'
 
       - name: Install build tools
         run: pip install --upgrade build setuptools wheel setuptools-scm twine

.github/workflows/security.yml

@@ -18,7 +18,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
       - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v5
         with:
-          python-version: "3.13"
+          python-version: "3.14"
           cache: 'pip'
       - run: python -m pip install --upgrade pip
       - run: pip install ruff bandit mypy pip-audit
@@ -51,7 +51,7 @@ jobs:
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
       - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v5
-        with: { python-version: "3.13" }
+        with: { python-version: "3.14" }
       - run: python -m pip install --upgrade pip
       - run: pip install pip-audit
       - run: pip-audit --strict

.pre-commit-config.yaml

@@ -37,6 +37,9 @@ ci:
     skip: []
     submodules: false
 
+# Run hooks on staged files by default, ignoring the commit-msg phase
+default_stages: [pre-commit]
+
 # .pre-commit-config.yaml
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks

CHANGELOG.md

@@ -2,7 +2,28 @@
 
 We [keep a changelog.](http://keepachangelog.com/)
 
-## [Unreleased]
+## [Unreleased] (v1.9.0)
+
+### Added
+
+- **IdempotencyGuard**: Implemented exactly-once email delivery mechanisms (SHA-256 fingerprinting) to prevent duplicate sends during network partitions.
+- **RetryPolicy**: Introduced a flexible retry configuration with stateless exponential backoff and jitter to mitigate the "Thundering Herd" effect.
+- **`httpx2` Compatibility**: Added native support for the modern `httpx2` engine via the `mailgun._httpx_compat.py` bridge, with graceful fallbacks.
+- **`mailgun.ext` Ecosystem**: Introduced strict Pydantic v2 payload schemas (e.g., `SendMessageSchema`).
+- **ChunkedStreamer**: Added memory-safe lazy streaming for large file attachments (up to 25MB) using 512KB partitions.
+- **SpamGuard**: Added a zero-network static HTML analyzer to preemptively flag deliverability risks (XSS, missing alt tags) before dispatching to Mailgun.
+- **IDN Routing**: Implemented `normalize_domain` to natively convert Internationalized Domain Names to safe RFC 3490 Punycode.
+- Added `DeliverabilityError` exception to handle SpamGuard rule violations.
+
+### Changed
+
+- **[BREAKING CHANGE]** Dropped support for Python 3.10. The SDK now strictly requires Python 3.11 or higher.
+- Purged the `typing-extensions` dependency from the package, replacing it with standard library `typing` equivalents (`Self`, `TypedDict`, `NotRequired`).
+
+### Fixed
+
+- Fixed strict typing issues and circular import risks by routing response contracts (`MockResponse`) strictly through `mailgun/types.py`.
+- Updated GitHub Actions CI workflows to explicitly test against Python 3.14.
 
 ## v1.8.0 - 2026-07-20