Release v0.12.0

Author: ericmj

CHANGELOG.md

@@ -1,9 +1,23 @@
 # CHANGELOG
 
+## v0.12.0 (2025-10-26)
+
+* Add short URL API `hex_api_short_url:create/2`.
+* Add OAuth API:
+  * `hex_api_oauth:device_authorization/3,4`
+  * `hex_api_oauth:poll_device_token/3`
+  * `hex_api_oauth:refresh_token/3`
+  * `hex_api_oauth:revoke_token/3`
+  * `hex_api_oauth:client_credentials_token/4,5`
+* Support 2FA authentication, any API request can now return `{error, otp_required | invalid_totp}`
+  if 2FA is required. The config option `api_otp` can be used to provide the TOTP code.
+* Differentiate between registry verification errors. `{error, unverified}` has been replaced with
+  `{error, bad_repo_name | bad_signature}`.
+* Support nested maps in `extra` package metadata field.
+
 ## v0.11.0 (2024-12-03)
 
 * Use secure SSL defaults for OTP 25+.
-
 * Start inets and ssl applications.
 
 ## v0.10.3 (2024-06-28)

README.md

@@ -92,7 +92,7 @@ Publish package tarball:
 
 ### Two-Factor Authentication
 
-When using OAuth tokens, two-factor authentication may be required. If required, the server will return `{error, otp_required}` and you should retry the request with the TOTP code via the `api_otp` configuration option:
+When using OAuth tokens, two-factor authentication may be required. If required, the server will return `{error, otp_required}` and you should retry the request with the TOTP code via the `api_otp` configuration option. If the TOTP code is incorrect, the server will return `{error, invalid_totp}` and you should retry with the correct TOTP code.
 
 ```erlang
 %% First attempt without OTP
@@ -101,6 +101,10 @@ case hex_api_release:publish(Config, Tarball) of
         %% Retry with TOTP code
         ConfigWithOTP = Config#{api_otp := <<"123456">>},
         hex_api_release:publish(ConfigWithOTP, Tarball);
+    {error, invalid_totp} ->
+        %% Retry with correct TOTP code
+        ConfigWithOTP = Config#{api_otp := <<"123456">>},
+        hex_api_release:publish(ConfigWithOTP, Tarball);
     Result ->
         Result
 end.
@@ -217,7 +221,7 @@ Add to `rebar.config`:
 
 ```erlang
 {deps, [
-  {hex_core, "0.11.0"}
+  {hex_core, "0.12.0"}
 ]}
 ```
 
@@ -228,7 +232,7 @@ Add to `mix.exs`:
 ```elixir
 defp deps do
   [
-    {:hex_core, "~> 0.11.0"}
+    {:hex_core, "~> 0.12.0"}
   ]
 end
 ```

src/hex_core.app.src

@@ -1,10 +1,10 @@
 {application, hex_core, [
     {description, "Reference implementation of Hex specifications"},
-    {vsn, "0.11.0"},
+    {vsn, "0.12.0"},
     {registered, []},
     {applications, [kernel, stdlib, inets, ssl]},
     {licenses, ["Apache-2.0"]},
-    {include_files, ["CHANGELOG.md"]},
+    {include_paths, ["CHANGELOG.md"]},
     {links, [
         {"GitHub", "https://github.com/hexpm/hex_core"},
         {"Hex specifications", "https://github.com/hexpm/specifications"}

src/hex_core.hrl

@@ -1 +1 @@
--define(HEX_CORE_VERSION, "0.11.0").
+-define(HEX_CORE_VERSION, "0.12.0").

src/hex_http.erl

@@ -13,7 +13,9 @@
 -type headers() :: #{binary() => binary()}.
 -export_type([headers/0]).
 -type body() :: {ContentType :: binary(), Body :: binary()} | undefined.
+-export_type([body/0]).
 -type adapter_config() :: map().
+-export_type([adapter_config/0]).
 
 -callback request(method(), URI :: binary(), headers(), body(), adapter_config()) ->
     {ok, {status(), headers(), binary()}}