Add support for Python 3.15

Author: hansott

.github/ISSUE_TEMPLATE/bug_report.md

@@ -23,7 +23,7 @@ What actually happened (include logs or error messages if possible).
 
 **Environment**
 - OS: [e.g. Ubuntu 22.04, macOS 15.0, Windows 11]
-- Language version: [e.g. 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14]
+- Language version: [e.g. 3.8, 3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15]
 - Framework: [e.g. Django, Flask, FastAPI]
 - Environment: [local, Docker, cloud, etc.]
 - Aikido Package version: [e.g. 1.2.3]

.github/workflows/unit-test.yml

@@ -12,7 +12,7 @@ jobs:
       # Don't cancel jobs if one fails
       fail-fast: false
       matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
+        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13", "3.14", "3.15"]
     steps:
     - name: Checkout code
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -84,4 +84,5 @@ jobs:
           coverage-reports/coverage-3.11/lcov.info
           coverage-reports/coverage-3.12/lcov.info
           coverage-reports/coverage-3.13/lcov.info
-          coverage-reports/coverage-3.14/lcov.info
+          coverage-reports/coverage-3.14/lcov.info
+          coverage-reports/coverage-3.15/lcov.info

README.md

@@ -64,7 +64,7 @@ Zen instruments the following AI SDKs to track which models are used and how man
 * ✅ [`boto3`](https://pypi.org/project/boto3) (AWS Bedrock)
 * ✅ [`groq`](https://pypi.org/project/groq)
 
-Zen is compatible with Python 3.8-3.14 and can run on Windows, Linux, and Mac OS X.
+Zen is compatible with Python 3.8-3.15 and can run on Windows, Linux, and Mac OS X.
 
 ## Installation
 

aikido_zen/helpers/python_version_not_supported.py

@@ -8,7 +8,7 @@ def python_version_not_supported() -> bool:
     if major != 3:
         logger.error("This version of Zen only supports Python 3")
         return True
-    if minor > 14:
-        logger.error("This version of Zen doesn't support versions above Python 3.14")
+    if minor > 15:
+        logger.error("This version of Zen doesn't support versions above Python 3.15")
         return True
     return False

aikido_zen/helpers/python_version_not_supported_test.py

@@ -5,23 +5,23 @@
 )
 
 
-def test_python_3_14_is_supported(monkeypatch):
+def test_python_3_15_is_supported(monkeypatch):
     monkeypatch.setattr(
         "aikido_zen.helpers.python_version_not_supported.sys.version_info",
-        SimpleNamespace(major=3, minor=14),
+        SimpleNamespace(major=3, minor=15),
     )
 
     assert python_version_not_supported() is False
 
 
-def test_python_3_15_is_not_supported(monkeypatch, caplog):
+def test_python_3_16_is_not_supported(monkeypatch, caplog):
     monkeypatch.setattr(
         "aikido_zen.helpers.python_version_not_supported.sys.version_info",
-        SimpleNamespace(major=3, minor=15),
+        SimpleNamespace(major=3, minor=16),
     )
 
     assert python_version_not_supported() is True
-    assert "doesn't support versions above Python 3.14" in caplog.text
+    assert "doesn't support versions above Python 3.15" in caplog.text
 
 
 def test_non_python_3_version_is_not_supported(monkeypatch, caplog):

aikido_zen/sinks/builtins_import.py

@@ -15,9 +15,10 @@ def _import(func, instance, args, kwargs, return_value):
     if not hasattr(return_value, "__package__"):
         return
 
+    if running_import_scan.get():
+        return  # Outside the try: its finally would reset the outer scan's flag
+
     try:
-        if running_import_scan.get():
-            return
         running_import_scan.set(True)
 
         name = getattr(return_value, "__package__")

aikido_zen/sinks/tests/builtins_import_test.py

@@ -1,3 +1,5 @@
+import importlib.metadata
+
 import pytest
 
 import aikido_zen
@@ -54,3 +56,35 @@ def recursive_add_package(name, version):
 
     # Restore the original method after the test
     monkeypatch.undo()
+
+
+def test_imports_during_scan_do_not_start_nested_scans(monkeypatch):
+    running = []
+    nested = []
+    original_version = importlib.metadata.version
+
+    def version_that_imports(name):
+        if running:
+            nested.append(name)
+        running.append(name)
+        try:
+            import pytest
+            import packaging
+
+            return original_version(name)
+        finally:
+            running.pop()
+
+    seen = set()
+
+    def get_package_once(name):
+        if name in seen:
+            return {"name": name}
+        seen.add(name)
+
+    monkeypatch.setattr(PackagesStore, "get_package", get_package_once)
+    monkeypatch.setattr(importlib.metadata, "version", version_that_imports)
+
+    import flask
+
+    assert nested == []

poetry.lock

@@ -49,6 +49,7 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
     "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3.15",
     "Programming Language :: Python :: 3 :: Only",
     "Topic :: Security",
 ]
@@ -61,7 +62,7 @@ homepage = "https://www.aikido.dev/runtime/firewall/"
 "Bug Bounty" = "https://app.intigriti.com/programs/aikido"
 
 [tool.poetry.dependencies]
-python = ">=3.8,<3.15"
+python = ">=3.8,<3.16"
 regex = [
     { version = "^2024.5.15", python = "<3.13" },
     { version = "^2026.8.31", python = ">=3.13" },