[SizzleUnrlsd]

Release 0.20.0: the keyword_name advisory condition and the key taint behind it (#193, #196), so a curated entry point can say the attacker must choose a keyword name of the call, as Django's ORM takes column aliases and lookups; Arguments.keyword_unpacked and the folding of a ** literal with constant keys into the keywords, which changes the cache format.

Advisories

• An advisory condition of kind keyword_name: met when the attacker's input is passed as the keys of a ** mapping, pending when the mapping's keys are not established, contradicted by a call writing every keyword name (ruled_out names them).

Analysis

• The keys of a mapping carry taint of their own, apart from its values, for a dict literal, dict(...), a comprehension and a subscript assignment; {**d} copies it.

Plugins

• Arguments.keyword_unpacked; a ** literal with constant keys that nothing else uses is recorded as its keywords. The cache format becomes 12.

Changes

• CHANGELOG.md: Unreleased becomes 0.20.0 (2026-09-30).
• pyproject.toml, src/coretrace_python/__init__.py: 0.20.0, checked equal.
• docs/usage.md: the three version examples.
• tests/test_release.py: 0.19.0 becomes 0.20.0 on line 33 only, as authorized once feat: taint the keys of a **mapping as the keyword names of the call #196 was merged.

Verification

tests/test_release.py, tests/test_docs.py and tests/test_packaging.py: 11 passed, 2 skipped in 0.97s. Full suite under Python 3.12, regression corpus excluded: 1581 passed, 2 skipped, 19 deselected in 143.48s (0:02:23). ruff check passes. The regression corpus ran green on main at d3d5f7e, the code this release ships.