GeezerVison

Note

Medium Risk
Default fullscans.stream() behavior changes (cached URL, polling, and timeout semantics), which may affect integrations that relied on immediate failure on 202 or uncached reads.

Overview
fullscans.stream() no longer treats a single 202 Processing as failure. It hits the cached stream endpoint (?cached=true), retries while analysis runs, and returns parsed artifacts once the API responds with 200.

Polling uses a total budget (default: SDK timeout) with backoff from 5s to 10s, optional poll_* keyword args, and per-request timeouts capped by remaining budget. APITimeout is raised when results are not ready in time; auth, not-found, and quota errors still fail immediately. Transient APIFailure cases retry within the same budget.

API.do_request() gains keyword-only request_timeout for one-off limits. Org slug and scan id path segments are URL-encoded. Responses are **close()**d during polling and error paths.

Docs/changelog for 3.6.2 and a localhost SocketApiFixture plus HTTP tests cover processing, retries, timeouts, validation, and encoding.

^{Reviewed by Cursor Bugbot for commit 5a7e742. Configure here.}