From fd200cf51eb8887f8e8247412efc87b89ac07fd3 Mon Sep 17 00:00:00 2001
From: Zhiwei Liang <121905282+zliang-akamai@users.noreply.github.com>
Date: Wed, 22 Jul 2026 11:32:38 -0400
Subject: [PATCH 01/10] fix: prevent GitHub Actions script injection (#718)

---
 .github/workflows/e2e-test-pr.yml | 6 +++++-
 .github/workflows/e2e-test.yml    | 6 +++++-
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/e2e-test-pr.yml b/.github/workflows/e2e-test-pr.yml
index f470c3a6e..803285c32 100644
--- a/.github/workflows/e2e-test-pr.yml
+++ b/.github/workflows/e2e-test-pr.yml
@@ -112,9 +112,13 @@ jobs:
         run: |
           timestamp=$(date +'%Y%m%d%H%M')
           report_filename="${timestamp}_sdk_test_report.xml"
-          make test-int RUN_DB_FORK_TESTS=${{ github.event.inputs.run_db_fork_tests }} RUN_DB_TESTS=${{ github.event.inputs.run_db_tests }} RUN_ACLP_LOGS_STREAM_TESTS=${{ github.event.inputs.run_aclp_logs_stream_tests }} TEST_ARGS="--junitxml=${report_filename}" TEST_SUITE="${{ github.event.inputs.test_suite }}"
+          make test-int RUN_DB_FORK_TESTS="$RUN_DB_FORK_TESTS" RUN_DB_TESTS="$RUN_DB_TESTS" RUN_ACLP_LOGS_STREAM_TESTS="$RUN_ACLP_LOGS_STREAM_TESTS" TEST_ARGS="--junitxml=${report_filename}" TEST_SUITE="$TEST_SUITE"
         env:
           LINODE_TOKEN: ${{ secrets.LINODE_TOKEN }}
+          RUN_DB_FORK_TESTS: ${{ github.event.inputs.run_db_fork_tests }}
+          RUN_DB_TESTS: ${{ github.event.inputs.run_db_tests }}
+          RUN_ACLP_LOGS_STREAM_TESTS: ${{ github.event.inputs.run_aclp_logs_stream_tests }}
+          TEST_SUITE: ${{ github.event.inputs.test_suite }}
 
       - name: Upload test results
         if: always() && github.repository == 'linode/linode_api4-python' && (github.event_name == 'pull_request' || (github.event_name == 'workflow_dispatch' && inputs.test_report_upload == 'true'))
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index aea007e54..3a05577d0 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -107,9 +107,13 @@ jobs:
         run: |
           timestamp=$(date +'%Y%m%d%H%M')
           report_filename="${timestamp}_sdk_test_report.xml"
-          make test-int RUN_DB_FORK_TESTS=${{ github.event.inputs.run_db_fork_tests }} RUN_DB_TESTS=${{ github.event.inputs.run_db_tests }} RUN_ACLP_LOGS_STREAM_TESTS=${{ github.event.inputs.run_aclp_logs_stream_tests }} TEST_SUITE="${{ github.event.inputs.test_suite }}" TEST_ARGS="--junitxml=${report_filename}"
+          make test-int RUN_DB_FORK_TESTS="$RUN_DB_FORK_TESTS" RUN_DB_TESTS="$RUN_DB_TESTS" RUN_ACLP_LOGS_STREAM_TESTS="$RUN_ACLP_LOGS_STREAM_TESTS" TEST_SUITE="$TEST_SUITE" TEST_ARGS="--junitxml=${report_filename}"
         env:
           LINODE_TOKEN: ${{ env.LINODE_TOKEN }}
+          RUN_DB_FORK_TESTS: ${{ github.event.inputs.run_db_fork_tests }}
+          RUN_DB_TESTS: ${{ github.event.inputs.run_db_tests }}
+          RUN_ACLP_LOGS_STREAM_TESTS: ${{ github.event.inputs.run_aclp_logs_stream_tests }}
+          TEST_SUITE: ${{ github.event.inputs.test_suite }}
 
       - name: Upload Test Report as Artifact
         if: always()

From 9b2e3ce8ec90b7e06a20935af3bd5dd748552adb Mon Sep 17 00:00:00 2001
From: Zhiwei Liang <121905282+zliang-akamai@users.noreply.github.com>
Date: Wed, 22 Jul 2026 11:32:49 -0400
Subject: [PATCH 02/10] feat: add security release label (#719)

---
 .github/labels.yml  | 3 +++
 .github/release.yml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/.github/labels.yml b/.github/labels.yml
index 83989042c..f08a1ae6e 100644
--- a/.github/labels.yml
+++ b/.github/labels.yml
@@ -26,6 +26,9 @@
 - name: breaking-change
   description: for breaking changes in the changelog.
   color: ff0000
+- name: security
+  description: for security fixes and improvements in the changelog.
+  color: AA1111
 - name: ignore-for-release
   description: PRs you do not want to render in the changelog
   color: 7b8eac
diff --git a/.github/release.yml b/.github/release.yml
index a2318fa64..5bf07fc08 100644
--- a/.github/release.yml
+++ b/.github/release.yml
@@ -9,6 +9,9 @@ changelog:
     - title: ⚠️ Breaking Change
       labels:
         - breaking-change
+    - title: 🔒 Security Fixes
+      labels:
+        - security
     - title: 🐛 Bug Fixes
       labels:
         - bugfix

From 6a16a6f19c6ebf9c4cfa613a84561ebefb6f81d2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Jul 2026 12:54:26 +0200
Subject: [PATCH 03/10] build(deps): bump pypa/gh-action-pypi-publish from
 1.14.0 to 1.14.1 (#720)

Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.1.
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...ba38be9e461d3875417946c167d0b5f3d385a247)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pypi-publish
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/publish-pypi.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/publish-pypi.yaml b/.github/workflows/publish-pypi.yaml
index 089b665ef..22c0192e5 100644
--- a/.github/workflows/publish-pypi.yaml
+++ b/.github/workflows/publish-pypi.yaml
@@ -28,4 +28,4 @@ jobs:
           LINODE_SDK_VERSION: ${{ github.event.release.tag_name }}
 
       - name: Publish the release artifacts to PyPI
-        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # pin@release/v1.14.0
+        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # pin@release/v1.14.1

From 2020c67fedf39f8aea83b9a601002cd1732bc43a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 31 Jul 2026 00:01:20 -0400
Subject: [PATCH 04/10] build(deps): bump slackapi/slack-github-action from 3
 to 4 (#721)

Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 3 to 4.
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/e2e-test.yml             | 4 ++--
 .github/workflows/nightly-smoke-tests.yml  | 2 +-
 .github/workflows/release-notify-slack.yml | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 3a05577d0..48165f09d 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -253,7 +253,7 @@ jobs:
     steps:
       - name: Notify Slack
         id: main_message
-        uses: slackapi/slack-github-action@v3
+        uses: slackapi/slack-github-action@v4
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}
@@ -285,7 +285,7 @@ jobs:
 
       - name: Test summary thread
         if: success()
-        uses: slackapi/slack-github-action@v3
+        uses: slackapi/slack-github-action@v4
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/nightly-smoke-tests.yml b/.github/workflows/nightly-smoke-tests.yml
index 42d153d89..68e138e4d 100644
--- a/.github/workflows/nightly-smoke-tests.yml
+++ b/.github/workflows/nightly-smoke-tests.yml
@@ -45,7 +45,7 @@ jobs:
 
       - name: Notify Slack
         if: always() && github.repository == 'linode/linode_api4-python'
-        uses: slackapi/slack-github-action@v3
+        uses: slackapi/slack-github-action@v4
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/release-notify-slack.yml b/.github/workflows/release-notify-slack.yml
index aa21d80e5..e6ba97c1b 100644
--- a/.github/workflows/release-notify-slack.yml
+++ b/.github/workflows/release-notify-slack.yml
@@ -11,7 +11,7 @@ jobs:
     steps:
       - name: Notify Slack - Main Message
         id: main_message
-        uses: slackapi/slack-github-action@v3
+        uses: slackapi/slack-github-action@v4
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}

From d212d1b4b323e1bf843389138791fe9cabc2ac49 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 31 Jul 2026 16:13:55 -0400
Subject: [PATCH 05/10] build(deps): bump actions/setup-python from 6 to 7
 (#722)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ci.yml                      | 4 ++--
 .github/workflows/e2e-test-pr.yml             | 4 ++--
 .github/workflows/e2e-test.yml                | 6 +++---
 .github/workflows/nightly-smoke-tests.yml     | 2 +-
 .github/workflows/publish-pypi.yaml           | 2 +-
 .github/workflows/release-cross-repo-test.yml | 2 +-
 6 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 55fb91289..d65acf9e6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -45,7 +45,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: setup python 3
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
@@ -62,7 +62,7 @@ jobs:
         python-version: ['3.10', '3.11', '3.12', '3.13', '3.14']
     steps:
       - uses: actions/checkout@v7
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
       - name: Run tests
diff --git a/.github/workflows/e2e-test-pr.yml b/.github/workflows/e2e-test-pr.yml
index 803285c32..d89cda3b1 100644
--- a/.github/workflows/e2e-test-pr.yml
+++ b/.github/workflows/e2e-test-pr.yml
@@ -96,7 +96,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
@@ -196,7 +196,7 @@ jobs:
 
     steps:
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml
index 48165f09d..46742cbae 100644
--- a/.github/workflows/e2e-test.yml
+++ b/.github/workflows/e2e-test.yml
@@ -87,7 +87,7 @@ jobs:
           submodules: 'recursive'
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ inputs.run-eol-python-version == 'true' && env.EOL_PYTHON_VERSION || inputs.python-version || env.DEFAULT_PYTHON_VERSION }}
 
@@ -161,7 +161,7 @@ jobs:
 
     steps:
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
@@ -210,7 +210,7 @@ jobs:
           name: test-report-file
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
diff --git a/.github/workflows/nightly-smoke-tests.yml b/.github/workflows/nightly-smoke-tests.yml
index 68e138e4d..e36a0b8af 100644
--- a/.github/workflows/nightly-smoke-tests.yml
+++ b/.github/workflows/nightly-smoke-tests.yml
@@ -24,7 +24,7 @@ jobs:
           ref: dev
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
diff --git a/.github/workflows/publish-pypi.yaml b/.github/workflows/publish-pypi.yaml
index 22c0192e5..fb69f9f7b 100644
--- a/.github/workflows/publish-pypi.yaml
+++ b/.github/workflows/publish-pypi.yaml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
diff --git a/.github/workflows/release-cross-repo-test.yml b/.github/workflows/release-cross-repo-test.yml
index 9a3470e58..be2eaba68 100644
--- a/.github/workflows/release-cross-repo-test.yml
+++ b/.github/workflows/release-cross-repo-test.yml
@@ -25,7 +25,7 @@ jobs:
         run: sudo apt-get install -y build-essential
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.10'
 

From 89e5b3f78fe4de2d8d182d9c6d83a4731ddfadc8 Mon Sep 17 00:00:00 2001
From: Lena Garber <114949949+lgarber-akamai@users.noreply.github.com>
Date: Mon, 3 Aug 2026 15:11:21 -0400
Subject: [PATCH 06/10] Retry on 504s in integration test suite; resolve VPU
 availability dynamically (#727)

---
 test/integration/conftest.py                  |  1 +
 test/integration/models/linode/test_linode.py | 16 ++++++++++++++--
 2 files changed, 15 insertions(+), 2 deletions(-)

diff --git a/test/integration/conftest.py b/test/integration/conftest.py
index a210fc20f..d81360b97 100644
--- a/test/integration/conftest.py
+++ b/test/integration/conftest.py
@@ -286,6 +286,7 @@ def test_linode_client():
         token,
         base_url=api_url,
         ca_path=api_ca_file,
+        retry_statuses=[504],
     )
     return client
 
diff --git a/test/integration/models/linode/test_linode.py b/test/integration/models/linode/test_linode.py
index 1ef129bf1..55ae68880 100644
--- a/test/integration/models/linode/test_linode.py
+++ b/test/integration/models/linode/test_linode.py
@@ -23,6 +23,7 @@
     Type,
 )
 from linode_api4.objects.linode import InstanceDiskEncryptionType, MigrationType
+from linode_api4.objects.region import RegionAvailabilityEntry
 
 
 @pytest.fixture(scope="session")
@@ -119,12 +120,23 @@ def linode_and_vpc_for_legacy_interface_tests_offline(
 @pytest.fixture(scope="session")
 def linode_for_vpu_tests(test_linode_client, e2e_test_firewall):
     client = test_linode_client
-    region = "us-lax"
+    vpu_type = "g1-accelerated-netint-vpu-t1u1-s"
+
+    availability = client.regions.availability(
+        RegionAvailabilityEntry.filters.plan == vpu_type
+    )
+
+    region = next(
+        (entry.region for entry in availability if entry.available), None
+    )
+
+    if region is None:
+        pytest.skip("No VPU capacity is currently available")
 
     label = get_test_label(length=8)
 
     linode_instance = client.linode.instance_create(
-        "g1-accelerated-netint-vpu-t1u1-s",
+        vpu_type,
         region,
         image="linode/debian12",
         label=label,

From 9530b7e5de45b11e066d89e8acdbc75af995e542 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 13:19:13 -0400
Subject: [PATCH 07/10] build(deps): bump github/codeql-action from 4 to 4.37.4
 (#726)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.37.4.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 64e33daa1..9b78456f2 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,13 +26,13 @@ jobs:
       uses: actions/checkout@v7
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.37.4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
         queries: security-and-quality
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.37.4
       with:
         category: "/language:${{matrix.language}}"

From 6937c32ef8da09d7e3d51d6c3067b7acc7c436ac Mon Sep 17 00:00:00 2001
From: Zhiwei Liang <121905282+zliang-akamai@users.noreply.github.com>
Date: Tue, 4 Aug 2026 13:19:31 -0400
Subject: [PATCH 08/10] TPT-4578: Add community contribution and hotfix labels
 (#723)

---
 .github/labels.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/labels.yml b/.github/labels.yml
index f08a1ae6e..bc189cd77 100644
--- a/.github/labels.yml
+++ b/.github/labels.yml
@@ -29,6 +29,12 @@
 - name: security
   description: for security fixes and improvements in the changelog.
   color: AA1111
+- name: community-contribution
+  description: contributions from the community.
+  color: 22ee47
+- name: hotfix
+  description: urgent fixes for production issues.
+  color: ff0000
 - name: ignore-for-release
   description: PRs you do not want to render in the changelog
   color: 7b8eac

From 11a1b00ad82c45a855f3dc055d581683098c61fd Mon Sep 17 00:00:00 2001
From: Zhiwei Liang <121905282+zliang-akamai@users.noreply.github.com>
Date: Tue, 4 Aug 2026 16:41:08 -0400
Subject: [PATCH 09/10] docs: add Agent Guide with source of truth,
 architecture, testing, and PR guidelines (#724)

---
 AGENTS.md | 71 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 AGENTS.md

diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 000000000..8cc3170c5
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,71 @@
+# Agent Guide
+
+## Source of Truth
+
+- This is the official synchronous Python SDK for the Linode API. Supported
+  Python versions come from [pyproject.toml](pyproject.toml) (`>=3.10`); do not
+  infer support from the older environment names still present in [tox.ini](tox.ini).
+- Make changes only in canonical source trees such as `linode_api4/`, `test/`,
+  `docs/`, `examples/`, and `.github/`. Do not edit generated copies or output in
+  `build/`, `dist/`, `docs/build/`, `docs/_build/`, or `linode_api4.egg-info/`.
+- `linode_api4/version.py` is generated by `make create-version` and `make build`.
+  Do not hand-edit it for ordinary feature work.
+- Use [README.rst](README.rst) for setup and test details and
+  [CONTRIBUTING.md](CONTRIBUTING.md) for contribution policy. Keep this file
+  limited to guidance that is easy to miss while navigating the repository.
+
+## Architecture and Implementation
+
+- `linode_api4/linode_client.py` owns HTTP behavior and wires API groups onto
+  `LinodeClient`; `linode_api4/groups/` exposes operations; `linode_api4/objects/`
+  defines resource models; `linode_api4/paginated_list.py` handles collection
+  pagination.
+- Follow the nearest existing group method, model, and unit test before adding a
+  new pattern. Collection methods normally use `client._get_and_filter(...)`;
+  create/update/delete methods use the client's request helpers and return model
+  objects where appropriate.
+- Models are lazy-loaded, and reading an unknown or stale property may issue an
+  API request. Read [docs/guides/core_concepts.rst](docs/guides/core_concepts.rst)
+  before changing model properties, relationships, filtering, or pagination.
+- New public models must be exported from `linode_api4/objects/__init__.py`. New
+  groups must be exported from `linode_api4/groups/__init__.py` and wired into
+  `LinodeClient`. Preserve public API compatibility unless the task explicitly
+  requires a breaking change.
+- Public behavior belongs in Sphinx-compatible docstrings and, when needed, the
+  source files under `docs/`. Never edit rendered documentation.
+
+## Tests
+
+- Start with the narrowest relevant unit test, for example
+  `python -m pytest test/unit/objects/linode_test.py -k test_name`. Run
+  `make test-unit` for the full mocked unit suite.
+- Unit tests normally extend `test.unit.base.ClientBaseCase`. GET requests are
+  resolved from JSON under `test/fixtures/`; use `mock_post`, `mock_put`, and
+  `mock_delete` for other verbs and assert the captured URL, body, or headers.
+- Fixture names encode endpoint paths: a single underscore becomes `/`, while a
+  doubled underscore becomes a literal `_`. Paginated fixtures containing
+  `results` also provide per-ID responses automatically when items include an
+  `id` field. See
+  `test/unit/fixtures.py` before inventing custom request mocking.
+- `make test-int` and `make test-smoke` call the live Linode API, require
+  `LINODE_TOKEN`, and may create or delete real resources. Run them only when the
+  change requires live validation and the environment is intentionally configured.
+
+## Formatting and Validation
+
+- Install development dependencies with `make dev-install`.
+- Formatting is Black + isort + autoflake with settings in [pyproject.toml](pyproject.toml).
+  `make format` rewrites all of `linode_api4/` and `test/`, so review the worktree
+  before and after using it for a focused change.
+- `make lint` is the broad CI-equivalent check: it builds distributions, checks
+  formatting/imports, runs pylint, and validates package metadata. Prefer focused
+  tests first because this target regenerates build artifacts and version metadata.
+
+## Pull Requests
+
+- Target the `dev` branch unless the task specifies otherwise.
+- PR titles must use `TPT-1234: Description`; CI exempts only the labels documented
+  in [.github/workflows/ci.yml](.github/workflows/ci.yml).
+- Keep changes focused, add tests for behavior changes, and use
+  [.github/pull_request_template.md](.github/pull_request_template.md) when drafting
+  the PR description.

From 04e0a707f420d19f3ba5318d2df4ecfd955e7d22 Mon Sep 17 00:00:00 2001
From: Zhiwei Liang <121905282+zliang-akamai@users.noreply.github.com>
Date: Tue, 4 Aug 2026 16:41:56 -0400
Subject: [PATCH 10/10] Revert "build(deps): bump github/codeql-action from 4
 to 4.37.4 (#726)" (#729)

This reverts commit 9530b7e5de45b11e066d89e8acdbc75af995e542.
---
 .github/workflows/codeql.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 9b78456f2..64e33daa1 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,13 +26,13 @@ jobs:
       uses: actions/checkout@v7
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.37.4
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
         queries: security-and-quality
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.37.4
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:${{matrix.language}}"