Generator: Update SDK /services/serviceaccount (#3458)

* Generate serviceaccount

* chore(serviceaccount) write changelog, bump version

---------

Co-authored-by: Carlo Goetz <carlo.goetz@inovex.de>

Author: stackit-pipeline

CHANGELOG.md

@@ -1,14 +1,18 @@
 ## Release (2026-xx-xx)
 
+- `serviceaccount`:
+  - [v0.6.1](services/serviceaccount/CHANGELOG.md#v061)
+    - **Feature:** client now supports UUID and decimal types
+    - **Bugfix:** timeouts now passed to requests library
+  - [v0.6.0](services/kms/CHANGELOG.md#v060)
+    - **Breaking Change:** rename `CreateFederatedIdentityProviderResponse` to `FederatedIdentityProvider` and update file path accordingly
+    - **Breaking Change:** rename `CreateFederatedIdentityProviderResponseAssertionsInner` to `FederatedIdentityProviderAssertionsInner` and update file path accordingly
+    - **Feature:** add `id` for `FederatedIdentityProvider`
 - `ske`: [v1.7.0](services/ske/CHANGELOG.md#v170)
   - **Feature:** New model `Access`
   - **Feature:** New model `IDPKubeconfig`
   - **Feature:** Add attribute `access` of type `Access` to model `Cluster`
   - **Feature:** New API client methods: `get_idp_kubeconfig`, `get_idp_kubeconfig_with_http_info`, `get_idp_kubeconfig_without_preload_content`, `_get_idp_kubeconfig_serialize`
-- `serviceaccount`: [v0.6.0](services/kms/CHANGELOG.md#v060)
-  - **Breaking Change:** rename `CreateFederatedIdentityProviderResponse` to `FederatedIdentityProvider` and update file path accordingly
-  - **Breaking Change:** rename `CreateFederatedIdentityProviderResponseAssertionsInner` to `FederatedIdentityProviderAssertionsInner` and update file path accordingly
-  - **Feature:** add `id` for `FederatedIdentityProvider`
 - `kms`: [v0.8.0](services/kms/CHANGELOG.md#v080)
   - **Breaking Change:** Switch from regional to global API server URL (region can't be set via `Configuration` / env-variable anymore).
 - `intake`: [v0.5.0](services/intake/CHANGELOG.md#v050)

services/serviceaccount/CHANGELOG.md

@@ -1,3 +1,7 @@
+## v0.6.1
+- **Feature:** client now supports UUID and decimal types
+- **Bugfix:** timeouts now passed to requests library
+
 ## v0.6.0
 - **Breaking Change:** rename `CreateFederatedIdentityProviderResponse` to `FederatedIdentityProvider` and update file path accordingly
 - **Breaking Change:** rename `CreateFederatedIdentityProviderResponseAssertionsInner` to `FederatedIdentityProviderAssertionsInner` and update file path accordingly

services/serviceaccount/oas_commit

@@ -1 +1 @@
-cb550f3c2129447568c2855337b1874968e033bb
+0e64886dd0847341800d7191ed193b75413be998

services/serviceaccount/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "stackit-serviceaccount"
-version = "v0.6.0"
+version = "v0.6.1"
 description = "Service Account API"
 authors = [{ name = "STACKIT Developer Tools", email = "developer-tools@stackit.cloud" }]
 requires-python = ">=3.9,<4.0"

services/serviceaccount/src/stackit/serviceaccount/api/default_api.py

@@ -12,11 +12,13 @@
 """  # noqa: E501
 
 import datetime
+import decimal
 import json
 import mimetypes
 import os
 import re
 import tempfile
+import uuid
 from enum import Enum
 from typing import Dict, List, Optional, Tuple, Union
 from urllib.parse import quote
@@ -63,8 +65,10 @@ class ApiClient:
         "bool": bool,
         "date": datetime.date,
         "datetime": datetime.datetime,
+        "decimal": decimal.Decimal,
         "object": object,
     }
+    _pool = None
 
     def __init__(self, configuration, header_name=None, header_value=None, cookie=None) -> None:
         self.config: Configuration = configuration
@@ -267,7 +271,7 @@ def response_deserialize(
                 return_data = self.__deserialize_file(response_data)
             elif response_type is not None:
                 match = None
-                content_type = response_data.getheader("content-type")
+                content_type = response_data.headers.get("content-type")
                 if content_type is not None:
                     match = re.search(r"charset=([a-zA-Z\-\d]+)[\s;]?", content_type)
                 encoding = match.group(1) if match else "utf-8"
@@ -284,7 +288,7 @@ def response_deserialize(
         return ApiResponse(
             status_code=response_data.status,
             data=return_data,
-            headers=response_data.getheaders(),
+            headers=response_data.headers,
             raw_data=response_data.data,
         )
 
@@ -296,6 +300,7 @@ def sanitize_for_serialization(self, obj):
         If obj is str, int, long, float, bool, return directly.
         If obj is datetime.datetime, datetime.date
             convert to string in iso8601 format.
+        If obj is decimal.Decimal return string representation.
         If obj is list, sanitize each element in the list.
         If obj is dict, return the dict.
         If obj is OpenAPI model, return the properties dict.
@@ -311,12 +316,16 @@ def sanitize_for_serialization(self, obj):
             return obj.get_secret_value()
         elif isinstance(obj, self.PRIMITIVE_TYPES):
             return obj
+        elif isinstance(obj, uuid.UUID):
+            return str(obj)
         elif isinstance(obj, list):
             return [self.sanitize_for_serialization(sub_obj) for sub_obj in obj]
         elif isinstance(obj, tuple):
             return tuple(self.sanitize_for_serialization(sub_obj) for sub_obj in obj)
         elif isinstance(obj, (datetime.datetime, datetime.date)):
             return obj.isoformat()
+        elif isinstance(obj, decimal.Decimal):
+            return str(obj)
 
         elif isinstance(obj, dict):
             obj_dict = obj
@@ -326,7 +335,7 @@ def sanitize_for_serialization(self, obj):
             # and attributes which value is not None.
             # Convert attribute name to json key in
             # model definition for request.
-            if hasattr(obj, "to_dict") and callable(obj.to_dict):
+            if hasattr(obj, "to_dict") and callable(getattr(obj, "to_dict")):  # noqa: B009
                 obj_dict = obj.to_dict()
             else:
                 obj_dict = obj.__dict__
@@ -354,7 +363,7 @@ def deserialize(self, response_text: str, response_type: str, content_type: Opti
                 data = json.loads(response_text)
             except ValueError:
                 data = response_text
-        elif re.match(r"^application/(json|[\w!#$&.+-^_]+\+json)\s*(;|$)", content_type, re.IGNORECASE):
+        elif re.match(r"^application/(json|[\w!#$&.+\-^_]+\+json)\s*(;|$)", content_type, re.IGNORECASE):
             if response_text == "":
                 data = ""
             else:
@@ -400,12 +409,14 @@ def __deserialize(self, data, klass):
 
         if klass in self.PRIMITIVE_TYPES:
             return self.__deserialize_primitive(data, klass)
-        elif klass == object:
+        elif klass is object:
             return self.__deserialize_object(data)
-        elif klass == datetime.date:
+        elif klass is datetime.date:
             return self.__deserialize_date(data)
-        elif klass == datetime.datetime:
+        elif klass is datetime.datetime:
             return self.__deserialize_datetime(data)
+        elif klass is decimal.Decimal:
+            return decimal.Decimal(data)
         elif issubclass(klass, Enum):
             return self.__deserialize_enum(data, klass)
         else:
@@ -553,12 +564,14 @@ def __deserialize_file(self, response):
         os.close(fd)
         os.remove(path)
 
-        content_disposition = response.getheader("Content-Disposition")
+        content_disposition = response.headers.get("Content-Disposition")
         if content_disposition:
             m = re.search(r'filename=[\'"]?([^\'"\s]+)[\'"]?', content_disposition)
             if m is None:
                 raise ValueError("Unexpected 'content-disposition' header value")
-            filename = m.group(1)
+            filename = os.path.basename(m.group(1))  # Strip any directory traversal
+            if filename in ("", ".", ".."):  # fall back to tmp filename
+                filename = os.path.basename(path)
             path = os.path.join(os.path.dirname(path), filename)
 
         with open(path, "wb") as f:

services/serviceaccount/src/stackit/serviceaccount/api_client.py

@@ -129,7 +129,7 @@ def __init__(
                     self.body = http_resp.data.decode("utf-8")
                 except Exception:  # noqa: S110
                     pass
-            self.headers = http_resp.getheaders()
+            self.headers = http_resp.headers
 
     @classmethod
     def from_response(

services/serviceaccount/src/stackit/serviceaccount/exceptions.py

@@ -12,7 +12,6 @@
     Do not edit the class manually.
 """  # noqa: E501
 
-
 # import models into model package
 from stackit.serviceaccount.models.access_token import AccessToken
 from stackit.serviceaccount.models.access_token_metadata import AccessTokenMetadata

services/serviceaccount/src/stackit/serviceaccount/models/__init__.py

@@ -18,6 +18,7 @@
 import re  # noqa: F401
 from datetime import datetime
 from typing import Any, ClassVar, Dict, List, Optional, Set
+from uuid import UUID
 
 from pydantic import (
     BaseModel,
@@ -37,7 +38,7 @@ class AccessToken(BaseModel):
 
     active: StrictBool = Field(description="Newly created access tokens are valid, and can be revoked if needed.")
     created_at: datetime = Field(description="Creation time of the access token.", alias="createdAt")
-    id: StrictStr = Field(description="Unique ID of the access token. Also used as JTI field.")
+    id: UUID = Field(description="Unique ID of the access token. Also used as JTI field.")
     token: StrictStr = Field(
         description="The access token in JWT format. Use this with `Bearer` prefix for API calls. Store it, as it is not recoverable later."
     )

services/serviceaccount/src/stackit/serviceaccount/models/access_token.py

@@ -18,15 +18,9 @@
 import re  # noqa: F401
 from datetime import datetime
 from typing import Any, ClassVar, Dict, List, Optional, Set
+from uuid import UUID
 
-from pydantic import (
-    BaseModel,
-    ConfigDict,
-    Field,
-    StrictBool,
-    StrictStr,
-    field_validator,
-)
+from pydantic import BaseModel, ConfigDict, Field, StrictBool, field_validator
 from typing_extensions import Self
 
 
@@ -39,7 +33,7 @@ class AccessTokenMetadata(BaseModel):
         description="If true, access token can be used for authorized API calls, if false, the token is not usable anymore."
     )
     created_at: datetime = Field(description="Creation time of the access token.", alias="createdAt")
-    id: StrictStr = Field(description="Unique ID of the access token. Also used as JTI field.")
+    id: UUID = Field(description="Unique ID of the access token. Also used as JTI field.")
     valid_until: datetime = Field(
         description="Approximate expiration time of the access token. Check the JWT for actual validity date.",
         alias="validUntil",