Pkgcheck

Latest version: v0.10.29

Safety actively analyzes 619324 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 13

0.10.29

-----------------------------

- drop bundling of tree-sitter-bash (Arthur Zamarin)

- use flit as build backend for pkgcheck (Arthur Zamarin)

- PkgBadlyFormedXml: change level to error instead of a warning (Arthur Zamarin,
668)

- git addon: support user global gitignore (Arthur Zamarin, 671, 672)

**New checks:**

- NewerEAPIAvailable: committing new ebuilds with old EAPI (Arthur Zamarin, 666)

-----------------------------

0.10.28

-----------------------------

- docs: Add intersphinx linkages (Brian Harring, 658)

**New checks:**

- VariableOrderWrong: Enforce skel.ebuild variable order (Anthony Ryan, 645)

**Fixed bugs:**

- git: fix issues with no-copies (Arthur Zamarin, Sam James, 663, 664)

- addons.net: suppress urllib3 import warnings (Anna "CyberTailor", 661)

-----------------------------

0.10.27

-----------------------------

- Dockerfile: introduce ``pkgcheck`` docker, created on release, which should
provide stable and tested environment to run, for example in CI (Arthur
Zamarin)

- Test pkgcheck with Python 3.12 and 3.13 (Sam James, 567)

**New checks:**

- UnstatedIuse: check for unstated IUSE in "?" dependencies (Arthur Zamarin)

- SandboxCallCheck: check for invalid sandbox funciton calls (Arthur Zamarin,
644)

- OldPackageName: check for package named after old package name (Arthur
Zamarin, 650)

- RepositoryCategories: check for fundamental category issues in the repository
layout (Brian Harring, 656)

**Fixed bugs:**

- pyproject.toml: add runtime dependency on setuptools for Python 3.12 (Arthur
Zamarin)

- MissingInherits: add some special variables to exclude list (Arthur Zamarin)

- UnusedInherits: add whitelist for weak usage by another eclass, for example
conditional automagic inherit (Arthur Zamarin)

- GitCommitsCheck: fix tarfile Python 3.12 compatibility (Alfred Wingate, 638)

- MissingRemoteId: improve gitlab matching rules (Alfred Wingate, 636, 637)

- OutdatedProfilePackage: don't warn when version was removed not long ago
(Arthur Zamarin)

- DeprecatedDep: fix mishandling of slotted deprecates (Arthur Zamarin, 642)

- DependencyMoved: show better error for dependency on pkgmove (Arthur Zamarin,
649)

- compatibilty: remove reliance on ``repo.category_dirs`` (Brian Harring, 656)

-----------------------------

0.10.26

-----------------------------

- tree-sitter-bash: use and bundle the latest version of the bash grammar. This
version is capable to parse all the bash code that was used in gentoo
repository, meaning various false positives or parsing errors were fixed.
(Arthur Zamarin)

- git addon: pass options to disable finding copies (Sam James, 618)

- git addon: add helping message on failure of git remote setup (Arthur
Zamarin, 608)

**New checks:**

- VariableScopeCheck: add check for usage of prohibited variables in global
scope (Arthur Zamarin, 607)

- VariableScopeCheck: BROOT is allowed also in ``pkg_{pre,post}{inst,rm}``
(Ulrich Müller, 609)

- GlobDistdir: check for unsafe filename expansion with ``${DISTDIR}`` (Arthur
Zamarin, 610)

- EclassManualDepsCheck: check for missing manual deps for specific eclasses
(Arthur Zamarin, 616)

- UnstableSrcUri: check for known unstable ``SRC_URI`` sources (Arthur Zamarin,
599)

- network: add codeberg remote-id (Thomas Bracht Laumann Jespersen, 620)

- EmptyGlobalAssignment: check for empty global assignments (Arthur Zamarin,
629)

- SelfAssignment: check for global scope self assignments (Arthur Zamarin, 629)

- BannedPhaseCall: detect calls of phase functions directly in ebuilds (Arthur
Zamarin, 627)

- VariableShadowed: check to detect shadowed variable assignments (Arthur
Zamarin, 623)

- DuplicateFunctionDefinition: check for duplicate global functions (Arthur
Zamarin, 624)

- BannedEapiCommand: also check for ``has_version --host-root`` and
``best_version --host-root`` in EAPI>=7 (Arthur Zamarin, 630)

- BannedEapiCommand: add some extra user and group commands (Arthur Zamarin)

**Fixed bugs:**

- RedundantLongDescription: lower too short threshold (Arthur Zamarin, 614)

- tests.test_pkgcheck_scan: fix issues with xdist testing (Arthur Zamarin)

-----------------------------

0.10.25

-----------------------------

- scan: add ``--git-remote`` option to select remote used for git operations
(Arthur Zamarin, 601)

**New checks:**

- RustCheck: check for suboptimal ``-`` ``CRATES`` separator (Arthur Zamarin,
589)

- RustCheck: check for suboptimal ``cargo_crate_uris`` call (Arthur Zamarin,
589)

- OutdatedProfilePackage: show unknown packages in profile with last match date
(Arthur Zamarin, 590)

- SrcUriFilenameDotPrefix: new check for ``SRC_URI`` filenames with dot prefix
(Arthur Zamarin, 592)

- RubyCompatCheck: new check for new ``USE_RUBY`` compatible values, similar to
``PythonCompatCheck`` (Arthur Zamarin, 595)

- OldPythonCompat: check for old ``PYTHON_COMPAT`` in commit's modified ebuilds
(Arthur Zamarin, 596)

- RepoManifestHashCheck: check for deprecated repo ``manifest-hashes`` (Arthur
Zamarin, 598)

- DeprecatedManifestHash: check for deprecated checksums in Manifest files
(Arthur Zamarin, 598)

- PerlCheck: optional check for versioned virtual perl dependencies (Arthur
Zamarin, 597)

**Fixed bugs:**

- MissingInherits: exclude ``USER_VARIABLEs`` (Arthur Zamarin, 575)

- scan: fix unknown exit checkset during initial config load (Arthur Zamarin,
594)

- GitPkgCommitsCheck: fix failure during compute of environment (Arthur Zamarin)

-----------------------------

0.10.24

-----------------------------

**New checks:**

- UnknownCategoryDirs: enable for overlays and ignore scripts dir (Arthur
Zamarin, 564)

- PythonFetchableCheck: rewrite check to reuse ``PYPI_SDIST_URI_RE`` (Michał
Górny, 569)

- PythonFetchableCheck: include ``PYPI_PN`` opportunities in
``PythonInlinePyPIURI`` (Michał Górny, 568, 569)

- PythonFetchableCheck: restore filename check in pypi.eclass default case
(Michał Górny, 572)

- MissingEAPIBlankLine: new optional check for missing blank after EAPI (Arthur
Zamarin, 570, 571)

- StaleLiveCheck: new check for stale live ebuilds EAPI version (Arthur
Zamarin, 578)

**Fixed bugs:**

- GitPkgCommitsCheck: fix modification check for added ebuilds in packages set
(Arthur Zamarin, 563)

- SrcUriChecksumChange: fix false positive with new ebuilds (Arthur Zamarin,
553)

- fix config loading when ``XDG_CONFIG_HOME`` is defined (Alberto Gireud, 573)

- scan: fix unknown checkset during initial config load for checksets declared
in repository config (Arthur Zamarin, 576)

- ProfilesCheck: fix handling of profiles with ``-*`` declared in ``packages``
(Arthur Zamarin, 577)

----------------------------

Page 1 of 13

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.