Skjold

Latest version: v0.6.1

Safety actively analyzes 621173 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 3

0.6.1

Bugfix/Maintenance release.

What's Changed
* **CLI**: Remove duplicate error/warning when sources are passed via CLI instead. (163). Thanks AIGeneratedUsername!
* **Dependencies**: Support `packaging` `>=21,<23.0`. (162). Thanks whardier!
* **Dependencies**: Bump `types-toml` from `0.10.8` to `0.10.8.1` (156)
* **Dependencies**: Bump `mypy` from `0.990` to `0.991` (157)
* **Actions**: Bump `actions/setup-python` from `4.3.0` to `4.3.1` (160)


**Full Changelog**: https://github.com/twu/skjold/compare/v0.6.0...v0.6.1

0.6.0

Feature release.

This release breaks `.skjoldignore` files when containing `PyUP` identifiers (See 148). You might need to re-add them to the ignore file using the `CVE` or new PyUP identifier.

Changes
* **PyUP**: Use 'cve' field as 'pyup' identifier. (149). Thanks joakimnordling!
* **Dependencies**: Bump mypy from `0.981` to `0.982` (141)
* **Dependencies**: Bump black from `22.8.0` to `22.10.0` (144)
* **Dependencies**: Bump pytest-mock from `3.9.0` to `3.10.0` (143)
* **Dependencies**: Bump `pytest` from `7.1.3` to `7.2.0` (146)
* **Dependencies**: Bump `types-pyyaml` from `6.0.12` to `6.0.12.1` (147)
* **Dependencies**: Bump `pytest-sugar` from `0.9.5` to `0.9.6` (151)
* **Dependencies**: Bump `mypy from` `0.982` to `0.990` (152)
* **Dependencies**: Bump `types-pyyaml` from `6.0.12.1` to `6.0.12.2` (153)
* **Actions**: Bump `actions/checkout` from `3.0.2` to `3.1.0` (142)
* **Actions**: Bump `actions/setup-python` from `4.2.0` to `4.3.0` (145)

**Full Changelog**: https://github.com/twu/skjold/compare/v0.5.1...v0.6.0

0.5.1

Hotfix release.

Changes

* **PyUP**: Use `more_info_path` to create correct `pyup.io` URLs (https://github.com/twu/skjold/pull/140). Thanks joakimnordling!
* **Dependencies**: Bump `types-pyyaml` from `6.0.9` to `6.0.12` (https://github.com/twu/skjold/pull/134).
* **Dependencies**: Bump `types-toml` from `0.10.7` to `0.10.8` (https://github.com/twu/skjold/pull/124).
* **Actions**: Bump `coverage` from `6.4.1` to `6.5.0` (https://github.com/twu/skjold/pull/138).
* **Actions**: Bump `actions/setup-python` from `4.0.0` to `4.2.0` (https://github.com/twu/skjold/pull/128, https://github.com/twu/skjold/pull/122).

**Full Changelog**: https://github.com/twu/skjold/compare/v0.5.0...v0.5.1

0.5.0

Feature / Hotfix release.

**Breaking**: This version drops support for Python 3.6 (117) and adds the filename to both output formats (118).

**Changes**
- **Packaging**: Switch to `poetry-core` (91). Thanks fabaff!
- **Gemnasium**: Properly handle false positives/withdrawn CVEs marked with `(,0)` (90). Thanks stesix!
- **OSV**: Support latest OSV/PyPA schema (only using `ECOSYSTEM` + `versions`) (115). Thanks Kurt-von-Laven!
- **Feature**: Support handling multiple input files (118). Thanks joakimnordling!
- **Actions**: Bump `actions/checkout` from `2.3.4` to `2.4.0` (82).
- **Actions**: Bump `actions/setup-python` from `2.2.2` to `2.3.2` (93).
- **Breaking**: Drops support for Python 3.6 (117)

**Full Changelog**: https://github.com/twu/skjold/compare/v0.4.1...v0.5.0

0.4.1

Hotfix release.

**Changes**
- **Github**: Properly parse/handle `github` _fixed_ version specifiers e.g. `= 1.4.2`. Fixes 61. Thanks brondsem!
- **Github**: Show correct environment variable name if Github API Token is not defined. See 62. Thanks markus-k!

0.4.0

Feature/Maintenance release.

**Important!**: From this release onwards `skjold` depends on/uses `packaging` instead of `poetry-semver` (See 52 for details).

**Changes**
- Use `packaging` for parsing versions instead of `poetry-semver`. See 52
- Display helpful message if Github Token is not found/set when using the `github` source. See 56
- Updated dependencies.

Page 1 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.