Pdm

Latest version: v2.15.2

Safety actively analyzes 625214 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 33

2.4.1

Not secure
---------------------------

Features & Improvements

- Add proper display for the extra pypi sources in `pdm config`. [1622](https://github.com/pdm-project/pdm/issues/1622)
- Support running python scripts without prefixing with `python`. [1626](https://github.com/pdm-project/pdm/issues/1626)

Bug Fixes

- Ignore the python requirement for overriden packages. [1575](https://github.com/pdm-project/pdm/issues/1575)
- Fix the wildcards in requirement specifiers to make it pass the new parser of `packaging>=22`. [1619](https://github.com/pdm-project/pdm/issues/1619)
- Add the missing `subdirectory` attribute to the lockfile entry. [1630](https://github.com/pdm-project/pdm/issues/1630)
- Fix a bug that VCS locks don't update when the rev part changes. [1640](https://github.com/pdm-project/pdm/issues/1640)
- Redirect the spinner output to stderr. [1646](https://github.com/pdm-project/pdm/issues/1646)
- Ensure the destination directory exists before building the packages. [1647](https://github.com/pdm-project/pdm/issues/1647)

2.4.0

Not secure
---------------------------

Features & Improvements

- Support multiple PyPI indexes in the configuration. They will be tried after the sources in `pyproject.toml`. [1310](https://github.com/pdm-project/pdm/issues/1310)
- Accept yanked versions when the requirement version is pinned. [1575](https://github.com/pdm-project/pdm/issues/1575)
- Expose PDM fixtures as a `pytest` plugin `pdm.pytest` for plugin developers. [1594](https://github.com/pdm-project/pdm/issues/1594)
- Show message in the status when fetching package hashes.
Fetch hashes from the JSON API response as well. [1609](https://github.com/pdm-project/pdm/issues/1609)
- Mark `pdm.lock` with an `generated` comment. [1611](https://github.com/pdm-project/pdm/issues/1611)

Bug Fixes

- Exclude site-packages for symlinks of the python interpreter as well. [1598](https://github.com/pdm-project/pdm/issues/1598)
- Fix a bug that error output can't be decoded correctly on Windows. [1602](https://github.com/pdm-project/pdm/issues/1602)

2.3.4

Not secure
---------------------------

Features & Improvements

- Detect PDM inside a zipapp and disable some functions. [1578](https://github.com/pdm-project/pdm/issues/1578)

Bug Fixes

- Don't write `sitecustomize` to the home directory if it exists in the filesystem(not packed in a zipapp). [1572](https://github.com/pdm-project/pdm/issues/1572)
- Fix a bug that a directory is incorrectly marked as to be deleted when it contains symlinks. [1580](https://github.com/pdm-project/pdm/issues/1580)

2.3.3

Not secure
---------------------------

Bug Fixes

- Allow relative paths in `build-system.requires`, since `build` and `hatch` both support it. Be aware it is not allowed in the standard. [1560](https://github.com/pdm-project/pdm/issues/1560)
- Strip the local part when building a specifier for comparison with the package version. This is not permitted by PEP 508 as implemented by `packaging 22.0`. [1562](https://github.com/pdm-project/pdm/issues/1562)
- Update the version for check_update after self update [1563](https://github.com/pdm-project/pdm/issues/1563)
- Replace the `__file__` usages with `importlib.resources`, to make PDM usable in a zipapp. [1567](https://github.com/pdm-project/pdm/issues/1567)
- Fix the matching problem of packages in the lockfile. [1569](https://github.com/pdm-project/pdm/issues/1569)

Dependencies

- Exclude `package==22.0` from the dependencies to avoid some breakages to the end users. [1568](https://github.com/pdm-project/pdm/issues/1568)

2.3.2

Not secure
---------------------------

Bug Fixes

- Fix an installation failure when the RECORD file contains commas in the file path. [1010](https://github.com/pdm-project/pdm/issues/1010)
- Fallback to `pdm.pep517` as the metadata transformer for unknown custom build backends. [1546](https://github.com/pdm-project/pdm/issues/1546)
- Fix a bug that Ctrl + C kills the python interactive session instead of clearing the current line. [1547](https://github.com/pdm-project/pdm/issues/1547)
- Fix a bug with egg segment for local dependency [1552](https://github.com/pdm-project/pdm/issues/1552)

Dependencies

- Update `installer` to `0.6.0`. [1550](https://github.com/pdm-project/pdm/issues/1550)
- Update minimum version of `unearth` to `0.6.3` and test against `packaging==22.0`. [1555](https://github.com/pdm-project/pdm/issues/1555)

2.3.1

Not secure
---------------------------

Bug Fixes

- Fix a resolution loop issue when the current project depends on itself and it uses the dynamic version from SCM. [1541](https://github.com/pdm-project/pdm/issues/1541)
- Don't give duplicate results when specifying a relative path for `pdm use`. [1542](https://github.com/pdm-project/pdm/issues/1542)

Page 10 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.