Pdm

Latest version: v2.15.2

Safety actively analyzes 625334 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 33

1.15.2

Not secure
----------------------------

Bug Fixes

- Fix bug where SIGINT is sent to the main `pdm` process and not to the process actually being run. [1095](https://github.com/pdm-project/pdm/issues/1095)
- Fix a bug due to the build backend fallback, which causes different versions of the same requirement to exist in the build environment, making the building unstable depending on which version being used. [1099](https://github.com/pdm-project/pdm/issues/1099)
- Don't include the `version` in the cache key of the locked candidates if they are from a URL requirement. [1099](https://github.com/pdm-project/pdm/issues/1099)
- Fix a bug where dependencies with `requires-python` pre-release versions caused `pdm update` to fail with `InvalidPyVersion`. [1111](https://github.com/pdm-project/pdm/issues/1111)

1.15.1

Not secure
----------------------------

Bug Fixes

- Fix a bug that dependencies are missing from the dep graph when they are depended by a requirement with extras. [1097](https://github.com/pdm-project/pdm/issues/1097)
- Give a default version if the version is dynamic in `setup.cfg` or `setup.py`. [1101](https://github.com/pdm-project/pdm/issues/1101)
- Fix a bug that the hashes for file URLs are not included in the lock file. [1103](https://github.com/pdm-project/pdm/issues/1103)
- Fix a bug that package versions are updated even when they are excluded by `pdm update` command. [1104](https://github.com/pdm-project/pdm/issues/1104)
- Prefer `venv` install scheme when available. This scheme is more stable than `posix_prefix` scheme since the latter is often patched by distributions. [1106](https://github.com/pdm-project/pdm/issues/1106)

Miscellany

- Move the test artifacts to a submodule. It will make it easier to package this project. [1084](https://github.com/pdm-project/pdm/issues/1084)

1.15.0

Not secure
----------------------------

Features & Improvements

- Allow specifying lockfile other than `pdm.lock` by `--lockfile` option or `PDM_LOCKFILE` env var. [1038](https://github.com/pdm-project/pdm/issues/1038)

Bug Fixes

- Replace the editable entry in `pyproject.toml` when running `pdm add --no-editable <package>`. [1050](https://github.com/pdm-project/pdm/issues/1050)
- Ensure the pip module inside venv in installation script. [1053](https://github.com/pdm-project/pdm/issues/1053)
- Fix the py2 compatibility issue in the in-process `get_sysconfig_path.py` script. [1056](https://github.com/pdm-project/pdm/issues/1056)
- Fix a bug that file paths in URLs are not correctly unquoted. [1073](https://github.com/pdm-project/pdm/issues/1073)
- Fix a bug on Python 3.11 that overriding an existing command from plugins raises an error. [1075](https://github.com/pdm-project/pdm/issues/1075)
- Replace the `${PROJECT_ROOT}` variable in the result of `export` command. [1079](https://github.com/pdm-project/pdm/issues/1079)

Removals and Deprecations

- Show a warning if Python 2 interpreter is being used and remove the support on 2.0. [1082](https://github.com/pdm-project/pdm/issues/1082)

1.14.1

Not secure
----------------------------

Features & Improvements

- Ask for description when doing `pdm init` and create default README for libraries. [1041](https://github.com/pdm-project/pdm/issues/1041)

Bug Fixes

- Fix a bug of missing subdirectory fragment when importing from a `requirements.txt`. [1036](https://github.com/pdm-project/pdm/issues/1036)
- Fix use_cache.json with corrupted python causes `pdm use` error. [1039](https://github.com/pdm-project/pdm/issues/1039)
- Ignore the `optional` key when converting from Poetry's dependency entries. [1042](https://github.com/pdm-project/pdm/issues/1042)

Improved Documentation

- Clarify documentation on enabling PEP582 globally. [1033](https://github.com/pdm-project/pdm/issues/1033)

1.14.0

Not secure
----------------------------

Features & Improvements

- Editable installations won't be overridden unless `--no-editable` is passed.
`pdm add --no-editable` will now override the `editable` mode of the given packages. [1011](https://github.com/pdm-project/pdm/issues/1011)
- Re-calculate the file hashes when running `pdm lock --refresh`. [1019](https://github.com/pdm-project/pdm/issues/1019)

Bug Fixes

- Fix a bug that requirement with extras isn't resolved to the version as specified by the range. [1001](https://github.com/pdm-project/pdm/issues/1001)
- Replace the `${PROJECT_ROOT}` in the output of `pdm list`. [1004](https://github.com/pdm-project/pdm/issues/1004)
- Further fix the python path issue of macOS system installed Python. [1023](https://github.com/pdm-project/pdm/issues/1023)
- Fix the install path issue on Python 3.10 installed from homebrew. [996](https://github.com/pdm-project/pdm/issues/996)

Improved Documentation

- Document how to install PDM inside a project with Pyprojectx. [1004](https://github.com/pdm-project/pdm/issues/1004)

Dependencies

- Support `installer 0.5.x`. [1002](https://github.com/pdm-project/pdm/issues/1002)

1.13.6

Not secure
----------------------------

Bug Fixes

- Default the optional `license` field to "None". [991](https://github.com/pdm-project/pdm/issues/991)
- Don't create project files in `pdm search` command. [993](https://github.com/pdm-project/pdm/issues/993)
- Fix a bug that the env vars in source urls in exported result are not expanded. [997](https://github.com/pdm-project/pdm/issues/997)

Page 14 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.