Pdm

Latest version: v2.15.2

Safety actively analyzes 625368 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 20 of 33

1.8.0

Not secure
---------------------------

Features & Improvements

- Added a new mode `--json` to the list command which outputs the dependency graph as a JSON document. [583](https://github.com/pdm-project/pdm/issues/583)
- Add a new config `feature.install_cache`. When it is turned on, wheels will be installed into a centralized package repo and create `.pth` files under project packages directory to link to the cached package. [589](https://github.com/pdm-project/pdm/issues/589)

Bug Fixes

- Fix env vars in source URLs not being expanded in all cases. [570](https://github.com/pdm-project/pdm/issues/570)
- Fix the weird output of `pdm show`. [580](https://github.com/pdm-project/pdm/issues/580)
- Prefer `~/.pyenv/shims/python3` as the pyenv interpreter. [590](https://github.com/pdm-project/pdm/issues/590)
- Fix a bug that installing will download candidates that do not match the locked hashes. [596](https://github.com/pdm-project/pdm/issues/596)

Improved Documentation

- Added instructions to the Contributing section for creating news fragments [573](https://github.com/pdm-project/pdm/issues/573)

Removals and Deprecations

- Deprecate `-s/--section` option in favor of `-G/--group`. [591](https://github.com/pdm-project/pdm/issues/591)

Refactor

- Switch to a self-implemented version of uninstaller. [586](https://github.com/pdm-project/pdm/issues/586)
- `pdm/installers/installers.py` is renamed to `pdm/installers/manager.py` to be more accurate. The `Installer` class under that file is renamed to `InstallerManager` and is exposed in the `pdm.core.Core` object for overriding. The new `pdm/installers/installers.py` contains some installation implementations. [589](https://github.com/pdm-project/pdm/issues/589)
- Switch from `pkg_resources.Distribution` to the implementation of `importlib.metadata`. [592](https://github.com/pdm-project/pdm/issues/592)

1.7.2

Not secure
---------------------------

Bug Fixes

- Remove the existing files before installing. [565](https://github.com/pdm-project/pdm/issues/565)
- Deduplicate the plugins list. [566](https://github.com/pdm-project/pdm/issues/566)

1.7.1

Not secure
---------------------------

Bug Fixes

- Accept non-canonical distribution name in the wheel's dist-info directory name. [529](https://github.com/pdm-project/pdm/issues/529)
- Prefer requirements with narrower version constraints or allowing prereleases to find matches. [551](https://github.com/pdm-project/pdm/issues/551)
- Use the underlying real executable path for writing shebangs. [553](https://github.com/pdm-project/pdm/issues/553)
- Fix a bug that extra markers cannot be extracted when combined with other markers with "and". [559](https://github.com/pdm-project/pdm/issues/559)
- Fix a bug that redacted credentials in source urls get overwritten with the plain text after locking. [561](https://github.com/pdm-project/pdm/issues/561)

Refactor

- Use installer as the wheel installer, replacing `distlib`. [519](https://github.com/pdm-project/pdm/issues/519)

1.7.0

Not secure
---------------------------

Features & Improvements

- Support showing individual fields by `--<field-name>` options in pdm show. When no package is given, show this project. [527](https://github.com/pdm-project/pdm/issues/527)
- Add `--freeze` option to `pdm list` command which shows the dependencies list as pip's requirements.txt format. [531](https://github.com/pdm-project/pdm/issues/531)

Bug Fixes

- Fix the path manipulation on Windows, now the PEP 582 path is prepended to the `PYTHONPATH`. [522](https://github.com/pdm-project/pdm/issues/522)
- Fix the handling of auth prompting: will try keyring in non-verbose mode. [523](https://github.com/pdm-project/pdm/issues/523)
- Recognize old entry point name "pdm.plugin" for backward-compatibility. [530](https://github.com/pdm-project/pdm/issues/530)
- Match the VCS scheme in case-insensitive manner. [537](https://github.com/pdm-project/pdm/issues/537)
- Use the default permission bits when writing project files. [542](https://github.com/pdm-project/pdm/issues/542)
- Fix the VCS url to be consistent between lock and install. [547](https://github.com/pdm-project/pdm/issues/547)

Improved Documentation

- Add installation instructions for Scoop. [522](https://github.com/pdm-project/pdm/issues/522)

Dependencies

- Update `pdm-pep517` to `0.8.0`. [524](https://github.com/pdm-project/pdm/issues/524)
- Switch from `toml` to `tomli`. [541](https://github.com/pdm-project/pdm/issues/541)

Refactor

- Separate the build env into two different levels for better caching. [541](https://github.com/pdm-project/pdm/issues/541)
- Refactor the build part into smaller functions. [543](https://github.com/pdm-project/pdm/issues/543)

1.6.4

Not secure
---------------------------

Features & Improvements

- Extract package name from egg-info in filename when eligible. Remove the patching code of resolvelib's inner class. [441](https://github.com/pdm-project/pdm/issues/441)
- Support installing packages from subdiretories of VCS repository. [507](https://github.com/pdm-project/pdm/issues/507)
- Add an install script to bootstrap PDM quickly without help of other tools. Modify docs to recommend this installation method. [508](https://github.com/pdm-project/pdm/issues/508)
- Add a new subcommand `plugin` to manage pdm plugins, including `add`, `remove` and `list` commands. [510](https://github.com/pdm-project/pdm/issues/510)

Bug Fixes

- Don't monkeypatch the internal class of `resolvelib` any more. This makes PDM more stable across updates of sub-dependencies. [515](https://github.com/pdm-project/pdm/issues/515)

Miscellany

- Clear the type errors from mypy. [261](https://github.com/pdm-project/pdm/issues/261)

1.6.3

Not secure
---------------------------

Features & Improvements

- Add an option `-u/--unconstrained` to support unconstraining version specifiers when adding packages. [501](https://github.com/pdm-project/pdm/issues/501)

Bug Fixes

- Fix the format of dependency arrays when a new value is appended. [487](https://github.com/pdm-project/pdm/issues/487)
- Allow missing email attribute for authors and maintainers. [492](https://github.com/pdm-project/pdm/issues/492)
- Fix a bug that editable install shouldn't require pyproject.toml to be valid. [497](https://github.com/pdm-project/pdm/issues/497)
- Fix a bug on macOS that purelib and platlib paths of isolated build envs cannot be substituted correctly if the Python is a framework build. [502](https://github.com/pdm-project/pdm/issues/502)
- Fix the version sort of candidates. [506](https://github.com/pdm-project/pdm/issues/506)

Page 20 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.