Pdm

Latest version: v2.15.2

Safety actively analyzes 625178 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 33

2.10.2

----------------------------

Features & Improvements

- Log the response text when `pdm publish` fails with HTTP error. [2400](https://github.com/pdm-project/pdm/issues/2400)

Bug Fixes

- Improve the error message when a specific package can't be found in the lockfile. [2358](https://github.com/pdm-project/pdm/issues/2358)
- prevent wrong project name (including space and illegal characters) [2360](https://github.com/pdm-project/pdm/issues/2360)
- Fix a bug that PDM cannot detect namespace packages correctly when creating symlinks. The package's `__init__.py` contains an unusual line. [2378](https://github.com/pdm-project/pdm/issues/2378)
- Fix template files created by `pdm init` being read-only when copied from a read-only PDM installation. [2379](https://github.com/pdm-project/pdm/issues/2379)
- Don't reset the build backend when asking for import. [2388](https://github.com/pdm-project/pdm/issues/2388)
- Never wrap the output of the `export` command. [2390](https://github.com/pdm-project/pdm/issues/2390)
- Forbid global project in conda base environment, since it may remove conda-managed packages. [2409](https://github.com/pdm-project/pdm/issues/2409)

2.10.1

----------------------------

Bug Fixes

- Fix a bug preventing ctrl-c from interrupting program execution on 2nd invocation when using "pdm run" (Windows only). [2292](https://github.com/pdm-project/pdm/issues/2292)
- Fix list index out of range when build error message is empty. [2337](https://github.com/pdm-project/pdm/issues/2337)
- Fix find_link sources being exported as `--extra--index-url` [2342](https://github.com/pdm-project/pdm/issues/2342)
- Fix an installation failure when install.cache = true. [2355](https://github.com/pdm-project/pdm/issues/2355)
- Fix a resolution issue that extra dependencies are not resolved when the bare dependency has more specific version constraint. [2369](https://github.com/pdm-project/pdm/issues/2369)

Documentation

- Set up a chatbot powered by LLM on the doc page. [2365](https://github.com/pdm-project/pdm/issues/2365)

2.10.0

----------------------------

Features & Improvements

- Allow binding packages to specific sources with `include_packages` and `exclude_packages` config under `tool.pdm.source` table. [1645](https://github.com/pdm-project/pdm/issues/1645)
- Show warnings when a package is rejected by the resolve because of uncovered `requires-python` range. And provide a way to ignore them per-package. [2304](https://github.com/pdm-project/pdm/issues/2304)
- Add `-q/--quiet` option to suppress some warnings printed to the console. This option is mutually exclusive with `-v/--verbose`. [2304](https://github.com/pdm-project/pdm/issues/2304)
- Introduce a new `--strategy/-S` option for `lock` command, to specify one or more strategy flags for resolving dependencies. `--static-urls` and `--no-cross-platform` are deprecated at the same time. [2310](https://github.com/pdm-project/pdm/issues/2310)
- Add lock option to resolve direct dependencies to the minimal versions available. [2310](https://github.com/pdm-project/pdm/issues/2310)
- Report the progress of download and unpacking when installing packages. [2328](https://github.com/pdm-project/pdm/issues/2328)

Bug Fixes

- Change the venv backend clean function `pdm.cli.commands.venv.backend.Backend._ensure_clean` to empty the `.venv` folder instead of deleting it. [2282](https://github.com/pdm-project/pdm/issues/2282)
- Fix a bug that dependency groups from Poetry 1.2+ do not migrate properly to PDM. [2285](https://github.com/pdm-project/pdm/issues/2285)
- Fix a bug that build requirements are installed into wrong location when using `--venv` option. [2314](https://github.com/pdm-project/pdm/issues/2314)
- Fix a bug that global repository setting results in TypeError . [2330](https://github.com/pdm-project/pdm/issues/2330)
- Fix a credentials error when working with two indices on the same host [2333](https://github.com/pdm-project/pdm/issues/2333)

Miscellany

- Officially supports python3.12 now. [2301](https://github.com/pdm-project/pdm/issues/2301)

2.9.3

Not secure
---------------------------

Bug Fixes

- Revert the changes to the behavior of installing self, introduced in 2162.
Self package won't be installed when `--no-default` is requested. [2230](https://github.com/pdm-project/pdm/issues/2230)
- Reject the candidate if it contains invalid metadata, to avoid a crash in the process of resolution. [2261](https://github.com/pdm-project/pdm/issues/2261)

Documentation

- Clarify what `--no-isolated` does. [2071](https://github.com/pdm-project/pdm/issues/2071)

2.9.2

Not secure
---------------------------

Features & Improvements

- Fix an issue that `--no-lock` option doesn't work as expected. Also support `--no-lock` option for `add`, `remove` and `update` commands. [2245](https://github.com/pdm-project/pdm/issues/2245)

Bug Fixes

- Use `findpython` to find pythons with the spec given by the user. [2225](https://github.com/pdm-project/pdm/issues/2225)
- Use UTF-8 to read pyvenv.cfg. [2227](https://github.com/pdm-project/pdm/issues/2227)
- On Windows, try looking for the `virtualenv` `python.exe` binary under `bin/`
as well as `Scripts/` and the `virtualenv`/`conda` root. [2236](https://github.com/pdm-project/pdm/issues/2236)
- Write relocatable dependency URLs with `${PROJECT_ROOT}` variable in the lockfile. [2240](https://github.com/pdm-project/pdm/issues/2240)

2.9.1

Not secure
---------------------------

Features & Improvements

- Support convert setup.cfg without existing setup.py. [2222](https://github.com/pdm-project/pdm/issues/2222)

Bug Fixes

- `pdm run` should only find local file if the command starts with `./`. [2221](https://github.com/pdm-project/pdm/issues/2221)

Page 4 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.