Pdm

Latest version: v2.15.2

Safety actively analyzes 625251 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 5 of 33

2.9.0

Not secure
---------------------------

Features & Improvements

- Add an `--overwrite` option to `pdm init` to overwrite existing files(default False). [2163](https://github.com/pdm-project/pdm/issues/2163)
- Support passing filter patterns as positional arguments to `pdm list` command.
Add `--tree` as an alias and preferred name of `--graph` option. [2165](https://github.com/pdm-project/pdm/issues/2165)
- Switch to truststore by default. [2195](https://github.com/pdm-project/pdm/issues/2195)
- Consider packages as installed if the venv includes them from the system-site-packages. [2216](https://github.com/pdm-project/pdm/issues/2216)
- Allow `pdm run` to run a script with the relative or absolute path. [2217](https://github.com/pdm-project/pdm/issues/2217)

Bug Fixes

- Fix a bug that removing dev dependency uninstalls the project as well. [2150](https://github.com/pdm-project/pdm/issues/2150)
- Fix a bug that ` file://` dependencies can not be updated. [2169](https://github.com/pdm-project/pdm/issues/2169)
- Fix a bug that dependencies requested out of the range of `requires-python` cause PDM to crash. [2175](https://github.com/pdm-project/pdm/issues/2175)
- Fix the compatibility issue with copier 8.0+. [2177](https://github.com/pdm-project/pdm/issues/2177)
- Makes `comarable_version("1.2.3+local1") == Version("1.2.3")`. [2182](https://github.com/pdm-project/pdm/issues/2182)
- Default behavior for pdm venv activate when shell detection fails. [2187](https://github.com/pdm-project/pdm/issues/2187)
- Handle parsing errors when converting from poetry-style metadata. [2203](https://github.com/pdm-project/pdm/issues/2203)
- Don't copy .pyc files from the template directory. [2213](https://github.com/pdm-project/pdm/issues/2213)

Removals and Deprecations

- Remove the legacy build backend `pdm-pep517`. [2167](https://github.com/pdm-project/pdm/issues/2167)

2.8.2

Not secure
---------------------------

Features & Improvements

- Allow setting username and password in URL for publish command [2140](https://github.com/pdm-project/pdm/issues/2140)

Bug Fixes

- Use UTF-8 encoding when writing `sitecustomize.py`. [2139](https://github.com/pdm-project/pdm/issues/2139)

2.8.1

Not secure
---------------------------

Features & Improvements

- Add `keyring`, `copier`, `cookiecutter`, `template`, `truststore` dependency groups. [2109](https://github.com/pdm-project/pdm/issues/2109)
- Ignore wheels for python versions not in range. [2113](https://github.com/pdm-project/pdm/issues/2113)
- Read default value from env var `PDM_PROJECT` for `-p/--project` option. [2126](https://github.com/pdm-project/pdm/issues/2126)

Bug Fixes

- Fix the comparison of the candidate keys in the lockfile. [2120](https://github.com/pdm-project/pdm/issues/2120)
- Don't update `pyproject.toml` if both `--unconstrained` and `--dry-run` are passed to `pdm update`. [2125](https://github.com/pdm-project/pdm/issues/2125)
- Overwrite the `build-system` table when importing from other package manager. [2126](https://github.com/pdm-project/pdm/issues/2126)
- Skip sources with empty URL when merging sources. [2130](https://github.com/pdm-project/pdm/issues/2130)
- Fix the invalid requirement converted from poetry metadata. [2133](https://github.com/pdm-project/pdm/issues/2133)

Dependencies

- Update `unearth` to 0.10.0 [2113](https://github.com/pdm-project/pdm/issues/2113)

2.8.0

Not secure
---------------------------

Features & Improvements

- Support target python with other architectures. [2078](https://github.com/pdm-project/pdm/issues/2078)
- Display the help information when running pdm directly. [2081](https://github.com/pdm-project/pdm/issues/2081)
- Allow to change the python providers from the config. Support finding pythons from Rye installation location with the new findpython. [2099](https://github.com/pdm-project/pdm/issues/2099)
- Option to save static URLs in the lockfile. By default only filenames are saved. [2101](https://github.com/pdm-project/pdm/issues/2101)

Bug Fixes

- Fix a bug that egg-info directories are not removed completely, leading to incomplete distribution. [2027](https://github.com/pdm-project/pdm/issues/2027)
- Skip distributions with wrong package meta information and duplicate path. [2075](https://github.com/pdm-project/pdm/issues/2075)
- Avoid mistakenly passing command-line arguments while testing. [2083](https://github.com/pdm-project/pdm/issues/2083)
- Fix a bug that lockfile groups are overwritten when running locking in a preceding step of `pdm install`. [2086](https://github.com/pdm-project/pdm/issues/2086)
- Tolerate and actually ignore the local versions in version specifiers. [2102](https://github.com/pdm-project/pdm/issues/2102)
- Fix a bug that shared cache cannot support overlapping namespace packages. [2105](https://github.com/pdm-project/pdm/issues/2105)

Documentation

- Add notes about using custom venv path. [2096](https://github.com/pdm-project/pdm/issues/2096)

2.8.0a2

Not secure
-----------------------------

Bug Fixes

- Fix a bug that dependencies can't be updated when the table is separated by another table. [2056](https://github.com/pdm-project/pdm/issues/2056)
- Fix a bug that `*_lock` hooks are always emitted with dry_run=True in `pdm update`. [2060](https://github.com/pdm-project/pdm/issues/2060)
- Fix a bug that `pdm install --plugins` can't install self. [2062](https://github.com/pdm-project/pdm/issues/2062)
- Fix a cache collision between named requirements and url requirements. [2064](https://github.com/pdm-project/pdm/issues/2064)

2.8.0a1

Not secure
-----------------------------

Features & Improvements

- Add support for `cookiecutter` and `copier` as project generator. [2059](https://github.com/pdm-project/pdm/issues/2059)

Page 5 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.