Pdm

Latest version: v2.15.2

Safety actively analyzes 625334 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 33

2.5.2

Not secure
---------------------------

Bug Fixes

- Regression(1710): Don't crash when trying to update the shebang in a binary script [1827](https://github.com/pdm-project/pdm/issues/1827)
- Rename the env var `PDM_USE_VENV` as `PDM_IN_VENV` for `--venv` flag as it mistakenly override another existing env var. [1829](https://github.com/pdm-project/pdm/issues/1829)

2.5.1

Not secure
---------------------------

Bug Fixes

- Fix a bug that `pdm --pep582` raises an argument error. [1823](https://github.com/pdm-project/pdm/issues/1823)

2.5.0

Not secure
---------------------------

Features & Improvements

- When `resolution.respect-source-order` is enabled, sources are lazily evaluated. This means that if a match is found on the first source, the remaining sources will not be requested. [1509](https://github.com/pdm-project/pdm/issues/1509)
- New option `--venv <venv>` to run a command in the virtual environment with the given name. [1705](https://github.com/pdm-project/pdm/issues/1705)
- Allow to prefer binary distributions when locking and installing packages, via `PDM_PREFER_BINARY` environment variable. [1817](https://github.com/pdm-project/pdm/issues/1817)

Bug Fixes

- Do not validate selected groups against the locked grouped when running `pdm lock`. [1796](https://github.com/pdm-project/pdm/issues/1796)
- Avoid duplicate .pdm-python in .gitignore. [1800](https://github.com/pdm-project/pdm/issues/1800)
- Fix a backwards compatibility issue by adding back the `environment.is_global` property. [1814](https://github.com/pdm-project/pdm/issues/1814)
- Fix a resolution conflict when a relative path requirement resolves to the same path as another file requirement with absolute path. [1822](https://github.com/pdm-project/pdm/issues/1822)
- Fix an error when running `pdm init -p <dir>` if the target directory is not created yet. [1822](https://github.com/pdm-project/pdm/issues/1822)

2.5.0b0

Not secure
-----------------------------

Breaking Changes

- Switch the default build backend to `pdm-backend`. [1684](https://github.com/pdm-project/pdm/issues/1684)
- Only lock selected groups into the lockfile. Modify other commands to honor the groups included in the lockfile. [1704](https://github.com/pdm-project/pdm/issues/1704)
- Move the project python path to its own file, and rename the project config file as `pdm.toml` which can be committed to the VCS. [1742](https://github.com/pdm-project/pdm/issues/1742)
- Refactor the environment package. `Environment` is renamed to `PythonLocalEnvironment` and `GlobalEnvironment` is renamed to `PythonEnvironment`. Move `pdm.models.environment` module to `pdm.environments` package. [1791](https://github.com/pdm-project/pdm/issues/1791)

Features & Improvements

- Add option to fail on the first install error. [1614](https://github.com/pdm-project/pdm/issues/1614)
- Upgrade `unearth` to 0.8 to allow calling keyring from CLI. [1653](https://github.com/pdm-project/pdm/issues/1653)
- Merge the index parameters from different configuration files. [1667](https://github.com/pdm-project/pdm/issues/1667)
- Add new options to `venv` command to show the path or the python interpreter for a managed venv. [1680](https://github.com/pdm-project/pdm/issues/1680)
- Write the groups of resolved dependencies to the metadata table in lockfile. [1692](https://github.com/pdm-project/pdm/issues/1692)
- Introduce `--lib` option to `init` command to create a library project without prompting. [1708](https://github.com/pdm-project/pdm/issues/1708)
- New command: `pdm fix` to migrate to the new PDM features. Add a hint when invoking PDM commands. [1743](https://github.com/pdm-project/pdm/issues/1743)
- Include `.pdm-python` in project root `.gitignore` when running `pdm init`. [1749](https://github.com/pdm-project/pdm/issues/1749)
- Allow to ignore the activated venv with `PDM_IGNORE_ACTIVE_VENV` env var. [1782](https://github.com/pdm-project/pdm/issues/1782)
- Add a signal `pre_invoke` to emit before any command is invoked. [1792](https://github.com/pdm-project/pdm/issues/1792)

Bug Fixes

- Fix a bug that install warning prints to terminal under non-verbose mode. [1635](https://github.com/pdm-project/pdm/issues/1635)
- Fix the random failure of `pdm export` due to non-deterministic order of group iteration. [1786](https://github.com/pdm-project/pdm/issues/1786)
- Show the actual version when running `pdm show --version` [1788](https://github.com/pdm-project/pdm/issues/1788)

Documentation

- Restructure the documentation. [1687](https://github.com/pdm-project/pdm/issues/1687)

Dependencies

- Update `installer` to `0.7.0` and emit a warning if the RECORD validation fails. [1784](https://github.com/pdm-project/pdm/issues/1784)

2.4.9

Not secure
---------------------------

Bug Fixes

- Fix a bug of synchronization of not considering the revision of VCS requirement in comparison. [1762](https://github.com/pdm-project/pdm/issues/1762)
- Improve the error message when parsing an invalid requirement string. [1765](https://github.com/pdm-project/pdm/issues/1765)
- Fix a bug that `pdm export` output doesn't include the extras of the dependencies. [1767](https://github.com/pdm-project/pdm/issues/1767)

2.4.8

Not secure
---------------------------

Bug Fixes

- Fix the resolution order to prefer the packages causing the conflict.
This can make the resolution reach a solution faster. [1752](https://github.com/pdm-project/pdm/issues/1752)
- Fix a bug that embedded credentials in URL are not respected for the default source. [1757](https://github.com/pdm-project/pdm/issues/1757)

Page 8 of 33

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.