Pex

Latest version: v2.3.1

Safety actively analyzes 630130 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 30 of 47

2.0.1

This is a hotfix release that fixes a bug when specifying a custom index
(`-i`/`--index`/`--index-url`) via the CLI.

* Fix 794 issue by add missing return statement in `__str__` (795)

2.0.0

typical use cases: it now uses vendored pip to perform resolves and
wheel builds. This fixes a large number of compatibility and correctness
bugs as well as gaining feature support from pip including handling
manylinux2010 and manylinux2014 as well as VCS requirements and support
for PEP-517 & PEP-518 builds.

API changes to be wary of:

* The egg distribution format is no longer supported.
* The deprecated `--interpreter-cache-dir` CLI option was removed.
* The `--cache-ttl` CLI option and `cache_ttl` resolver API argument
were removed.
* The resolver API replaced `fetchers` with a list of `indexes` and a
list of `find_links` repos.
* The resolver API removed (http) `context` which is now automatically
handled.
* The resolver API removed `precedence` which is now pip default
precedence: wheels when available and not ruled out via the
`--no-wheel` CLI option or `use_wheel=False` API argument.
* The `--platform` CLI option and `platform` resolver API argument now
must be full platform strings that include platform, implementation,
version and abi; e.g.: `--platform=macosx-10.13-x86_64-cp-36-m`.
* The `--manylinux` CLI option and `use_manylinux` resolver API
argument were removed. Instead, to resolve manylinux wheels for a
foreign platform, specify the manylinux platform to target with an
explicit `--platform` CLI flag or `platform` resolver API argument;
e.g.: `--platform=manylinux2010-x86_64-cp-36-m`.

In addition, Pex 2.0.0 now builds reproducible pexes by default; ie:

* Python modules embedded in the pex are not pre-compiled (pass
`--compile` if you want this).
* The timestamps for Pex file zip entries default to midnight on
January 1, 1980 (pass `--use-system-time` to change this).

This finishes off the effort tracked by issue 716.

Changes in this release:

* Pex defaults to reproducible builds. (791)
* Use pip for resolving and building distributions. (788)
* Bias selecting the current interpreter. (783)

1.6.12

This release adds the `--intransitive` option to support pre-resolved
requirements lists and allows for python binaries built under Gentoo
naming conventions.

* Add an `--intransitive` option. (775)
* PythonInterpreter: support python binary names with single letter
suffixes (769)

1.6.11

This release brings a consistency fix to requirement resolution and an
isolation fix that scrubs all non-stdlib PYTHONPATH entries by default,
only pre-pending or appending them to the `sys.path` if the
corresponding `--inherit-path=(prefer|fallback)` is used.

* Avoid reordering of equivalent packages from multiple fetchers
(762)
* Include `PYTHONPATH` in `--inherit-path`
logic. (765)

1.6.10

This is a hotfix release for the bug detailed in 756 that was
introduced by 752 in python 3.7 interpreters.

* Guard against modules with a `__file__` of
`None`. (757)

1.6.9

* Fix `sys.path` scrubbing of pex extras modules. (752)
* Fix pkg resource early import (750)

Page 30 of 47

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.