Pip-tools

Latest version: v7.4.1

Safety actively analyzes 630094 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 7 of 15

5.1.1

01 May 2020

Bug Fixes:

- Fix a bug where `pip-compile` would generate hashes for `*.egg` files
([1122](https://github.com/jazzband/pip-tools/pull/1122)). Thanks atugushev

5.1.0

27 Apr 2020

Features:

- Show progress bar when downloading packages in `pip-compile` verbose mode
([949](https://github.com/jazzband/pip-tools/pull/949)). Thanks atugushev
- `pip-compile` now gets hashes from `PyPI` JSON API (if available) which significantly
increases the speed of hashes generation
([1109](https://github.com/jazzband/pip-tools/pull/1109)). Thanks atugushev

5.0.0

16 Apr 2020

Backwards Incompatible Changes:

- `pip-tools` now requires `pip>=20.0` (previously `8.1.x` - `20.0.x`). Windows users,
make sure to use `python -m pip install pip-tools` to avoid issues with `pip`
self-update from now on ([1055](https://github.com/jazzband/pip-tools/pull/1055)).
Thanks atugushev
- `--build-isolation` option now set on by default for `pip-compile`
([1060](https://github.com/jazzband/pip-tools/pull/1060)). Thanks hramezani

Features:

- Exclude requirements with non-matching markers from `pip-sync`
([927](https://github.com/jazzband/pip-tools/pull/927)). Thanks AndydeCleyre
- Add `pre-commit` hook for `pip-compile`
([976](https://github.com/jazzband/pip-tools/pull/976)). Thanks atugushev
- `pip-compile` and `pip-sync` now pass anything provided to the new `--pip-args` option
on to `pip` ([1080](https://github.com/jazzband/pip-tools/pull/1080)). Thanks
AndydeCleyre
- `pip-compile` output headers are now more accurate when `--` is used to escape
filenames ([1080](https://github.com/jazzband/pip-tools/pull/1080)). Thanks
AndydeCleyre
- Add `pip>=20.1` support ([1088](https://github.com/jazzband/pip-tools/pull/1088)).
Thanks atugushev

Bug Fixes:

- Fix a bug where editables that are both direct requirements and constraints wouldn't
appear in `pip-compile` output
([1093](https://github.com/jazzband/pip-tools/pull/1093)). Thanks richafrank
- `pip-compile` now sorts format controls (`--no-binary/--only-binary`) to ensure
consistent results ([1098](https://github.com/jazzband/pip-tools/pull/1098)). Thanks
richafrank

Improved Documentation:

- Add cross-environment usage documentation to `README`
([651](https://github.com/jazzband/pip-tools/pull/651)). Thanks vphilippon
- Add versions compatibility table to `README`
([1106](https://github.com/jazzband/pip-tools/pull/1106)). Thanks atugushev

4.5.1

26 Feb 2020

Bug Fixes:

- Strip line number annotations such as "(line XX)" from file requirements, to prevent
diff noise when modifying input requirement files
([1075](https://github.com/jazzband/pip-tools/pull/1075)). Thanks adamchainz

Improved Documentation:

- Updated `README` example outputs for primary requirement annotations
([1072](https://github.com/jazzband/pip-tools/pull/1072)). Thanks richafrank

4.5.0

20 Feb 2020

Features:

- Primary requirements and VCS dependencies are now get annotated with any source `.in`
files and reverse dependencies
([1058](https://github.com/jazzband/pip-tools/pull/1058)). Thanks AndydeCleyre

Bug Fixes:

- Always use normalized path for cache directory as it is required in newer versions of
`pip` ([1062](https://github.com/jazzband/pip-tools/pull/1062)). Thanks kammala

Improved Documentation:

- Replace outdated link in the `README` with rationale for pinning
([1053](https://github.com/jazzband/pip-tools/pull/1053)). Thanks m-aciek

4.4.1

31 Jan 2020

Bug Fixes:

- Fix a bug where `pip-compile` would keep outdated options from `requirements.txt`
([1029](https://github.com/jazzband/pip-tools/pull/1029)). Thanks atugushev
- Fix the `No handlers could be found for logger "pip.*"` error by configuring the
builtin logging module ([1035](https://github.com/jazzband/pip-tools/pull/1035)).
Thanks vphilippon
- Fix a bug where dependencies of relevant constraints may be missing from output file
([1037](https://github.com/jazzband/pip-tools/pull/1037)). Thanks jeevb
- Upgrade the minimal version of `click` from `6.0` to `7.0` version in `setup.py`
([1039](https://github.com/jazzband/pip-tools/pull/1039)). Thanks hramezani
- Ensure that depcache considers the python implementation such that (for example)
`cpython3.6` does not poison the results of `pypy3.6`
([1050](https://github.com/jazzband/pip-tools/pull/1050)). Thanks asottile

Improved Documentation:

- Make the `README` more imperative about installing into a project's virtual
environment to avoid confusion
([1023](https://github.com/jazzband/pip-tools/pull/1023)). Thanks tekumara
- Add a note to the `README` about how to install requirements on different stages to
[Workflow for layered requirements](https://pip-tools.rtfd.io/en/latest/#workflow-for-layered-requirements)
section ([1044](https://github.com/jazzband/pip-tools/pull/1044)). Thanks hramezani

Page 7 of 15

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.