Prequ

Latest version: v1.4.7

Safety actively analyzes 630966 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 6

1.4.1

-----

Released on 2018-06-05 1:15 +03:00.

General Changes
~~~~~~~~~~~~~~~

- Remove dependency on setuptools

- Remove dependency on six

- Improve error messages on dependency resolution failures

Bug Fixes
~~~~~~~~~

- Fix unsafe package reporting in the generated output file

1.4.0

-----

Released on 2018-05-26 19:35 +03:00.

This version of Prequ contains all the changes from pip-tools 2.0.2 and
is in sync with pip-tools master commit 9cb41d8.

General Changes
~~~~~~~~~~~~~~~

- Add support for Pip 10

- Improve error messages when skipping pre-releases
(jazzband/pip-tools655)

- Improve compile speed of locally available editable requirement by
avoiding creation of an sdist archive (jazzband/pip-tools583)

- Improve the ``NoCandidateFound`` error message on potential causes
(jazzband/pip-tools614)

- sync: Add ``-markerlib`` to the list of packages to ignore
(jazzband/pip-tools613)

- tests: Do not download Django from Git (jazzband/pip-tools629)

Features
~~~~~~~~

- sync: Add "--user" option to install packages into user-local
directory (jazzband/pip-tools642)

- Allow editable packages in source requirements even if generating
hashes is enabled (jazzband/pip-tools524)

Bug Fixes
~~~~~~~~~

- Handle environment markers in the source requirements
(jazzband/pip-tools647)

1.3.1

-----

Released on 2018-01-01 21:20 +02:00.

Bug Fixes
~~~~~~~~~

- Fix handling of requirements with a period in name

1.3.0

-----

Released on 2017-11-21 20:50 +02:00.

This version of Prequ is synced with pip-tools 1.10.2rc1.

Features
~~~~~~~~

- Add support for unpinned non-editable VCS URLs
- Make relative paths work as a requirement entry (editable or not)

General Changes
~~~~~~~~~~~~~~~

- Make "via package" comments work for editable requirers too
- Speedup: Do not regenerate hashes if they are already known

Bug Fixes
~~~~~~~~~

- Ignore installed packages when calulating dependencies
- Generate hashes of artifacts correctly
- sync: Respect environment markers (jazzband/pip-tools600)

1.2.2

-----

Released on 2017-09-28 9:50 +03:00.

This version of Prequ is synced with pip-tools 1.10.1.

Bug Fixes
~~~~~~~~~

- Fix a bug where the resolver would sometime not stabilize on
requirements specifying extras (jazzband/pip-tools566)
- Fix an unicode encoding error when distribution package contains
non-ASCII file names (jazzband/pip-tools567)
- sync: Fix syncing when there were editables present

1.2.1

-----

Released on 2017-09-14 0:15 +03:00.

Bug Fixes
~~~~~~~~~

- Correctly follow only the dependencies of the current platform

Page 2 of 6

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.