Bandersnatch

Latest version: v6.6.0

Safety actively analyzes 701809 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 11

6.6.0

New Features

- Add arbitrary configuration option for S3 Storage Backend Boto3 calls `PR 1697`
- Add pytest marker to allow skipping of S3 tests `PR 1766`
- Added HTTPS support in Docker Compose + Enabled bind-mount volume for Nginx config + add documentation in README.md `PR 1653`
- Initial support for python 3.12 `PR 1728`
- Move Docker images to 3.12 `PR 1733`
- Removing swift builds due to lack or assistance - Happy to bring back if you're willing to help maintain
- Move black, mypy + pyupgrade to >= 3.11 codebase `PR 1734`
- Allow non-HTTPS-enabled mirrors `PR 1765`
- Correct example config `PR 1807`

Documentation

- Updated documentation for `[mirror]` configuration options `PR 1669`
- Updated documentation `PR 1760`

Bug Fixes

- Fix event loop usage and test setup to move to latest test deps `PR 1829`
- Fix filtering for verify to fix deletion `PR 1690`
- Drop `types-pkg_resources` `PR 1793`
- Fix config file value interpolation for the `diff-file` option `PR 1715`
- Fix diff-file being created when the option wasn't set `PR 1716`
- Provide default values for most config options in the `[mirror]` section `PR 1740`
- Fix command execution by `runner.py` - `PR 1753`

Deprecation

- Move from pkg_resources to importlib_metadata for filter entry point usage `PR 1739`

6.5.0

New Features

- Add option to filter releases based on upload time `PR 1594`
- `project_requirements_pinned` with a pinned version (range) disables additional release filter for this package `PR 1601`
- Add command configuration for bandersnatch in Docker Compose, including 'mirror' default, 'verify' and 'once' options, improve documentation for docker compose, and added "Removing the Repository" section in Docker Compose README with a link in the main README. `PR 1645`

6.4.0

- Move JSON Simple API to version 1.1 (as per PEP700) `PR 1557`
- Move to >= 3.10 project `PR 1457`

Bug Fixes

- Support `py2` + `py3` bdist file name filtering `PR 1495`

6.3.0

Bug Fixes

- Fix digest used for file hashes in PEP 691 simple JSON file output `PR 1442`
- The `digest_name` setting from configuration (default value: `sha256`) will now be used for both HTML and JSON files.
- This mirrors pypi.org ("Warehouse") behavior
- Please use `bandersnatch mirror --force-check` to regenerate all your mirror's simple API
- `bandersnatch sync` could also be a way to update important packages faster too

6.2.0

New Features

- Add scandir() as Storage plugin API to speedup large directory read when generating global index `PR 1340`
- Declare support for Python 3.11 `PR 1338`
- Move Docker to build in 3.11 `PR 1341`
- Add "--force-check" parameter to runner.py `PR 1347`

Bug Fixes

- Fixed read of requirement files with non UTF-8 encoding - compatible with pip `PR 1387`
- Type checking fixed to pass mypy > 1.0.0
- Don't attempt docker on forks `PR 1336`

Notice

- This will be the last python 3.8 and 3.9 tested version. Going to plan to be >= 3.10

6.1.0

New Features

- Add a `packages` config under `[filter_prerelease]` for prerelease filter to filter only specified packages. `PR 1328`

Dropped Support

- Dropped LegacyVersion support for latest_name plugin `PR 1315`
- No longer issue PURGE requests on StalePage exceptions as PyPI now requires authentication `PR 1335`

CI

- Format with black `--preview` style `PR 1313`
- I contribute to black and want to help find bugs ...

Page 1 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.