Manifest-tool

Latest version: v2.6.1

Safety actively analyzes 630305 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 3

2.6.1

- Drop support for Python 3.7.
- Python 3.7 is end of life.
- It fails the PR-checks in Mac runner as an `arm64`-package of Python 3.7 is not available.
- Upgrade cryptography dependency from 41.0.4 to latest 42.0.7.
- There were multiple CVEs in the earlier one.
- However, they do not impact manifest-tool as we do not use pkcs12 functionality.

2.6.0

- Add support for an external signing tool
- The feature enables to use of an external signing tool for signing the manifest.
- Add a new CLI option `--signing-tool` to the `manifest-dev-tool init` command.
- The `--key` CLI option of the `manifest-dev-tool init` command can receive an identifier private key
or a private key file name that will be used to sign the manifest with the external signing tool provided.
- Add a new configuration option `signing-tool` that is used by the `manifest-tool create` command.
- The `--key` CLI option of the `manifest-tool create` or `manifest-tool create-v1` command can receive
an identifier private key or a private key file name that will be used to sign the manifest with
the external signing tool provided.
- Update `requests` to `2.31.0`.
- Update `cryptography` to `41.0.4`.
- Add support for Python 3.11 (super inits, imports with try, `tox` additions etc.).
- Update `dev-requirements`:
- Update `pytest` to the latest `7.4.2`.
- Update `pylint` to `2.17.7` (`3.0.2` does not support older versions of Python).
- Remove the `--force` CLI option that was deprecated already.

2.5.1

- Fix the minimal required Python version to 3.7.

2.5.0

- Izuma branding, contact email/author updated, Cloud documentation links updated.
- Timeouts for `requests.put/post/delete` operations.
- Pinned down critical Python module versions in `dev-requirements.txt`.
- Module name fixes for some tests.
- Removed obsolete options from `.pylintrc`.
- Support for / testing on Python 3.6 dropped.
- Support for / testing on Python 3.10 added.

2.4.1

- Aarch64 support.

2.4.0

- Add `manifest-package-tool`:
- New tool to generate combined package files for combined updates.
- Update the `README.md` file.

Page 1 of 3

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.