Pip-deepfreeze

Latest version: v2.2

Safety actively analyzes 623144 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 4

2.2

Features

- Pass `--no-input` to pip commands, to avoid silently blocking on user input. ([131](https://github.com/sbidoul/pip-deepfreeze/issues/131))
- Use `uv`'s `--python` option to select the interpreter, instead of passing it as a
`VIRTUAL_ENV` environment variable. This is more explicit and hopefully more resilient
to changes in `uv`'s Python detection logic. ([145](https://github.com/sbidoul/pip-deepfreeze/issues/145))

2.1

Deprecations and Removals

- Change `--installer=uv` to `--installer=uvpip`. This is a breaking
change that we do while this is young, to avoid possible confusion in
the future with other `uv` install mechanisms that are on their
roadmap.
([\144](https://github.com/sbidoul/pip-deepfreeze/issues/144))

2.0

Features

- Allow to declare minimum pip-deepfreeze version in `pyproject.toml`.
`pip-deepfreeze` verifies its version according to
`tool.pip-deepfreeze.min_version`, so a project can ensure all
contributors have the minmum required version.
([\95](https://github.com/sbidoul/pip-deepfreeze/issues/95))
- Always install `uv` as a dependency. Consequently, the `uv` extra is
removed.
([\143](https://github.com/sbidoul/pip-deepfreeze/issues/143))

1.8

Features

- Read constraints from `constraints.txt` (and fallback to
`requirements.txt.in` if it is absent), as this name better matches
the purpose of the file.
([\59](https://github.com/sbidoul/pip-deepfreeze/issues/59))

Bugfixes

- Improve compatibility with `uv`, by passing installer options via
command line instead of requirements file (this does not change how
options are set by the user in `constraints.txt` or
`requirements.txt.in`).
([\138](https://github.com/sbidoul/pip-deepfreeze/issues/138))

1.7

Features

- Support environments where pip is not installed.
([\98](https://github.com/sbidoul/pip-deepfreeze/issues/98))
- Add experimental support for [uv](https://github.com/astral-sh/uv) as
the installation command. A new `--installer` option is available to
select the installer to use.
([\135](https://github.com/sbidoul/pip-deepfreeze/issues/135))

1.6

Bugfixes

- Silence a deprecation warning about `pkg_resources`.
([\133](https://github.com/sbidoul/pip-deepfreeze/issues/133))
- Sort requirement files by canonical requirement name to help ensure
stability and comparability.
([\134](https://github.com/sbidoul/pip-deepfreeze/issues/134))

Page 1 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.