Bandersnatch

Latest version: v6.5.0

Safety actively analyzes 688520 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 11

6.5.0

New Features

- Add option to filter releases based on upload time `PR 1594`
- `project_requirements_pinned` with a pinned version (range) disables additional release filter for this package `PR 1601`

6.4.0

- Move JSON Simple API to version 1.1 (as per PEP700) `PR 1557`
- Move to >= 3.10 project `PR 1457`

Bug Fixes

- Support `py2` + `py3` bdist file name filtering `PR 1495`

6.3.0

Bug Fixes

- Fix digest used for file hashes in PEP 691 simple JSON file output `PR 1442`
- The `digest_name` setting from configuration (default value: `sha256`) will now be used for both HTML and JSON files.
- This mirrors pypi.org ("Warehouse") behavior
- Please use `bandersnatch mirror --force-check` to regenerate all your mirror's simple API
- `bandersnatch sync` could also be a way to update important packages faster too

6.2.0

New Features

- Add scandir() as Storage plugin API to speedup large directory read when generating global index `PR 1340`
- Declare support for Python 3.11 `PR 1338`
- Move Docker to build in 3.11 `PR 1341`
- Add "--force-check" parameter to runner.py `PR 1347`

Bug Fixes

- Fixed read of requirement files with non UTF-8 encoding - compatible with pip `PR 1387`
- Type checking fixed to pass mypy > 1.0.0
- Don't attempt docker on forks `PR 1336`

Notice

- This will be the last python 3.8 and 3.9 tested version. Going to plan to be >= 3.10

6.1.0

New Features

- Add a `packages` config under `[filter_prerelease]` for prerelease filter to filter only specified packages. `PR 1328`

Dropped Support

- Dropped LegacyVersion support for latest_name plugin `PR 1315`
- No longer issue PURGE requests on StalePage exceptions as PyPI now requires authentication `PR 1335`

CI

- Format with black `--preview` style `PR 1313`
- I contribute to black and want to help find bugs ...

6.0.1

Bug Fixes

- Fixed JSON only mirroring adding correct path to diff_file_list `PR 1248`
- Fixed requirements file parsing when it contains pip options `PR 1231`

New Features

- Added the possibility to limit the time range in which the docker image runner can execute the bandersnatch mirroring activity.
This can be done by providing an optional command line argument with like `--hours-range 23-7` where the interval is expressed
as `<start_hour>-<end_hour>`. `PR 1232`
- Add support for globbing in the allowed requirements list.
User can specify `requirements*.txt` or `*.txt` to merge multiple requirements files `PR 1230`

Page 1 of 11

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.