Palm

Latest version: v2.6.0

Safety actively analyzes 714792 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 3

2.4.0

Not secure
Added

- **Run docker commands without /bin/bash** - Added optional arguments to
environment.run_in_docker allows developers to execute commands in their docker
containers without prepending them with /bin/bash -c. This is useful & necessary
for images with a specific entrypoint
- **New documentation** for:
- Global palm configuration
- Shell autocomplete
- Upgrading palm

2.3.0

Not secure
Features:

- **Override command** The new `palm override` command makes it easy to change the functionality of core or plugin commands in your project.
- **git repo added to palm config** Developers can now access the pygit2 Repository via the context.obj.palm.config - this can be helpful when implementing commands that use git or need data from the repo.

Improvements

- **Startup speed** changed the implementation of checking docker-compose is installed, this fixes intermittent slowdowns on startup
- **Dependency upgrades**: Click updated to v8.1 and up, Black updated to v22.3.0

2.2.0

Not secure
Python Version Support:

- **Dropped support for python3.6** Python 3.6 is end of life and supporting it started to cause issues with dependent packages. We are dropping support for python 3.6 in palm v2.2.0

Added

- **Global config & Global plugins** Palm now supports installing plugins globally!
After updating to palm 2.2.0, the first time you run `palm ...` a new global config
will be created at `~/.palm/config.yaml`, you can add plugins to this config to
make them available to all of your repositories! This feature was developed to
support a Palmetto internal `palm-workflow` plugin, which is used to manage our
dev workflow in Trello.

Fixed

- **pygit2 version pin adjusted**: The upper version pin on pygit2 was removed to resolve an error
installing palm on newer versions of MacOS. Note that libgit2 is still required,
per the requirements of pygit2. A future version will introduce checking for libgit2
and more friendly error messaging.
- **Upgraded jinja**: We were previously using an unsupported version of Jinja which was using
a deprecated method in markupsafe, markupsafe removed that method which caused an error when
installing palm. We upgraded to the latest version of jinja to resolve this issue and get the latest jinja features.

2.1.1

Not secure
Fixed

- Resolve a template issue when running `palm plugin new`

Changed

- Command templates now use click's pass_obj decorator and pass the `environment`
argument, this is a cleaner API for interacting with the Palm.Environment class
- CI now runs against multiple python versions
- Black version is pinned for consistency between local & CI runs

2.1.0

Not secure
Our first minor release on v2 includes containerization, support for older Python versions,
and added logo and brand assets!

Added

- **Containerize**: NEW command added for containerization of Python projects with `palm containerize`
- **Shell**: NEW command to shell into the project container and execute arbitrary commands
- **Plugin generator**: NEW command to generate the boilerplate code for writing a new plugin
- **Excluded commands**: Added the ability to exclude/disable `palm` commands from a project's config
- **`run_on_host`**: Added a new function, `ctx.obj.run_on_host`, to assist with developing new commands
to run on your local machine, standardizing the interface around Python's `subprocess` with platform
and version agnostic support (well, version agnostic >= 3.6.9).
- **Logo/Branding**: We have a logo!! It is 90's retro and it is cool. Also added branding guidelines

Changed

- **Command availability**: Added `lint` and `test` commands to the `palm` core plugin
- **Workflow**: New Github Actions workflow to lint contributions to the project on new Pull Request
- **Backwards compatibility**: Added backwards compatibility support for older Python versions through v3.6.9
- **Documentation**: Added new docs and examples of `palm` use cases and impact

2.0.2

Not secure
We acquired the name `palm` in pypi! This patch version is just renaming the library
and updating installation instructions.

Page 2 of 3

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.