Pdm

Latest version: v2.20.1

Safety actively analyzes 682471 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 16 of 36

2.0.0

Not secure
---------------------------

Bug Fixes

- Fix a bug that the running env overrides the PEP 582 `PYTHONPATH`. [1211](https://github.com/pdm-project/pdm/issues/1211)
- Add [`pwsh`](https://github.com/PowerShell/PowerShell) as an alias of `powershell` for shell completion. [#1216](https://github.com/pdm-project/pdm/issues/1216)
- Fixed a bug with `zsh` completion regarding `--pep582` flag. [1218](https://github.com/pdm-project/pdm/issues/1218)
- Fix a bug of requirement checking under non-isolated mode. [1219](https://github.com/pdm-project/pdm/issues/1219)
- Fix a bug when removing packages, TOML document might become invalid. [1221](https://github.com/pdm-project/pdm/issues/1221)

2.0.0b2

Not secure
-----------------------------

Breaking Changes

- Store file URLs instead of filenames in the lock file, bump lock version to `4.0`. [1203](https://github.com/pdm-project/pdm/issues/1203)

Features & Improvements

- Read site-wide configuration, which serves as the lowest-priority layer.
This layer will be read-only in the CLI. [1200](https://github.com/pdm-project/pdm/issues/1200)
- Get package links from the urls stored in the lock file. [1204](https://github.com/pdm-project/pdm/issues/1204)

Bug Fixes

- Fix a bug that the host pip(installed with pdm) may not be compatible with the project python. [1196](https://github.com/pdm-project/pdm/issues/1196)
- Update `unearth` to fix a bug that install links with weak hashes are skipped. This often happens on self-hosted PyPI servers. [1202](https://github.com/pdm-project/pdm/issues/1202)

2.0.0b1

Not secure
-----------------------------

Features & Improvements

- Integrate `pdm venv` commands into the main program. Make PEP 582 an opt-in feature. [1162](https://github.com/pdm-project/pdm/issues/1162)
- Add config `global_project.fallback_verbose` defaulting to `True`. When set to `False` disables message `Project is not found, fallback to the global project` [1188](https://github.com/pdm-project/pdm/issues/1188)
- Add `--only-keep` option to `pdm sync` to keep only selected packages. Originally requested at 398. [1191](https://github.com/pdm-project/pdm/issues/1191)

Bug Fixes

- Fix a bug that requirement extras and underlying are resolved to the different version [1173](https://github.com/pdm-project/pdm/issues/1173)
- Update `unearth` to `0.4.1` to skip the wheels with invalid version parts. [1178](https://github.com/pdm-project/pdm/issues/1178)
- Fix reading `PDM_RESOLVE_MAX_ROUNDS` environment variable (was spelled `…ROUDNS` before). [1180](https://github.com/pdm-project/pdm/issues/1180)
- Deduplicate the list of found Python versions. [1182](https://github.com/pdm-project/pdm/issues/1182)
- Use the normal stream handler for logging, to fix some display issues under non-tty environments. [1184](https://github.com/pdm-project/pdm/issues/1184)

Removals and Deprecations

- Remove the useless `--no-clean` option from `pdm sync` command. [1191](https://github.com/pdm-project/pdm/issues/1191)

2.0.0a1

Not secure
-----------------------------

Breaking Changes

- Editable dependencies in the `[project]` table is not allowed, according to PEP 621. They are however still allowed in the `[tool.pdm.dev-dependencies]` table. PDM will emit a warning when it finds editable dependencies in the `[project]` table, or will abort when you try to add them into the `[project]` table via CLI. [1083](https://github.com/pdm-project/pdm/issues/1083)
- Now the paths to the global configurations and global project are calculated according to platform standards. [1161](https://github.com/pdm-project/pdm/issues/1161)

Features & Improvements

- Add support for importing from a `setup.py` project. [1062](https://github.com/pdm-project/pdm/issues/1062)
- Switch the UI backend to `rich`. [1091](https://github.com/pdm-project/pdm/issues/1091)
- Improved the terminal UI and logging. Disable live progress under verbose mode. The logger levels can be controlled by the `-v` option. [1096](https://github.com/pdm-project/pdm/issues/1096)
- Use `unearth` to replace `pip`'s `PackageFinder` and related data models. PDM no longer relies on `pip` internals, which are unstable across updates. [1096](https://github.com/pdm-project/pdm/issues/1096)
- Lazily load the candidates returned by `find_matches()` to speed up the resolution. [1098](https://github.com/pdm-project/pdm/issues/1098)
- Add a new command `publish` to PDM since it is required for so many people and it will make the workflow easier. [1107](https://github.com/pdm-project/pdm/issues/1107)
- Add a `composite` script kind allowing to run multiple defined scripts in a single command as well as reusing scripts but overriding `env` or `env_file`. [1117](https://github.com/pdm-project/pdm/issues/1117)
- Add a new execution option `--skip` to opt-out some scripts and hooks from any execution (both scripts and PDM commands). [1127](https://github.com/pdm-project/pdm/issues/1127)
- Add the `pre/post_publish`, `pre/post_run` and `pre/post_script` hooks as well as an extensive lifecycle and hooks documentation. [1147](https://github.com/pdm-project/pdm/issues/1147)
- Shorter scripts listing, especially for multilines and composite scripts. [1151](https://github.com/pdm-project/pdm/issues/1151)
- Build configurations have been moved to `[tool.pdm.build]`, according to `pdm-pep517 1.0.0`. At the same time, warnings will be shown against old usages. [1153](https://github.com/pdm-project/pdm/issues/1153)
- Improve the lock speed by parallelizing the hash fetching. [1154](https://github.com/pdm-project/pdm/issues/1154)
- Retrieve the candidate metadata by parsing the `pyproject.toml` rather than building it. [1156](https://github.com/pdm-project/pdm/issues/1156)
- Update the format converters to support the new `[tool.pdm.build]` table. [1157](https://github.com/pdm-project/pdm/issues/1157)
- Scripts are now available as root command if they don't conflict with any builtin or plugin-contributed command. [1159](https://github.com/pdm-project/pdm/issues/1159)
- Add a `post_use` hook triggered after successfully switching Python version. [1163](https://github.com/pdm-project/pdm/issues/1163)
- Add project configuration `respect-source-order` under `[tool.pdm.resolution]` to respect the source order in the `pyproject.toml` file. Packages will be returned by source earlier in the order or later ones if not found. [593](https://github.com/pdm-project/pdm/issues/593)

Bug Fixes

- Fix a bug that candidates with local part in the version can't be found and installed correctly. [1093](https://github.com/pdm-project/pdm/issues/1093)

Dependencies

- Prefer `tomllib` on Python 3.11 [1072](https://github.com/pdm-project/pdm/issues/1072)
- Drop the vendored libraries `click`, `halo`, `colorama` and `log_symbols`. PDM has no vendors now. [1091](https://github.com/pdm-project/pdm/issues/1091)
- Update dependency version `pdm-pep517` to `1.0.0`. [1153](https://github.com/pdm-project/pdm/issues/1153)

Removals and Deprecations

- PDM legacy metadata format(from `pdm 0.x`) is no longer supported. [1157](https://github.com/pdm-project/pdm/issues/1157)

Miscellany

- Provide a `tox.ini` file for easier local testing against all Python versions. [1160](https://github.com/pdm-project/pdm/issues/1160)

1.15.4

Not secure
----------------------------

Bug Fixes

- Revert 1106: Do not use `venv` scheme for `prefix` kind install scheme. [1158](https://github.com/pdm-project/pdm/issues/1158)
- Fix a bug when updating a package with extra requirements, the package version doesn't get updated correctly. [1166](https://github.com/pdm-project/pdm/issues/1166)

Miscellany

- Add additional installation option via [asdf-pdm](https://github.com/1oglop1/asdf-pdm).
Add `skip-add-to-path` option to installer in order to prevent changing `PATH`.
Replace `bin` variable name with `bin_dir`. [1145](https://github.com/pdm-project/pdm/issues/1145)

1.15.3

Not secure
----------------------------

Bug Fixes

- Fix a defect in the resolution preferences that causes an infinite resolution loop. [1119](https://github.com/pdm-project/pdm/issues/1119)
- Update the poetry importer to support the new `[tool.poetry.build]` config table. [1131](https://github.com/pdm-project/pdm/issues/1131)

Improved Documentation

- Add support for multiple versions of documentations. [1126](https://github.com/pdm-project/pdm/issues/1126)

Page 16 of 36

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.