Pkgconf

Latest version: v2.2.0.post0

Safety actively analyzes 666166 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 10

2.0.0

----------------------------

* When flattening the dependency graph, retain the latest seen edges
rather than the earliest.

* Fix a long-standing bug where the dependency resolution queue was
evaluated in reverse. This bug masked the aforementioned dependency
flattening bug in many cases.

* Fix handling of --with-path, which was appending paths to the search
list rather than prepending them as intended.

* Error when --modversion is requested with more than one package, as
the output is ambiguous.

1.9.5

----------------------------

* Fix incorrect assumptions involving the use of ctype(3) functions.
Patch by Taylor R Campbell.

* Fix detection of provided functions on autoconf.
Patches by Harmen Stoppels.

* Fix deletion of tests/meson.build by the autoconf build system.
Patch by h30032433.

* Fix quoting rules in argvsplit.c.
Patch by huyubiao.

* Update libpkgconf documentation and documentation building scripts.
Patches by Andrew Shadura.

* Enforce maximum package count correctly for --modversion.

1.9.4

----------------------------

* Fix a buffer overflow vulnerability involving very large variable expansions.
CVE-2023-24056

* Fix a bunch of minor regressions with the solver.

* Create separate solutions for `--cflags` and `--libs` when `--static` is not
used.

* Remove final trailing whitespace in pkgconf_fragment_render_buf().

* Revert broken pkg.m4 change involving querying module versions in
PKG_CHECK_MODULES.

* Fix handling of tildes in version strings.

* Various C99 formatting string fixes involving SIZE_FMT_SPECIFIER.

1.9.3

----------------------------

* Fix a bunch of minor code issues pointed out using Clang static analyzer.

* New API: pkgconf_solution_free(), which frees a compiled solution graph.

* Fix behavior when overriding global variables with `--define-variable`.

1.9.2

----------------------------

* Do not try to break dependency cycles across dependency lists. This causes
the solved graph to sometimes miss required dependency nodes because the
solver detected an incorrect dependency cycle.

* New API: pkgconf_queue_solve(), which replaces pkgconf_queue_apply().
pkgconf_queue_apply is now deprecated and should not be used in new code.

1.9.1

----------------------------

* Skip graph flattening and traversal for query types which only make sense
for a single pkg-config module.

The old solver walked these graphs with --maximum-traverse-depth=1 in
these cases, but this is no longer helpful because the graph is flattened
by the new solver.

Page 2 of 10

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.