Setuptools

Latest version: v70.1.1

Safety actively analyzes 641872 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 109

62.3.0

Not secure
=======


Deprecations
------------
* 3262: Formally added deprecation messages for ``namespace_packages``.
The methodology that uses ``pkg_resources`` and ``namespace_packages`` for
creating namespaces was already discouraged by the :doc:`setuptools docs
</userguide/package_discovery>` and the
:doc:`Python Packaging User Guide <PyPUG:guides/packaging-namespace-packages>`,
therefore this change just make the deprecation more official.
Users can consider migrating to native/implicit namespaces (as introduced in
:pep:`420`).
* 3308: Relying on ``include_package_data`` to ensure sub-packages are automatically
added to the build wheel distribution (as "data") is now considered a
deprecated practice.

This behaviour was controversial and caused inconsistencies (3260).

Instead, projects are encouraged to properly configure ``packages`` or use
discovery tools. General information can be found in :doc:`userguide/package_discovery`.

Changes
-------
* 1806: Allowed recursive globs (``**``) in ``package_data``. -- by :user:`nullableVoidPtr`
* 3206: Fixed behaviour when both ``install_requires`` (in ``setup.py``) and
``dependencies`` (in ``pyproject.toml``) are specified.
The configuration in ``pyproject.toml`` will take precedence over ``setup.py``
(in accordance with PEP 621). A warning was added to inform users.

Documentation changes
---------------------
* 3307: Added introduction to references/keywords.

Added deprecation tags to test kwargs.

Moved userguide/keywords to deprecated section.

Clarified in deprecated doc what keywords came from distutils and which were added or changed by setuptools.

Misc
----
* 3274: Updated version of vendored ``pyparsing`` to 3.0.8 to avoid problems with
upcoming deprecation in Python 3.11.
* 3292: Added warning about incompatibility with old versions of
``importlib-metadata``.

62.2.0

Not secure
=======


Changes
-------
* 3299: Optional metadata fields are now truly optional. Includes merge with pypa/distutilsa7cfb56 per pypa/distutils138.

Misc
----
* 3282: Added CI cache for ``setup.cfg`` examples used when testing ``setuptools.config``.

62.1.0

Not secure
=======


Changes
-------
* 3258: Merge pypa/distutils5229dad46b.

Misc
----
* 3249: Simplified ``package_dir`` obtained via auto-discovery.

62.0.0

Not secure
=======


Breaking Changes
----------------
* 3151: Made ``setup.py develop --user`` install to the user site packages directory even if it is disabled in the current interpreter.

Changes
-------
* 3153: When resolving requirements use both canonical and normalized names -- by :user:`ldaniluk`
* 3167: Honor unix file mode in ZipFile when installing wheel via ``install_as_egg`` -- by :user:`delijati`

Misc
----
* 3088: Fixed duplicated tag with the ``dist-info`` command.
* 3247: Fixed problem preventing ``readme`` specified as dynamic in ``pyproject.toml``
from being dynamically specified in ``setup.py``.

61.3.1

Not secure
=======


Misc
----
* 3233: Included missing test file ``setupcfg_examples.txt`` in ``sdist``.
* 3233: Added script that allows developers to download ``setupcfg_examples.txt`` prior to
running tests. By caching these files it should be possible to run the test suite
offline.

61.3.0

Not secure
=======


Changes
-------
* 3229: Disabled automatic download of ``trove-classifiers`` to facilitate reproducibility.

Misc
----
* 3229: Updated ``pyproject.toml`` validation via ``validate-pyproject`` v0.7.1.
* 3229: New internal tool made available for updating the code responsible for
the validation of ``pyproject.toml``.
This tool can be executed via ``tox -e generate-validation-code``.

Page 14 of 109

Links

Releases

Has known vulnerabilities

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.