Path to this page:
Subject: CVS commit: pkgsrc/devel/py-pip
From: Adam Ciarcinski
Date: 2019-08-03 13:23:09
Message id: 20190803112309.688CAFBF4@cvs.NetBSD.org
Log Message:
py-pip: updated to 19.2.1
19.2.1:
Bug Fixes
- Fix a NoneType AttributeError when evaluating hashes and no hashes
are provided.
19.2:
Deprecations and Removals
- Drop support for EOL Python 3.4.
- Improve deprecation messages to include the version in which the functionality \
will be removed.
Features
- Credentials will now be loaded using keyring when installed.
- Fully support using --trusted-host inside requirements files.
- Update timestamps in pip's --log file to include milliseconds.
- Respect whether a file has been marked as "yanked" from a simple \
repository
(see PEP 592 <https://www.python.org/dev/peps/pep-0592/>__ for details).
- When choosing candidates to install, prefer candidates with a hash matching
one of the user-provided hashes.
- Improve the error message when METADATA or PKG-INFO is None when
accessing metadata.
- Add a new command pip debug that can display e.g. the list of compatible
tags for the current Python.
- Display hint on installing with --pre when search results include pre-release \
versions.
- Report to Warehouse that pip is running under CI if the PIP_IS_CI environment \
variable is set.
- Allow --python-version to be passed as a dotted version string (e.g.
3.7 or 3.7.3).
- Log the final filename and SHA256 of a .whl file when done building a
wheel.
- Include the wheel's tags in the log message explanation when a candidate
wheel link is found incompatible.
- Add a --path argument to pip freeze to support --target
installations.
- Add a --path argument to pip list to support --target
installations.
Bug Fixes
- Set sys.argv[0] to the underlying setup.py when invoking setup.py
via the setuptools shim so setuptools doesn't think the path is -c.
- Update pip download to respect the given --python-version when checking
"Requires-Python".
- Respect --global-option and --install-option when installing from
a version control url (e.g. git).
- Make the "ascii" progress bar really be "ascii" and not \
Unicode.
- Fail elegantly when trying to set an incorrectly formatted key in config.
- Prevent DistutilsOptionError when prefix is indicated in the global \
environment and --target is used.
- Fix pip install to respect --ignore-requires-python when evaluating
links.
- Fix a debug log message when freezing an editable, non-version controlled
requirement.
- Extend to Subversion 1.8+ the behavior of calling Subversion in
interactive mode when pip is run interactively.
- Prevent pip install <url> from permitting directory traversal if e.g.
a malicious server sends a Content-Disposition header with a filename
containing ../ or ..\\.
- Hide passwords in output when using --find-links.
- Include more details in the log message if pip freeze can't generate a
requirement string for a particular distribution.
- Add the line number and file location to the error message when reading an
invalid requirements file in certain situations.
- Prefer os.confstr to ctypes when extracting glibc version info.
- Improve error message printed when an invalid editable requirement is provided.
- Improve error message formatting when a command errors out in a subprocess.
Vendored Libraries
- Upgrade certifi to 2019.6.16
- Upgrade distlib to 0.2.9.post0
- Upgrade msgpack to 0.6.1
- Upgrade requests to 2.22.0
- Upgrade urllib3 to 1.25.3
- Patch vendored html5lib, to prefer using collections.abc where possible.
Improved Documentation
- Document how Python 2.7 support will be maintained.
- Upgrade Sphinx version used to build documentation.
- Fix generation of subcommand manpages.
- Mention that pip can install from git refs.
- Replace a failing example of pip installs with extras with a working one.
Files: