Path to this page:
Subject: CVS commit: pkgsrc/security/py-pip-audit
From: Adam Ciarcinski
Date: 2023-03-16 09:48:03
Message id: 20230316084803.2D5E5FA90@cvs.NetBSD.org
Log Message:
py-pip-audit: updated to 2.4.14
2.4.14
Fixed
* Fixed a dependency resolution failure caused by incorrect handling of
a PEP 440 edge case around prerelease versions
2.4.13
Fixed
* Added a lower bound on `packaging` to ensure that non-normalized versions
are handled correctly
2.4.12
Fixed
* Fixed `pip-audit`'s virtual environment creation and upgrade behavior,
preventing spurious vulnerability reports
* Users are now warned if a `pip-audit` invocation is ambiguous, e.g.
if they've installed `pip-audit` globally but are asking for an audit
of a loaded virtual environment
2.4.11
Fixed
* Fixed a crash triggered when a package specifies an invalid version
specifier for its `requires-python` version
2.4.10
Fixed
* Fixed a crash triggered when no vulnerabilities are found with some
configurations
2.4.9
Fixed
* The `--output` flag will no longer produce an empty file in the event
of a failure within `pip-audit` itself, making it easier to distinguish
between audit failures being reported by `pip-audit` and `pip-audit`'s
own errors
* Removed pin on `packaging` now that our dependency pins it for us
2.4.8
Fixed
* Pin maximum version of `packaging` dependency to avoid installing the new
22.0 version which is incompatible with `pip-requirements-parser`
Files: