Subject: CVS commit: pkgsrc/devel/py-pip
From: Adam Ciarcinski
Date: 2019-08-03 13:23:09
Message id: 20190803112309.688CAFBF4@cvs.NetBSD.org

Log Message:
py-pip: updated to 19.2.1

19.2.1:

Bug Fixes
- Fix a NoneType AttributeError when evaluating hashes and no hashes
  are provided.

19.2:

Deprecations and Removals
- Drop support for EOL Python 3.4.
- Improve deprecation messages to include the version in which the functionality \ 
will be removed.

Features
- Credentials will now be loaded using keyring when installed.
- Fully support using --trusted-host inside requirements files.
- Update timestamps in pip's --log file to include milliseconds.
- Respect whether a file has been marked as "yanked" from a simple \ 
repository
  (see PEP 592 <https://www.python.org/dev/peps/pep-0592/>__ for details).
- When choosing candidates to install, prefer candidates with a hash matching
  one of the user-provided hashes.
- Improve the error message when METADATA or PKG-INFO is None when
  accessing metadata.
- Add a new command pip debug that can display e.g. the list of compatible
  tags for the current Python.
- Display hint on installing with --pre when search results include pre-release \ 
versions.
- Report to Warehouse that pip is running under CI if the PIP_IS_CI environment \ 
variable is set.
- Allow --python-version to be passed as a dotted version string (e.g.
  3.7 or 3.7.3).
- Log the final filename and SHA256 of a .whl file when done building a
  wheel.
- Include the wheel's tags in the log message explanation when a candidate
  wheel link is found incompatible.
- Add a --path argument to pip freeze to support --target
  installations.
- Add a --path argument to pip list to support --target
  installations.

Bug Fixes
- Set sys.argv[0] to the underlying setup.py when invoking setup.py
  via the setuptools shim so setuptools doesn't think the path is -c.
- Update pip download to respect the given --python-version when checking
  "Requires-Python".
- Respect --global-option and --install-option when installing from
  a version control url (e.g. git).
- Make the "ascii" progress bar really be "ascii" and not \ 
Unicode.
- Fail elegantly when trying to set an incorrectly formatted key in config.
- Prevent DistutilsOptionError when prefix is indicated in the global \ 
environment and --target is used.
- Fix pip install to respect --ignore-requires-python when evaluating
  links.
- Fix a debug log message when freezing an editable, non-version controlled
  requirement.
- Extend to Subversion 1.8+ the behavior of calling Subversion in
  interactive mode when pip is run interactively.
- Prevent pip install <url> from permitting directory traversal if e.g.
  a malicious server sends a Content-Disposition header with a filename
  containing ../ or ..\\.
- Hide passwords in output when using --find-links.
- Include more details in the log message if pip freeze can't generate a
  requirement string for a particular distribution.
- Add the line number and file location to the error message when reading an
  invalid requirements file in certain situations.
- Prefer os.confstr to ctypes when extracting glibc version info.
- Improve error message printed when an invalid editable requirement is provided.
- Improve error message formatting when a command errors out in a subprocess.

Vendored Libraries
- Upgrade certifi to 2019.6.16
- Upgrade distlib to 0.2.9.post0
- Upgrade msgpack to 0.6.1
- Upgrade requests to 2.22.0
- Upgrade urllib3 to 1.25.3
- Patch vendored html5lib, to prefer using collections.abc where possible.

Improved Documentation
- Document how Python 2.7 support will be maintained.
- Upgrade Sphinx version used to build documentation.
- Fix generation of subcommand manpages.
- Mention that pip can install from git refs.
- Replace a failing example of pip installs with extras with a working one.

Files:
RevisionActionfile
1.32modifypkgsrc/devel/py-pip/Makefile
1.23modifypkgsrc/devel/py-pip/PLIST
1.26modifypkgsrc/devel/py-pip/distinfo