You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: NEWS.rst
+85-7Lines changed: 85 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,13 +9,90 @@
9
9
10
10
.. towncrier release notes start
11
11
12
+
23.3.2 (2023-12-17)
13
+
===================
14
+
15
+
Bug Fixes
16
+
---------
17
+
18
+
- Fix a bug in extras handling for link requirements (`#12372 <https://github.com/pypa/pip/issues/12372>`_)
19
+
- Fix mercurial revision "parse error": use ``--rev={ref}`` instead of ``-r={ref}`` (`#12373 <https://github.com/pypa/pip/issues/12373>`_)
20
+
21
+
22
+
23.3.1 (2023-10-21)
23
+
===================
24
+
25
+
Bug Fixes
26
+
---------
27
+
28
+
- Handle a timezone indicator of Z when parsing dates in the self check. (`#12338 <https://github.com/pypa/pip/issues/12338>`_)
29
+
- Fix bug where installing the same package at the same time with multiple pip processes could fail. (`#12361 <https://github.com/pypa/pip/issues/12361>`_)
30
+
31
+
32
+
23.3 (2023-10-15)
33
+
=================
34
+
35
+
Process
36
+
-------
37
+
38
+
- Added reference to `vulnerability reporting guidelines <https://www.python.org/dev/security/>`_ to pip's security policy.
39
+
40
+
Deprecations and Removals
41
+
-------------------------
42
+
43
+
- Drop a fallback to using SecureTransport on macOS. It was useful when pip detected OpenSSL older than 1.0.1, but the current pip does not support any Python version supporting such old OpenSSL versions. (`#12175 <https://github.com/pypa/pip/issues/12175>`_)
44
+
45
+
Features
46
+
--------
47
+
48
+
- Improve extras resolution for multiple constraints on same base package. (`#11924 <https://github.com/pypa/pip/issues/11924>`_)
49
+
- Improve use of datastructures to make candidate selection 1.6x faster. (`#12204 <https://github.com/pypa/pip/issues/12204>`_)
50
+
- Allow ``pip install --dry-run`` to use platform and ABI overriding options. (`#12215 <https://github.com/pypa/pip/issues/12215>`_)
51
+
- Add ``is_yanked`` boolean entry to the installation report (``--report``) to indicate whether the requirement was yanked from the index, but was still selected by pip conform to :pep:`592`. (`#12224 <https://github.com/pypa/pip/issues/12224>`_)
52
+
53
+
Bug Fixes
54
+
---------
55
+
56
+
- Ignore errors in temporary directory cleanup (show a warning instead). (`#11394 <https://github.com/pypa/pip/issues/11394>`_)
57
+
- Normalize extras according to :pep:`685` from package metadata in the resolver
58
+
for comparison. This ensures extras are correctly compared and merged as long
59
+
as the package providing the extra(s) is built with values normalized according
60
+
to the standard. Note, however, that this *does not* solve cases where the
61
+
package itself contains unnormalized extra values in the metadata. (`#11649 <https://github.com/pypa/pip/issues/11649>`_)
62
+
- Prevent downloading sdists twice when :pep:`658` metadata is present. (`#11847 <https://github.com/pypa/pip/issues/11847>`_)
63
+
- Include all requested extras in the install report (``--report``). (`#11924 <https://github.com/pypa/pip/issues/11924>`_)
64
+
- Removed uses of ``datetime.datetime.utcnow`` from non-vendored code. (`#12005 <https://github.com/pypa/pip/issues/12005>`_)
65
+
- Consistently report whether a dependency comes from an extra. (`#12095 <https://github.com/pypa/pip/issues/12095>`_)
66
+
- Fix completion script for zsh (`#12166 <https://github.com/pypa/pip/issues/12166>`_)
67
+
- Fix improper handling of the new onexc argument of ``shutil.rmtree()`` in Python 3.12. (`#12187 <https://github.com/pypa/pip/issues/12187>`_)
68
+
- Filter out yanked links from the available versions error message: "(from versions: 1.0, 2.0, 3.0)" will not contain yanked versions conform PEP 592. The yanked versions (if any) will be mentioned in a separate error message. (`#12225 <https://github.com/pypa/pip/issues/12225>`_)
69
+
- Fix crash when the git version number contains something else than digits and dots. (`#12280 <https://github.com/pypa/pip/issues/12280>`_)
70
+
- Use ``-r=...`` instead of ``-r ...`` to specify references with Mercurial. (`#12306 <https://github.com/pypa/pip/issues/12306>`_)
71
+
- Redact password from URLs in some additional places. (`#12350 <https://github.com/pypa/pip/issues/12350>`_)
72
+
- pip uses less memory when caching large packages. As a result, there is a new on-disk cache format stored in a new directory ($PIP_CACHE_DIR/http-v2). (`#2984 <https://github.com/pypa/pip/issues/2984>`_)
73
+
74
+
Vendored Libraries
75
+
------------------
76
+
77
+
- Upgrade certifi to 2023.7.22
78
+
- Add truststore 0.8.0
79
+
- Upgrade urllib3 to 1.26.17
80
+
81
+
Improved Documentation
82
+
----------------------
83
+
84
+
- Document that ``pip search`` support has been removed from PyPI (`#12059 <https://github.com/pypa/pip/issues/12059>`_)
85
+
- Clarify --prefer-binary in CLI and docs (`#12122 <https://github.com/pypa/pip/issues/12122>`_)
86
+
- Document that using OS-provided Python can cause pip's test suite to report false failures. (`#12334 <https://github.com/pypa/pip/issues/12334>`_)
87
+
88
+
12
89
23.2.1 (2023-07-22)
13
90
===================
14
91
15
92
Bug Fixes
16
93
---------
17
94
18
-
- Disable PEP 658 metadata fetching with the legacy resolver. (`#12156 <https://github.com/pypa/pip/issues/12156>`_)
95
+
- Disable :pep:`658` metadata fetching with the legacy resolver. (`#12156 <https://github.com/pypa/pip/issues/12156>`_)
19
96
20
97
21
98
23.2 (2023-07-15)
@@ -29,8 +106,9 @@ Process
29
106
Deprecations and Removals
30
107
-------------------------
31
108
32
-
- Deprecate legacy version and version specifiers that don't conform to `PEP 440
- Prevent downloading files twice when PEP 658 metadata is present (`#11847 <https://github.com/pypa/pip/issues/11847>`_)
126
+
- Prevent downloading files twice when :pep:`658` metadata is present (`#11847 <https://github.com/pypa/pip/issues/11847>`_)
49
127
- Add permission check before configuration (`#11920 <https://github.com/pypa/pip/issues/11920>`_)
50
128
- Fix deprecation warnings in Python 3.12 for usage of shutil.rmtree (`#11957 <https://github.com/pypa/pip/issues/11957>`_)
51
129
- Ignore invalid or unreadable ``origin.json`` files in the cache of locally built wheels. (`#11985 <https://github.com/pypa/pip/issues/11985>`_)
52
-
- Fix installation of packages with PEP658 metadata using non-canonicalized names (`#12038 <https://github.com/pypa/pip/issues/12038>`_)
130
+
- Fix installation of packages with :pep:`658` metadata using non-canonicalized names (`#12038 <https://github.com/pypa/pip/issues/12038>`_)
53
131
- Correctly parse ``dist-info-metadata`` values from JSON-format index data. (`#12042 <https://github.com/pypa/pip/issues/12042>`_)
54
132
- Fail with an error if the ``--python`` option is specified after the subcommand name. (`#12067 <https://github.com/pypa/pip/issues/12067>`_)
55
133
- Fix slowness when using ``importlib.metadata`` (the default way for pip to read metadata in Python 3.11+) and there is a large overlap between already installed and to-be-installed packages. (`#12079 <https://github.com/pypa/pip/issues/12079>`_)
@@ -220,7 +298,7 @@ Features
220
298
221
299
- Change the hashes in the installation report to be a mapping. Emit the
222
300
``archive_info.hashes`` dictionary in ``direct_url.json``. (`#11312 <https://github.com/pypa/pip/issues/11312>`_)
223
-
- Implement logic to read the ``EXTERNALLY-MANAGED`` file as specified in PEP 668.
301
+
- Implement logic to read the ``EXTERNALLY-MANAGED`` file as specified in :pep:`668`.
224
302
This allows a downstream Python distributor to prevent users from using pip to
225
303
modify the externally managed environment. (`#11381 <https://github.com/pypa/pip/issues/11381>`_)
226
304
- Enable the use of ``keyring`` found on ``PATH``. This allows ``keyring``
@@ -236,7 +314,7 @@ Bug Fixes
236
314
- Use the "venv" scheme if available to obtain prefixed lib paths. (`#11598 <https://github.com/pypa/pip/issues/11598>`_)
237
315
- Deprecated a historical ambiguity in how ``egg`` fragments in URL-style
238
316
requirements are formatted and handled. ``egg`` fragments that do not look
239
-
like PEP 508 names now produce a deprecation warning. (`#11617 <https://github.com/pypa/pip/issues/11617>`_)
317
+
like :pep:`508` names now produce a deprecation warning. (`#11617 <https://github.com/pypa/pip/issues/11617>`_)
240
318
- Fix scripts path in isolated build environment on Debian. (`#11623 <https://github.com/pypa/pip/issues/11623>`_)
241
319
- Make ``pip show`` show the editable location if package is editable (`#11638 <https://github.com/pypa/pip/issues/11638>`_)
242
320
- Stop checking that ``wheel`` is present when ``build-system.requires``
0 commit comments