diff --git a/NEWS.rst b/NEWS.rst index e1c47d88c..859b25d99 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -7,6 +7,85 @@ .. towncrier release notes start +19.3 (2019-10-14) +================= + +Deprecations and Removals +------------------------- + +- Remove undocumented support for un-prefixed URL requirements pointing + to SVN repositories. Users relying on this can get the original behavior + by prefixing their URL with ``svn+`` (which is backwards-compatible). (`#7037 `_) +- Remove the deprecated ``--venv`` option from ``pip config``. (`#7163 `_) + +Features +-------- + +- Print a better error message when ``--no-binary`` or ``--only-binary`` is given + an argument starting with ``-``. (`#3191 `_) +- Make ``pip show`` warn about packages not found. (`#6858 `_) +- Support including a port number in ``--trusted-host`` for both HTTP and HTTPS. (`#6886 `_) +- Redact single-part login credentials from URLs in log messages. (`#6891 `_) +- Implement manylinux2014 platform tag support. manylinux2014 is the successor + to manylinux2010. It allows carefully compiled binary wheels to be installed + on compatible Linux platforms. The manylinux2014 platform tag definition can + be found in `PEP599 `_. (`#7102 `_) + +Bug Fixes +--------- + +- Abort installation if any archive contains a file which would be placed + outside the extraction location. (`#3907 `_) +- pip's CLI completion code no longer prints a Traceback if it is interrupted. (`#3942 `_) +- Correct inconsistency related to the ``hg+file`` scheme. (`#4358 `_) +- Fix ``rmtree_errorhandler`` to skip non-existing directories. (`#4910 `_) +- Ignore errors copying socket files for local source installs (in Python 3). (`#5306 `_) +- Fix requirement line parser to correctly handle PEP 440 requirements with a URL + pointing to an archive file. (`#6202 `_) +- The ``pip-wheel-metadata`` directory does not need to persist between invocations of pip, use a temporary directory instead of the current ``setup.py`` directory. (`#6213 `_) +- Fix ``--trusted-host`` processing under HTTPS to trust any port number used + with the host. (`#6705 `_) +- Switch to new ``distlib`` wheel script template. This should be functionally + equivalent for end users. (`#6763 `_) +- Skip copying .tox and .nox directories to temporary build directories (`#6770 `_) +- Fix handling of tokens (single part credentials) in URLs. (`#6795 `_) +- Fix a regression that caused ``~`` expansion not to occur in ``--find-links`` + paths. (`#6804 `_) +- Fix bypassed pip upgrade warning on Windows. (`#6841 `_) +- Fix 'm' flag erroneously being appended to ABI tag in Python 3.8 on platforms that do not provide SOABI (`#6885 `_) +- Hide security-sensitive strings like passwords in log messages related to + version control system (aka VCS) command invocations. (`#6890 `_) +- Correctly uninstall symlinks that were installed in a virtualenv, + by tools such as ``flit install --symlink``. (`#6892 `_) +- Don't fail installation using pip.exe on Windows when pip wouldn't be upgraded. (`#6924 `_) +- Use canonical distribution names when computing ``Required-By`` in ``pip show``. (`#6947 `_) +- Don't use hardlinks for locking selfcheck state file. (`#6954 `_) +- Ignore "require_virtualenv" in ``pip config`` (`#6991 `_) +- Fix ``pip freeze`` not showing correct entry for mercurial packages that use subdirectories. (`#7071 `_) +- Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda. (`#7118 `_, `#7119 `_) + +Vendored Libraries +------------------ + +- Upgrade certifi to 2019.9.11 +- Add contextlib2 0.6.0 as a vendored dependency. +- Remove Lockfile as a vendored dependency. +- Upgrade msgpack to 0.6.2 +- Upgrade packaging to 19.2 +- Upgrade pep517 to 0.7.0 +- Upgrade pyparsing to 2.4.2 +- Upgrade pytoml to 0.1.21 +- Upgrade setuptools to 41.4.0 +- Upgrade urllib3 to 1.25.6 + +Improved Documentation +---------------------- + +- Document caveats for UNC paths in uninstall and add .pth unit tests. (`#6516 `_) +- Add architectural overview documentation. (`#6637 `_) +- Document that ``--ignore-installed`` is dangerous. (`#6794 `_) + + 19.2.3 (2019-08-25) =================== diff --git a/news/080c4888-abed-11e9-a614-b72e6663bd8a.trivial b/news/080c4888-abed-11e9-a614-b72e6663bd8a.trivial deleted file mode 100644 index e69de29bb..000000000 diff --git a/news/2578.trivial b/news/2578.trivial deleted file mode 100644 index e69de29bb..000000000 diff --git a/news/3191.feature b/news/3191.feature deleted file mode 100644 index 7dedafd42..000000000 --- a/news/3191.feature +++ /dev/null @@ -1,2 +0,0 @@ -Print a better error message when ``--no-binary`` or ``--only-binary`` is given -an argument starting with ``-``. diff --git a/news/3907.bugfix b/news/3907.bugfix deleted file mode 100644 index 24d711df4..000000000 --- a/news/3907.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Abort installation if any archive contains a file which would be placed -outside the extraction location. diff --git a/news/3942.bugfix b/news/3942.bugfix deleted file mode 100644 index a15077cc3..000000000 --- a/news/3942.bugfix +++ /dev/null @@ -1 +0,0 @@ -pip's CLI completion code no longer prints a Traceback if it is interrupted. diff --git a/news/4358.bugfix b/news/4358.bugfix deleted file mode 100644 index a0378e6c5..000000000 --- a/news/4358.bugfix +++ /dev/null @@ -1 +0,0 @@ -Correct inconsistency related to the ``hg+file`` scheme. diff --git a/news/4547.trivial b/news/4547.trivial deleted file mode 100644 index 482644a57..000000000 --- a/news/4547.trivial +++ /dev/null @@ -1 +0,0 @@ -Remove contradictory debug log diff --git a/news/4910.bugfix b/news/4910.bugfix deleted file mode 100644 index e829dfc74..000000000 --- a/news/4910.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix ``rmtree_errorhandler`` to skip non-existing directories. diff --git a/news/5306.bugfix b/news/5306.bugfix deleted file mode 100644 index bf040a95f..000000000 --- a/news/5306.bugfix +++ /dev/null @@ -1 +0,0 @@ -Ignore errors copying socket files for local source installs (in Python 3). diff --git a/news/6202.bugfix b/news/6202.bugfix deleted file mode 100644 index 03184fa8d..000000000 --- a/news/6202.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Fix requirement line parser to correctly handle PEP 440 requirements with a URL -pointing to an archive file. diff --git a/news/6213.bugfix b/news/6213.bugfix deleted file mode 100644 index 08a2483fc..000000000 --- a/news/6213.bugfix +++ /dev/null @@ -1 +0,0 @@ -The ``pip-wheel-metadata`` directory does not need to persist between invocations of pip, use a temporary directory instead of the current ``setup.py`` directory. diff --git a/news/6516.doc b/news/6516.doc deleted file mode 100644 index e8b880ef4..000000000 --- a/news/6516.doc +++ /dev/null @@ -1 +0,0 @@ -Document caveats for UNC paths in uninstall and add .pth unit tests. diff --git a/news/6532.trivial b/news/6532.trivial deleted file mode 100644 index 1414bd33d..000000000 --- a/news/6532.trivial +++ /dev/null @@ -1,3 +0,0 @@ -Rename ``pip._internal.utils.outdated`` to -``pip._internal.self_outdated_check`` and rename ``pip_version_check`` -to ``pip_self_version_check``. diff --git a/news/6637.doc b/news/6637.doc deleted file mode 100644 index f79d729be..000000000 --- a/news/6637.doc +++ /dev/null @@ -1 +0,0 @@ -Add architectural overview documentation. diff --git a/news/6653.trivial b/news/6653.trivial deleted file mode 100644 index 5ef02a000..000000000 --- a/news/6653.trivial +++ /dev/null @@ -1 +0,0 @@ -Add functional tests for "yanked" files. diff --git a/news/6705.bugfix b/news/6705.bugfix deleted file mode 100644 index e8f67ff38..000000000 --- a/news/6705.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Fix ``--trusted-host`` processing under HTTPS to trust any port number used -with the host. diff --git a/news/6763.bugfix b/news/6763.bugfix deleted file mode 100644 index 68d0b58fd..000000000 --- a/news/6763.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Switch to new ``distlib`` wheel script template. This should be functionally -equivalent for end users. diff --git a/news/6770.bugfix b/news/6770.bugfix deleted file mode 100644 index c0ab57ee1..000000000 --- a/news/6770.bugfix +++ /dev/null @@ -1 +0,0 @@ -Skip copying .tox and .nox directories to temporary build directories diff --git a/news/6794.doc b/news/6794.doc deleted file mode 100644 index 55bc01404..000000000 --- a/news/6794.doc +++ /dev/null @@ -1 +0,0 @@ -Document that ``--ignore-installed`` is dangerous. diff --git a/news/6795.bugfix b/news/6795.bugfix deleted file mode 100644 index f80bd9b4b..000000000 --- a/news/6795.bugfix +++ /dev/null @@ -1 +0,0 @@ - Fix handling of tokens (single part credentials) in URLs. diff --git a/news/6804.bugfix b/news/6804.bugfix deleted file mode 100644 index f9599f9fd..000000000 --- a/news/6804.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Fix a regression that caused ``~`` expansion not to occur in ``--find-links`` -paths. diff --git a/news/6841.bugfix b/news/6841.bugfix deleted file mode 100644 index 278caa64e..000000000 --- a/news/6841.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix bypassed pip upgrade warning on Windows. diff --git a/news/6858.feature b/news/6858.feature deleted file mode 100644 index be01bc826..000000000 --- a/news/6858.feature +++ /dev/null @@ -1 +0,0 @@ -Make ``pip show`` warn about packages not found. diff --git a/news/6869.trivial b/news/6869.trivial deleted file mode 100644 index 25d8bd616..000000000 --- a/news/6869.trivial +++ /dev/null @@ -1 +0,0 @@ -Clarify WheelBuilder.build() a bit diff --git a/news/6883.trivial b/news/6883.trivial deleted file mode 100644 index 8d132ac30..000000000 --- a/news/6883.trivial +++ /dev/null @@ -1 +0,0 @@ -replace is_vcs_url function by is_vcs Link property diff --git a/news/6885.bugfix b/news/6885.bugfix deleted file mode 100644 index 1eedfec93..000000000 --- a/news/6885.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix 'm' flag erroneously being appended to ABI tag in Python 3.8 on platforms that do not provide SOABI diff --git a/news/6886.feature b/news/6886.feature deleted file mode 100644 index b4f500b1b..000000000 --- a/news/6886.feature +++ /dev/null @@ -1 +0,0 @@ -Support including a port number in ``--trusted-host`` for both HTTP and HTTPS. diff --git a/news/6890.bugfix b/news/6890.bugfix deleted file mode 100644 index 3da0d5bb2..000000000 --- a/news/6890.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Hide security-sensitive strings like passwords in log messages related to -version control system (aka VCS) command invocations. diff --git a/news/6891.feature b/news/6891.feature deleted file mode 100644 index 4d08eedfb..000000000 --- a/news/6891.feature +++ /dev/null @@ -1 +0,0 @@ -Redact single-part login credentials from URLs in log messages. diff --git a/news/6892.bugfix b/news/6892.bugfix deleted file mode 100644 index 3aaf77124..000000000 --- a/news/6892.bugfix +++ /dev/null @@ -1,2 +0,0 @@ -Correctly uninstall symlinks that were installed in a virtualenv, -by tools such as ``flit install --symlink``. diff --git a/news/6924.bugfix b/news/6924.bugfix deleted file mode 100644 index d89652cba..000000000 --- a/news/6924.bugfix +++ /dev/null @@ -1 +0,0 @@ -Don't fail installation using pip.exe on Windows when pip wouldn't be upgraded. diff --git a/news/6947.bugfix b/news/6947.bugfix deleted file mode 100644 index f8d409e9e..000000000 --- a/news/6947.bugfix +++ /dev/null @@ -1 +0,0 @@ -Use canonical distribution names when computing ``Required-By`` in ``pip show``. diff --git a/news/6952-gh-actions--linters.trivial b/news/6952-gh-actions--linters.trivial deleted file mode 100644 index 194e39025..000000000 --- a/news/6952-gh-actions--linters.trivial +++ /dev/null @@ -1 +0,0 @@ -Add a GitHub Actions workflow running all linters. diff --git a/news/6954.bugfix b/news/6954.bugfix deleted file mode 100644 index 8f6f67109..000000000 --- a/news/6954.bugfix +++ /dev/null @@ -1 +0,0 @@ -Don't use hardlinks for locking selfcheck state file. diff --git a/news/6991.bugfix b/news/6991.bugfix deleted file mode 100644 index c6bf963b9..000000000 --- a/news/6991.bugfix +++ /dev/null @@ -1 +0,0 @@ -Ignore "require_virtualenv" in ``pip config`` diff --git a/news/7037.removal b/news/7037.removal deleted file mode 100644 index 4c606e4a2..000000000 --- a/news/7037.removal +++ /dev/null @@ -1,3 +0,0 @@ -Remove undocumented support for un-prefixed URL requirements pointing -to SVN repositories. Users relying on this can get the original behavior -by prefixing their URL with ``svn+`` (which is backwards-compatible). diff --git a/news/7071.bugfix b/news/7071.bugfix deleted file mode 100644 index f0463ce3c..000000000 --- a/news/7071.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix ``pip freeze`` not showing correct entry for mercurial packages that use subdirectories. diff --git a/news/7090.trivial b/news/7090.trivial deleted file mode 100644 index 01bdcf654..000000000 --- a/news/7090.trivial +++ /dev/null @@ -1,2 +0,0 @@ -Move PipXmlrpcTransport from pip._internal.download to pip._internal.network.xmlrpc -and move associated tests to tests.unit.test_network_xmlrpc diff --git a/news/7094.trivial b/news/7094.trivial deleted file mode 100644 index eff43441e..000000000 --- a/news/7094.trivial +++ /dev/null @@ -1 +0,0 @@ -Remove DependencyWarning warning from pip._internal diff --git a/news/7102.feature b/news/7102.feature deleted file mode 100644 index 4412649fc..000000000 --- a/news/7102.feature +++ /dev/null @@ -1,4 +0,0 @@ -Implement manylinux2014 platform tag support. manylinux2014 is the successor -to manylinux2010. It allows carefully compiled binary wheels to be installed -on compatible Linux platforms. The manylinux2014 platform tag definition can -be found in `PEP599 `_. diff --git a/news/7118.bugfix b/news/7118.bugfix deleted file mode 100644 index 8cca2e1bf..000000000 --- a/news/7118.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda. diff --git a/news/7119.bugfix b/news/7119.bugfix deleted file mode 100644 index 8cca2e1bf..000000000 --- a/news/7119.bugfix +++ /dev/null @@ -1 +0,0 @@ -Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda. diff --git a/news/7163.removal b/news/7163.removal deleted file mode 100644 index e5c7edeef..000000000 --- a/news/7163.removal +++ /dev/null @@ -1 +0,0 @@ -Remove the deprecated ``--venv`` option from ``pip config``. diff --git a/news/certifi.vendor b/news/certifi.vendor deleted file mode 100644 index 66e84cb20..000000000 --- a/news/certifi.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade certifi to 2019.9.11 diff --git a/news/contextlib2.vendor b/news/contextlib2.vendor deleted file mode 100644 index 25a7f1b1f..000000000 --- a/news/contextlib2.vendor +++ /dev/null @@ -1 +0,0 @@ -Add contextlib2 0.6.0 as a vendored dependency. diff --git a/news/deprecated-yield-fixture.trivial b/news/deprecated-yield-fixture.trivial deleted file mode 100644 index 552f49c2c..000000000 --- a/news/deprecated-yield-fixture.trivial +++ /dev/null @@ -1,2 +0,0 @@ -Use normal ``fixture`` instead of ``yield_fixture``. -It's been deprecated in pytest since 2.10 version. diff --git a/news/fix-deprecated-version-key.trivial b/news/fix-deprecated-version-key.trivial deleted file mode 100644 index fc0f23a82..000000000 --- a/news/fix-deprecated-version-key.trivial +++ /dev/null @@ -1 +0,0 @@ -Use ``python-version`` instead of deprecated ``version``. diff --git a/news/fix-test-pep518-forkbombs.trivial b/news/fix-test-pep518-forkbombs.trivial deleted file mode 100644 index d88e8c200..000000000 --- a/news/fix-test-pep518-forkbombs.trivial +++ /dev/null @@ -1 +0,0 @@ -Fix copy-paste issue in ``test_pep518_forkbombs``. diff --git a/news/lockfile.vendor b/news/lockfile.vendor deleted file mode 100644 index 3d58fa138..000000000 --- a/news/lockfile.vendor +++ /dev/null @@ -1 +0,0 @@ -Remove Lockfile as a vendored dependency. diff --git a/news/msgpack.vendor b/news/msgpack.vendor deleted file mode 100644 index 1c101c68f..000000000 --- a/news/msgpack.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade msgpack to 0.6.2 diff --git a/news/packaging.vendor b/news/packaging.vendor deleted file mode 100644 index 4076eb0cd..000000000 --- a/news/packaging.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade packaging to 19.2 diff --git a/news/pep517.vendor b/news/pep517.vendor deleted file mode 100644 index c2376b259..000000000 --- a/news/pep517.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade pep517 to 0.7.0 diff --git a/news/pyparsing.vendor b/news/pyparsing.vendor deleted file mode 100644 index 90374a1ef..000000000 --- a/news/pyparsing.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade pyparsing to 2.4.2 diff --git a/news/pytoml.vendor b/news/pytoml.vendor deleted file mode 100644 index 9916ed83e..000000000 --- a/news/pytoml.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade pytoml to 0.1.21 diff --git a/news/remove-unused-assignment.trivial b/news/remove-unused-assignment.trivial deleted file mode 100644 index f4d91cabc..000000000 --- a/news/remove-unused-assignment.trivial +++ /dev/null @@ -1 +0,0 @@ -Remove unused assignment. diff --git a/news/revisit-test-clean-link.trivial b/news/revisit-test-clean-link.trivial deleted file mode 100644 index 341acee55..000000000 --- a/news/revisit-test-clean-link.trivial +++ /dev/null @@ -1 +0,0 @@ -Use pytest.param to skip certain parametrizations. diff --git a/news/setuptools.vendor b/news/setuptools.vendor deleted file mode 100644 index c576a969d..000000000 --- a/news/setuptools.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade setuptools to 41.4.0 diff --git a/news/update-marker-test.trivial b/news/update-marker-test.trivial deleted file mode 100644 index e69de29bb..000000000 diff --git a/news/urllib3.vendor b/news/urllib3.vendor deleted file mode 100644 index 80b98b44e..000000000 --- a/news/urllib3.vendor +++ /dev/null @@ -1 +0,0 @@ -Upgrade urllib3 to 1.25.6 diff --git a/src/pip/__init__.py b/src/pip/__init__.py index 9c2e2a3bb..a24cb60dd 100644 --- a/src/pip/__init__.py +++ b/src/pip/__init__.py @@ -1 +1 @@ -__version__ = "19.3.dev0" +__version__ = "19.3"