Commit Graph

170 Commits

Author SHA1 Message Date
Donald Stufft 09d8897ba9 Merge pull request #2162 from dstufft/trusted-hosts
Deprecate accessing non secure origins by default
2014-12-10 17:56:35 -05:00
Donald Stufft ddb2f1b459 Deprecate accessing non secure origins by default
* Deprecates accessing non secure origins by default, the list of
  which is taken from Chrome.
* Adds a --trusted-host flag to enable users to mark a specific
  host as a secure origin regardless of what we think.
* Refactors the original warning to better indicate the intent
  and the new flag.
2014-12-10 16:35:54 -05:00
Marc Abramowitz 3054cbc0f7 Eliminate some uses of mutable default args
See: GH-2163
2014-12-10 08:17:54 -08:00
Donald Stufft 9f10a05982 Fix #1100 - Use html5lib to decode the HTML response 2014-12-02 15:37:33 -05:00
Donald Stufft 9751d3c14b Document the loss of ftp:// and remove some left over code from it 2014-11-20 08:44:31 -05:00
Donald Stufft 9086993548 Properly handle equality of Link objects with other objects 2014-11-20 07:53:27 -05:00
Donald Stufft 958e6bc02a Merge pull request #2055 from bukzor/buck-del-unused-functions
delete two unused functions
2014-09-25 23:10:40 -04:00
Donald Stufft f72a9042f9 Deprecate the fallback to /simple/ 2014-09-25 22:13:16 -04:00
Donald Stufft 9c70565707 Do not look for /simple/{name}/version/ URLs anymore 2014-09-25 22:12:28 -04:00
Buck Golemon 32557a6474 just the @cached_property bit 2014-09-22 10:45:14 -07:00
Buck Golemon 894dc94233 delete two unused functions 2014-09-19 16:27:16 -07:00
Donald Stufft 0e96b1af4b Switch versioning from X.Y.Z to X.Y dropping the leading 1 2014-09-17 22:05:31 -04:00
Donald Stufft ec91d8e421 Move from pip.compat.* to six.moves.* for urllib related stuff 2014-09-11 18:40:45 -04:00
Donald Stufft 767d11e49c Switch to using the stdlib logger instead of pip.log 2014-09-10 09:36:09 -04:00
Pawel Jasinski 6e1abb91aa detect windows when running under IronPython 2014-08-12 02:26:24 +02:00
Richard Jones 704f658c63 don't complain about localhost when checking security of index links
based entirely off of Guy Rozendorn's work in PR #1718
2014-08-11 14:21:02 +10:00
Donald Stufft 90688e82b1 Revert "Merge pull request #1519 from dstufft/remove-dependency-links"
This reverts commit da02f073da, reversing
changes made to 2ad8888901.

Conflicts:
	CHANGES.txt
	pip/commands/freeze.py
	pip/commands/list.py
	pip/commands/wheel.py
	pip/index.py
	pip/req/req_set.py
	pip/vcs/subversion.py
2014-08-01 16:50:08 -04:00
Donald Stufft e05a759b6e Fix #1101 - Properly handle a <base> without a href 2014-06-13 07:49:56 -04:00
Matthew Iversen dcb0ee0702 Move backwardcompat package to compat module 2014-05-14 13:10:06 +10:00
Donald Stufft 52ca02608e Use CacheControl instead of custom cache code
* Deprecates the --download-cache option & removes the download
  cache code.
* Removes the in memory page cache on the index
* Uses CacheControl to cache all cacheable HTTP requests to the
  filesystem.
  * Properly handles CacheControl headers for unconditional
    caching.
  * Will use ETag and Last-Modified headers to attempt to do a
    conditional HTTP request to speed up cache misses and turn
    them into cache hits.
  * Removes some concurrency unsafe code in the download cache
    accesses.
  * Uses a Cache-Control request header to limit the maximum
    length of time a cache is valid for.
* Adds pip.appdirs to handle platform specific application
  directories such as cache, config, data, etc.
2014-05-09 18:28:20 -04:00
Donald Stufft 9f56b79e8d Don't warn when installing externally hosted files
Users who opted to install externally hosted files were being warned
about the possiblility of the availability of those files would be
unreliable. However this has caused some contention and confusion
and at this point they've already decided to do it, so there's no
reason to tell them again.
2014-05-08 12:18:31 -04:00
Donald Stufft 69bf70676a Reword this warning to be clearer about what it means 2014-05-08 10:19:53 -04:00
Donald Stufft 7037443975 Require an already created session to be passed into APIs 2014-05-06 22:37:46 -04:00
Donald Stufft dd640f23b5 Merge pull request #1529 from dongweiming/bugfix_for_all_versions_duplicate
Bugfix: when not find a version that satisfies the requirement. show all versions but duplicate
2014-05-03 07:52:48 -04:00
Matthew Iversen aa129ffc51 underscore unused variables 2014-04-03 13:39:43 +11:00
Donald Stufft 5a76a47d3b Fix code to handle the latest flake8 2014-03-26 18:24:19 -04:00
dongweiming 1644c283b2 Delete list() transform 2014-03-08 02:19:14 -05:00
dongweiming e430b58ceb Bugfix: when not find a version that satisfies the requirement.
show all versions but duplicate
2014-03-07 17:05:33 -05:00
Daniele Procida 68cacfb71d fixes #1615 2014-03-05 18:17:43 -05:00
Donald Stufft 95ac4c16f5 Remove dependency links support from pip 2014-02-25 18:39:40 -05:00
Donald Stufft 95035fc5c4 Turn on everything in flake8
flake8 ignores some errors by default, these ignored by defaults
change sometimes. This will make things stabler by selecting
everything.
2014-02-24 16:52:23 -05:00
Donald Stufft 3c455a0a28 This is no longer in use 2014-02-16 20:33:21 -05:00
Donald Stufft 2743768b7b Fix the style of the code base to better match pep8 2014-01-27 14:11:29 -05:00
Donald Stufft 57acb26498 If --allow-unverified is used assume it also means --allow-external 2014-01-10 10:35:55 -05:00
Donald Stufft b2a60f9088 Dont' fail on ConnectionErrors 2014-01-07 14:36:13 -05:00
Donald Stufft cb7af82f20 Remove the setuptools version check
With the vendoring of pkg_resources we no longer need to worry
about the version of the installed setuptools.
2014-01-07 08:11:28 -05:00
Donald Stufft 073ae0d0b1 Switch to importing the vendored pkg_resources 2014-01-07 04:47:04 -05:00
Donald Stufft 325cd513aa Add Accept: text/html header when processing an index 2014-01-07 03:12:52 -05:00
Marcus Smith 73b8692d86 a single `path_to_url` function with tests 2013-11-18 22:12:41 -08:00
Marcus Smith 3dc40cad46 - if installing directly from a wheel, fail if it has an invalid name or is unsupported
- when walking links, skip invalid wheel filenames, don't crash
2013-11-14 16:35:24 -08:00
Donald Stufft 787a9b11dd Enable Downloading Wheels by Default
* Switches the default in pip.index.PackageFinder to True
* Supresses --use-wheel
* Adds --no-use-wheel which prevents the use of Wheel
2013-11-07 12:29:14 -05:00
Marcus Smith ebb52ee12c use "INSTALLED_VERSION" (not "InfLink") as the name for the object that represents the "link" for the installed version of a requirement 2013-11-06 09:35:57 -08:00
Donald Stufft 62776e0d3d Merge pull request #1278 from qwcode/allow_mac_wheels
allow pip to install mac wheels from pypi
2013-11-04 13:45:51 -08:00
Donald Stufft 14d83f5333 Add a deprecation warning for dependency links 2013-11-02 13:27:10 -04:00
Marcus Smith 04f78cc71f allow pip to install Mac wheels from pypi (in addition to Windows wheels) 2013-10-31 20:54:25 -07:00
Donald Stufft 12ee7cc6d9 Do not respect dependency links by default 2013-10-27 18:34:46 -04:00
Donald Stufft dd160beb0b Better name the need_allow_insecure variable 2013-10-26 23:53:21 -04:00
Donald Stufft 840db882de Remove the allow_all_unverified 2013-10-26 23:52:04 -04:00
Donald Stufft 616ce39061 Rename --allow-insecure to --allow-unverified 2013-10-26 23:47:57 -04:00
Donald Stufft 814514e1bd Rename pip.vendor.* to pip._vendor.* to ensure it's obviously private 2013-10-22 21:32:25 -04:00