pip-tools

05 Oct 2018

Features

• Added support of pip 18.1 ({pr}689) -- by {user}vphilippon.

24 Sep 2018

Major Changes

• Update pip-tools for native pip 8, 9, 10 and 18 compatibility, un-vendoring pip to use the user-installed pip ({pr}657 and {pr}672) -- by {user}techalchemy, {user}suutari, {user}tysonclugg and. {user}vphilippon

Features

• Removed the dependency on the external library first ({pr}676) -- by {user}jdufresne.

28 Apr 2018

Bug Fixes

• Added clearer error reporting when skipping pre-releases ({pr}655) -- by {user}WoLpH.

15 Apr 2018

Bug Fixes

• Added missing package data from vendored pip, such as missing cacert.pem file -- by {user}vphilippon.

15 Apr 2018

Major Changes

• Vendored pip 9.0.3 to keep compatibility for users with pip 10.0.0 ({pr}644) -- by {user}vphilippon.

Features

• Improved the speed of pip-compile --generate-hashes by caching the hashes from an existing output file ({pr}641) -- by {user}justicz.
• Added a pip-sync --user option to restrict attention to user-local directory ({pr}642) -- by {user}jbergknoff-10e.
• Removed the hard dependency on setuptools ({pr}645) -- by {user}vphilippon.

Bug Fixes

• The pip environment markers on top-level requirements in the source file (requirements.in) are now properly handled and will only be processed in the right environment ({pr}647) -- by {user}JoergRittinger.

30 Nov 2017

Features

• Allow editable packages in requirements.in with pip-compile --generate-hashes ({pr}524) -- by {user}jdufresne.
• Allow for CA bundles with pip-compile --cert ({pr}612) -- by {user}khwilson.
• Improved pip-compile duration with large locally available editable requirement by skipping a copy to the cache ({pr}583) -- by {user}costypetrisor.
• Slightly improved the NoCandidateFound error message on potential causes ({pr}614) -- by {user}vphilippon.

Bug Fixes

• Add -markerlib to the list of PACKAGES_TO_IGNORE of pip-sync ({pr}613).

22 Nov 2017

Bug Fixes

• Fixed bug causing dependencies from invalid wheels for the current platform to be included ({pr}571).
• pip-sync will respect environment markers in the requirements.txt ({pr}600) -- by {user}hazmat345.
• Converted the ReadMe to have a nice description rendering on PyPI -- by {user}bittner.

27 Sep 2017

Bug Fixes

• Fixed bug breaking pip-sync on Python 3, raising TypeError: '<' not supported between instances of 'InstallRequirement' and 'InstallRequirement' ({pr}570).

27 Sep 2017

Features

• --generate-hashes now generates hashes for all wheels, not only wheels for the currently running platform ({pr}520) -- by {user}jdufresne.
• Added a -q/--quiet argument to the pip-sync command to reduce log output.

Bug Fixes

• Fixed bug where unsafe packages would get pinned in generated requirements files when --allow-unsafe was not set ({pr}517) -- by {user}dschaller.
• Fixed bug where editable PyPI dependencies would have a download_dir and be exposed to git-checkout-index, (thus losing their VCS directory) and python setup.py egg_info fails ({pr}385) and {pr}538) -- by {user}blueyed and {user}dfee.
• Fixed bug where some primary dependencies were annotated with "via" info comments ({pr}542) -- by {user}quantus.
• Fixed bug where pkg-resources would be removed by pip-sync in Ubuntu ({pr}555) -- by {user}cemsbr.
• Fixed bug where the resolver would sometime not stabilize on requirements specifying extras ({pr}566) -- by {user}vphilippon.
• Fixed an unicode encoding error when distribution package contains non-ASCII file names ({pr}567) -- by {user}suutari.
• Fixed package hashing doing unnecessary unpacking ({pr}557) -- by {user}suutari-ai.

12 Apr 2017

Features

• Added ability to read requirements from setup.py instead of just requirements.in ({pr}418) -- by {user}tysonclugg and {user}majuscule.
• Added a --max-rounds argument to the pip-compile command to allow for solving large requirement sets ({pr}472) -- by {user}derek-miller.
• Exclude unsafe packages' dependencies when --allow-unsafe is not in use ({pr}441) -- by {user}jdufresne.
• Exclude irrelevant pip constraints ({pr}471) -- by {user}derek-miller.
• Allow control over emitting trusted-host to the compiled requirements ({pr}448) -- by {user}tonyseek.
• Allow running as a Python module ({pr}461) -- by {user}AndreLouisCaron.
• Preserve environment markers in generated requirements.txt ({pr}460) -- by {user}barrywhart.

Bug Fixes

• Fixed the --upgrade-package option to respect the given package list to update ({pr}491).
• Fixed the default output file name when the source file has no extension ({pr}488) -- by {user}vphilippon.
• Fixed crash on editable requirements introduced in 1.8.2.
• Fixed duplicated --trusted-host, --extra-index-url and --index-url in the generated requirements.

28 Mar 2017

• Regression fix: editable reqs were losing their dependencies after first round ({pr}476) -- by {user}mattlong.
• Remove duplicate index urls in generated requirements.txt ({pr}468) -- by {user}majuscule.

22 Mar 2017

• Recalculate secondary dependencies between rounds ({pr}378)
• Calculated dependencies could be left with wrong candidates when toplevel requirements happen to be also pinned in sub-dependencies ({pr}450)
• Fix duplicate entries that could happen in generated requirements.txt ({pr}427)
• Gracefully report invalid pip version ({pr}457)
• Fix capitalization in the generated requirements.txt, packages will always be lowercased ({pr}452)

17 Nov 2016

• Adds support for upgrading individual packages with a new option --upgrade-package. To upgrade a specific package to the latest or a specific version use --upgrade-package <pkg>. To upgrade all packages, you can still use pip-compile --upgrade. ({pr}409)
• Adds support for pinning dependencies even further by including the hashes found on PyPI at compilation time, which will be re-checked when dependencies are installed at installation time. This adds protection against packages that are tampered with. ({pr}383)
• Improve support for extras, like hypothesis[django]
• Drop support for pip < 8

06 Jul 2016

• Add compatibility with pip >= 8.1.2 (#374) -- by {user}jmbowman

11 May 2016

• Add warning that pip >= 8.1.2 is not supported until 1.7.x is out

03 May 2016

• Incorporate fix for atomic file saving behaviour on the Windows platform (see {issue}351)

02 May 2016

• PyPI won't let me upload 1.6.2

02 May 2016

• Respect pip configuration from pip.{ini,conf}
• Fixes for atomic-saving of output files on Windows (see {issue}351)

06 Apr 2016

Minor Changes

• pip-sync now supports being invoked from within and outside an activated virtualenv (see {issue}317)
• pip-compile: support -U as a shorthand for --upgrade
• pip-compile: support pip's --no-binary and --binary-only flags

Bug Fixes

• Change header format of output files to mention all input files

05 Feb 2016

Major Changes

• pip-compile will by default try to fulfill package specs by looking at a previously compiled output file first, before checking PyPI. This means pip-compile will only update the requirements.txt when it absolutely has to. To get the old behaviour (picking the latest version of all packages from PyPI), use the new --upgrade option.

Minor Changes

• Bugfix where pip-compile would lose "via" info when on pip 8 (see {issue}313)
• Ensure cache dir exists (see {issue}315)

23 Jan 2016

• Add support for pip >= 8
• Drop support for pip < 7
• Fix bug where pip-sync fails to uninstall packages if you're using the --no-index (or other) flags

20 Jan 2016

• Add --no-index flag to pip-compile to avoid emitting --index-url into the output (useful if you have configured a different index in your global ~/.pip/pip.conf, for example)
• Fix: ignore stdlib backport packages, like argparse, when listing which packages will be installed/uninstalled ({issue}286)
• Fix pip-sync failed uninstalling packages when using --find-links ({issue}298)
• Explicitly error when pip-tools is used with pip 8.0+ (for now)

11 Jan 2016

• Fix: unintended change in behaviour where packages installed by pip-sync could accidentally get upgraded under certain conditions, even though the requirements.txt would dictate otherwise (see {issue}290)

06 Jan 2016

• Fix: add --index-url and --extra-index-url options to pip-sync
• Fix: always install using --upgrade flag when running pip-sync

13 Dec 2015

• Fix bug where umask was ignored when writing requirement files ({issue}268)

13 Dec 2015

• Fix bug where successive invocations of pip-sync with editables kept uninstalling/installing them (fixes {issue}270)

13 Dec 2015

• Add command line option -f / --find-links
• Add command line option --no-index
• Add command line alias -n (for --dry-run)
• Fix a unicode issue

08 Dec 2015

• Support multiple requirement files to pip-compile
• Support requirements from stdin for pip-compile
• Support --output-file option on pip-compile, to redirect output to a file (or stdout)

30 Nov 2015

• Add CHANGELOG :)
• Support pip-sync'ing editable requirements
• Support extras properly (i.e. package[foo] syntax)

(Anything before 1.2.0 was not recorded.)