Release 19.3

NEWS.rst

@@ -7,6 +7,85 @@
 
 .. towncrier release notes start
 
+19.3 (2019-10-14)
+=================
+
+Deprecations and Removals
+-------------------------
+
+- Remove undocumented support for un-prefixed URL requirements pointing
+  to SVN repositories. Users relying on this can get the original behavior
+  by prefixing their URL with ``svn+`` (which is backwards-compatible). (`#7037 <https://github.com/pypa/pip/issues/7037>`_)
+- Remove the deprecated ``--venv`` option from ``pip config``. (`#7163 <https://github.com/pypa/pip/issues/7163>`_)
+
+Features
+--------
+
+- Print a better error message when ``--no-binary`` or ``--only-binary`` is given
+  an argument starting with ``-``. (`#3191 <https://github.com/pypa/pip/issues/3191>`_)
+- Make ``pip show`` warn about packages not found. (`#6858 <https://github.com/pypa/pip/issues/6858>`_)
+- Support including a port number in ``--trusted-host`` for both HTTP and HTTPS. (`#6886 <https://github.com/pypa/pip/issues/6886>`_)
+- Redact single-part login credentials from URLs in log messages. (`#6891 <https://github.com/pypa/pip/issues/6891>`_)
+- Implement manylinux2014 platform tag support.  manylinux2014 is the successor
+  to manylinux2010.  It allows carefully compiled binary wheels to be installed
+  on compatible Linux platforms.  The manylinux2014 platform tag definition can
+  be found in `PEP599 <https://www.python.org/dev/peps/pep-0599/>`_. (`#7102 <https://github.com/pypa/pip/issues/7102>`_)
+
+Bug Fixes
+---------
+
+- Abort installation if any archive contains a file which would be placed
+  outside the extraction location. (`#3907 <https://github.com/pypa/pip/issues/3907>`_)
+- pip's CLI completion code no longer prints a Traceback if it is interrupted. (`#3942 <https://github.com/pypa/pip/issues/3942>`_)
+- Correct inconsistency related to the ``hg+file`` scheme. (`#4358 <https://github.com/pypa/pip/issues/4358>`_)
+- Fix ``rmtree_errorhandler`` to skip non-existing directories. (`#4910 <https://github.com/pypa/pip/issues/4910>`_)
+- Ignore errors copying socket files for local source installs (in Python 3). (`#5306 <https://github.com/pypa/pip/issues/5306>`_)
+- Fix requirement line parser to correctly handle PEP 440 requirements with a URL
+  pointing to an archive file. (`#6202 <https://github.com/pypa/pip/issues/6202>`_)
+- The ``pip-wheel-metadata`` directory does not need to persist between invocations of pip, use a temporary directory instead of the current ``setup.py`` directory. (`#6213 <https://github.com/pypa/pip/issues/6213>`_)
+- Fix ``--trusted-host`` processing under HTTPS to trust any port number used
+  with the host. (`#6705 <https://github.com/pypa/pip/issues/6705>`_)
+- Switch to new ``distlib`` wheel script template. This should be functionally
+  equivalent for end users. (`#6763 <https://github.com/pypa/pip/issues/6763>`_)
+- Skip copying .tox and .nox directories to temporary build directories (`#6770 <https://github.com/pypa/pip/issues/6770>`_)
+- Fix handling of tokens (single part credentials) in URLs. (`#6795 <https://github.com/pypa/pip/issues/6795>`_)
+- Fix a regression that caused ``~`` expansion not to occur in ``--find-links``
+  paths. (`#6804 <https://github.com/pypa/pip/issues/6804>`_)
+- Fix bypassed pip upgrade warning on Windows. (`#6841 <https://github.com/pypa/pip/issues/6841>`_)
+- Fix 'm' flag erroneously being appended to ABI tag in Python 3.8 on platforms that do not provide SOABI (`#6885 <https://github.com/pypa/pip/issues/6885>`_)
+- Hide security-sensitive strings like passwords in log messages related to
+  version control system (aka VCS) command invocations. (`#6890 <https://github.com/pypa/pip/issues/6890>`_)
+- Correctly uninstall symlinks that were installed in a virtualenv,
+  by tools such as ``flit install --symlink``. (`#6892 <https://github.com/pypa/pip/issues/6892>`_)
+- Don't fail installation using pip.exe on Windows when pip wouldn't be upgraded. (`#6924 <https://github.com/pypa/pip/issues/6924>`_)
+- Use canonical distribution names when computing ``Required-By`` in ``pip show``. (`#6947 <https://github.com/pypa/pip/issues/6947>`_)
+- Don't use hardlinks for locking selfcheck state file. (`#6954 <https://github.com/pypa/pip/issues/6954>`_)
+- Ignore "require_virtualenv" in ``pip config`` (`#6991 <https://github.com/pypa/pip/issues/6991>`_)
+- Fix ``pip freeze`` not showing correct entry for mercurial packages that use subdirectories. (`#7071 <https://github.com/pypa/pip/issues/7071>`_)
+- Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda. (`#7118 <https://github.com/pypa/pip/issues/7118>`_, `#7119 <https://github.com/pypa/pip/issues/7119>`_)
+
+Vendored Libraries
+------------------
+
+- Upgrade certifi to 2019.9.11
+- Add contextlib2 0.6.0 as a vendored dependency.
+- Remove Lockfile as a vendored dependency.
+- Upgrade msgpack to 0.6.2
+- Upgrade packaging to 19.2
+- Upgrade pep517 to 0.7.0
+- Upgrade pyparsing to 2.4.2
+- Upgrade pytoml to 0.1.21
+- Upgrade setuptools to 41.4.0
+- Upgrade urllib3 to 1.25.6
+
+Improved Documentation
+----------------------
+
+- Document caveats for UNC paths in uninstall and add .pth unit tests. (`#6516 <https://github.com/pypa/pip/issues/6516>`_)
+- Add architectural overview documentation. (`#6637 <https://github.com/pypa/pip/issues/6637>`_)
+- Document that ``--ignore-installed`` is dangerous. (`#6794 <https://github.com/pypa/pip/issues/6794>`_)
+
+
 19.2.3 (2019-08-25)
 ===================
 

news/3191.feature

-Print a better error message when ``--no-binary`` or ``--only-binary`` is given
-an argument starting with ``-``.

news/3907.bugfix

-Abort installation if any archive contains a file which would be placed
-outside the extraction location.

news/3942.bugfix

-pip's CLI completion code no longer prints a Traceback if it is interrupted.

news/4358.bugfix

-Correct inconsistency related to the ``hg+file`` scheme.

news/4547.trivial

-Remove contradictory debug log

news/4910.bugfix

-Fix ``rmtree_errorhandler`` to skip non-existing directories.

news/5306.bugfix

-Ignore errors copying socket files for local source installs (in Python 3).

news/6202.bugfix

-Fix requirement line parser to correctly handle PEP 440 requirements with a URL
-pointing to an archive file.

news/6213.bugfix

-The ``pip-wheel-metadata`` directory does not need to persist between invocations of pip, use a temporary directory instead of the current ``setup.py`` directory.

news/6516.doc

-Document caveats for UNC paths in uninstall and add .pth unit tests.

news/6532.trivial

-Rename ``pip._internal.utils.outdated`` to
-``pip._internal.self_outdated_check`` and rename ``pip_version_check``
-to ``pip_self_version_check``.

news/6637.doc

-Add architectural overview documentation.

news/6653.trivial

-Add functional tests for "yanked" files.

news/6705.bugfix

-Fix ``--trusted-host`` processing under HTTPS to trust any port number used
-with the host.

news/6763.bugfix

-Switch to new ``distlib`` wheel script template. This should be functionally
-equivalent for end users.

news/6770.bugfix

-Skip copying .tox and .nox directories to temporary build directories

news/6794.doc

-Document that ``--ignore-installed`` is dangerous.

news/6795.bugfix

- Fix handling of tokens (single part credentials) in URLs.

news/6804.bugfix

-Fix a regression that caused ``~`` expansion not to occur in ``--find-links``
-paths.

news/6841.bugfix

-Fix bypassed pip upgrade warning on Windows.

news/6858.feature

-Make ``pip show`` warn about packages not found.

news/6869.trivial

-Clarify WheelBuilder.build() a bit

news/6883.trivial

-replace is_vcs_url function by is_vcs Link property

news/6885.bugfix

-Fix 'm' flag erroneously being appended to ABI tag in Python 3.8 on platforms that do not provide SOABI

news/6886.feature

-Support including a port number in ``--trusted-host`` for both HTTP and HTTPS.

news/6890.bugfix

-Hide security-sensitive strings like passwords in log messages related to
-version control system (aka VCS) command invocations.

news/6891.feature

-Redact single-part login credentials from URLs in log messages.

news/6892.bugfix

-Correctly uninstall symlinks that were installed in a virtualenv,
-by tools such as ``flit install --symlink``.

news/6924.bugfix

-Don't fail installation using pip.exe on Windows when pip wouldn't be upgraded.

news/6947.bugfix

-Use canonical distribution names when computing ``Required-By`` in ``pip show``.

news/6952-gh-actions--linters.trivial

-Add a GitHub Actions workflow running all linters.

news/6954.bugfix

-Don't use hardlinks for locking selfcheck state file.

news/6991.bugfix

-Ignore "require_virtualenv" in ``pip config``

news/7037.removal

-Remove undocumented support for un-prefixed URL requirements pointing
-to SVN repositories. Users relying on this can get the original behavior
-by prefixing their URL with ``svn+`` (which is backwards-compatible).

news/7071.bugfix

-Fix ``pip freeze`` not showing correct entry for mercurial packages that use subdirectories.

news/7090.trivial

-Move PipXmlrpcTransport from pip._internal.download to pip._internal.network.xmlrpc
-and move associated tests to tests.unit.test_network_xmlrpc

news/7094.trivial

-Remove DependencyWarning warning from pip._internal

news/7102.feature

-Implement manylinux2014 platform tag support.  manylinux2014 is the successor
-to manylinux2010.  It allows carefully compiled binary wheels to be installed
-on compatible Linux platforms.  The manylinux2014 platform tag definition can
-be found in `PEP599 <https://www.python.org/dev/peps/pep-0599/>`_.

news/7118.bugfix

-Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda.

news/7119.bugfix

-Fix a crash when ``sys.stdin`` is set to ``None``, such as on AWS Lambda.

news/7163.removal

-Remove the deprecated ``--venv`` option from ``pip config``.

news/certifi.vendor

-Upgrade certifi to 2019.9.11

news/contextlib2.vendor

-Add contextlib2 0.6.0 as a vendored dependency.

news/deprecated-yield-fixture.trivial

-Use normal ``fixture`` instead of ``yield_fixture``.
-It's been deprecated in pytest since 2.10 version.

news/fix-deprecated-version-key.trivial

-Use ``python-version`` instead of deprecated ``version``.

news/fix-test-pep518-forkbombs.trivial

-Fix copy-paste issue in ``test_pep518_forkbombs``.

news/lockfile.vendor

-Remove Lockfile as a vendored dependency.

news/msgpack.vendor

-Upgrade msgpack to 0.6.2

news/packaging.vendor

-Upgrade packaging to 19.2

news/pep517.vendor

-Upgrade pep517 to 0.7.0

news/pyparsing.vendor

-Upgrade pyparsing to 2.4.2

news/pytoml.vendor

-Upgrade pytoml to 0.1.21

news/remove-unused-assignment.trivial

-Remove unused assignment.

news/revisit-test-clean-link.trivial

-Use pytest.param to skip certain parametrizations.

news/setuptools.vendor

-Upgrade setuptools to 41.4.0

news/urllib3.vendor

-Upgrade urllib3 to 1.25.6

src/pip/__init__.py

-__version__ = "19.3.dev0"
+__version__ = "19.3"