diff --git a/CHANGELOG.md b/CHANGELOG.md index 83a11e1a..6ceede44 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,8 @@ All notable changes to this project will be documented in this file. The format is partly based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) and [PEP 440](https://peps.python.org/pep-0440/) +## [Unreleased] 2.3.4.dev + ## [2.3.3] - 2022-11-27 - Fixed recursive requirements issue when an unpinned package is found. diff --git a/README.md b/README.md index eaf0e6fa..fb03269b 100644 --- a/README.md +++ b/README.md @@ -50,7 +50,7 @@ For detailed documentation, please see [Safety's documentation portal](https://d # Basic Usage To check your currently selected virtual environment for dependencies with known security - vulnerabilites, run: + vulnerabilities, run: ```bash safety check @@ -142,7 +142,7 @@ Run `safety check` again: ## Starter documentation ### Configuring the target of the scan -Safety can scan requirements.txt files, the local environemnt as well as direct input piped into Safety. +Safety can scan requirements.txt files, the local environment as well as direct input piped into Safety. To scan a requirements file: @@ -150,7 +150,7 @@ To scan a requirements file: safety check -r requirements.txt ``` -To scan the local enviroment: +To scan the local environment: ```bash safety check @@ -547,7 +547,7 @@ safety license --key=12345-ABCDEFGH ### `--output json` (Optional) -This license command can also be used in conjuction with optional arguments `--output bare` and `--output json` for structured, parsable outputs that can be fed into other tools and pipelines. +This license command can also be used in conjunction with optional arguments `--output bare` and `--output json` for structured, parsable outputs that can be fed into other tools and pipelines. ___ diff --git a/safety/VERSION b/safety/VERSION index 0bee604d..a465ed62 100644 --- a/safety/VERSION +++ b/safety/VERSION @@ -1 +1 @@ -2.3.3 +2.3.4.dev diff --git a/safety/safety.py b/safety/safety.py index f39f6718..6bbd473f 100644 --- a/safety/safety.py +++ b/safety/safety.py @@ -11,7 +11,7 @@ import requests from packaging.specifiers import SpecifierSet from packaging.utils import canonicalize_name -from packaging.version import parse as parse_version, Version, LegacyVersion, parse +from packaging.version import parse as parse_version from .constants import (API_MIRRORS, CACHE_FILE, OPEN_MIRRORS, REQUEST_TIMEOUT, API_BASE_URL) from .errors import (DatabaseFetchError, DatabaseFileNotFoundError, @@ -458,7 +458,7 @@ def review(report=None, params=None): major = None if recommended: secure_v.append(recommended) - major = parse(recommended) + major = parse_version(recommended) remediations[key] = {'vulns_found': value.get('vulnerabilities_found', 0), 'version': value.get('current_version'), diff --git a/setup.cfg b/setup.cfg index 062568c2..e297948b 100644 --- a/setup.cfg +++ b/setup.cfg @@ -27,6 +27,7 @@ classifiers = Programming Language :: Python :: 3.8 Programming Language :: Python :: 3.9 Programming Language :: Python :: 3.10 + Programming Language :: Python :: 3.11 [options] zip_safe = False