diff --git a/CHANGELOG.md b/CHANGELOG.md index 51f2e5b9..ceccf1f1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,13 @@ All notable changes to this project will be documented in this file. The format is partly based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html) and [PEP 440](https://peps.python.org/pep-0440/) -## [Unreleased] 2.2.0.dev +## [2.2.0] - 2022-09-19 +- Safety starts to use dparse to parse files, now Safety supports mainly Poetry and Pipenv lock files plus other files supported by dparse. +- Added logic for custom integrations like pipenv check. +- The --db flag is compatible remote sources too. +- Added more logging +- Upgrade dparse dependency to avoid a possible ReDos security issue +- Removed Travis and Appveyor, the CI/CD was migrated to GitHub Actions ## [2.1.1] - 2022-07-18 - Fix crash when running on systems without git present (Thanks @andyjones) diff --git a/safety/VERSION b/safety/VERSION index 7fff5300..ccbccc3d 100644 --- a/safety/VERSION +++ b/safety/VERSION @@ -1 +1 @@ -2.2.0.dev +2.2.0 diff --git a/tests/action/Pipfile.lock-secure b/tests/action/Pipfile.lock-secure index 2acdba1e..a6471571 100644 --- a/tests/action/Pipfile.lock-secure +++ b/tests/action/Pipfile.lock-secure @@ -42,11 +42,11 @@ }, "dparse": { "hashes": [ - "sha256:a1b5f169102e1c894f9a7d5ccf6f9402a836a5d24be80a986c7ce9eaed78f367", - "sha256:e953a25e44ebb60a5c6efc2add4420c177f1d8404509da88da9729202f306994" + "sha256:d45255bda21f998bc7ddf2afd5e62505ba6134756ba2d42a84c56b0826614dfe", + "sha256:8097076f1dd26c377f30d4745e6ec18fef42f3bf493933b842ac5bafad8c345f" ], "markers": "python_version >= '3.5'", - "version": "==0.5.1" + "version": "==0.6.2" }, "idna": { "hashes": [ diff --git a/tests/action/poetry.lock-secure b/tests/action/poetry.lock-secure index 4623a3af..92b292c3 100644 --- a/tests/action/poetry.lock-secure +++ b/tests/action/poetry.lock-secure @@ -38,7 +38,7 @@ python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*" [[package]] name = "dparse" -version = "0.5.1" +version = "0.6.2" description = "A parser for Python dependency files" category = "main" optional = false @@ -118,7 +118,7 @@ python-versions = ">=3.5" [package.dependencies] Click = ">=6.0" -dparse = ">=0.5.1" +dparse = ">=0.6.2" packaging = "*" requests = "*" @@ -166,8 +166,8 @@ colorama = [ {file = "colorama-0.4.4.tar.gz", hash = "sha256:5941b2b48a20143d2267e95b1c2a7603ce057ee39fd88e7329b0c292aa16869b"}, ] dparse = [ - {file = "dparse-0.5.1-py3-none-any.whl", hash = "sha256:e953a25e44ebb60a5c6efc2add4420c177f1d8404509da88da9729202f306994"}, - {file = "dparse-0.5.1.tar.gz", hash = "sha256:a1b5f169102e1c894f9a7d5ccf6f9402a836a5d24be80a986c7ce9eaed78f367"}, + {file = "dparse-0.6.2-py3-none-any.whl", hash = "sha256:8097076f1dd26c377f30d4745e6ec18fef42f3bf493933b842ac5bafad8c345f"}, + {file = "dparse-0.6.2.tar.gz", hash = "sha256:d45255bda21f998bc7ddf2afd5e62505ba6134756ba2d42a84c56b0826614dfe"}, ] idna = [ {file = "idna-3.3-py3-none-any.whl", hash = "sha256:84d9dd047ffa80596e0f246e2eab0b391788b0503584e8945f2368256d2735ff"},