Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release with pyproject support #758

Closed
kinoute opened this issue Nov 16, 2021 · 4 comments
Closed

Release with pyproject support #758

kinoute opened this issue Nov 16, 2021 · 4 comments
Labels
enhancement New feature or request

Comments

@kinoute
Copy link

kinoute commented Nov 16, 2021

Hello,

Would it be possible to get a new release? The last one is from Dec 2020. The pyproject.toml support is a really nice feature and it would be cool if we could use it.

Thanks!

@kinoute kinoute added the enhancement New feature or request label Nov 16, 2021
@mcdonnnj
Copy link

mcdonnnj commented Nov 17, 2021

@kinoute The last GitHub release is 1.7.0, but the last tag (and release on pypi) is 1.7.1 on 2021-11-12. I'm not sure why they haven't done an official release on GitHub, but you can compare between the two tags with 1.7.0...1.7.1 to see the included changes.

@GliderGeek
Copy link

would be great if an official github release is added. not that i need that particularly, but that seems to be the only location where a changelog is kept?

bittner added a commit to behave/behave-django that referenced this issue Jan 10, 2022
Bandit UX is seriously broken, only <1.6 works predictably.

Exclude/ignore of files is currently broken in Bandit:
- PyCQA/bandit#693
- PyCQA/bandit#490
- PyCQA/bandit#438 (comment)

Reading settings from configuration files is broken:
- PyCQA/bandit#753
- PyCQA/bandit#595

Reading from pyproject.toml not yet functional:
- Must install "toml" package and use "-c pyproject.toml".
- PyCQA/bandit#758

INI file configuration and CLI usage is unclear:
- PyCQA/bandit#603
- PyCQA/bandit#467
- PyCQA/bandit#396
bittner added a commit to behave/behave-django that referenced this issue Jan 10, 2022
Bandit UX is seriously broken, only <1.6 works predictably.

Exclude/ignore of files is currently broken in Bandit:
- PyCQA/bandit#693
- PyCQA/bandit#490
- PyCQA/bandit#438 (comment)

Reading settings from configuration files is broken:
- PyCQA/bandit#753
- PyCQA/bandit#595

Reading from pyproject.toml not yet functional:
Must install "toml" package and use "-c pyproject.toml".
- PyCQA/bandit#758

INI file configuration and CLI usage is unclear:
- PyCQA/bandit#603
- PyCQA/bandit#467
- PyCQA/bandit#396
bittner added a commit to behave/behave-django that referenced this issue Jan 10, 2022
Bandit UX is seriously broken, only <1.6 works predictably.

Exclude/ignore of files is currently broken in Bandit:
- PyCQA/bandit#693
- PyCQA/bandit#490
- PyCQA/bandit#438 (comment)

Reading settings from configuration files is broken:
- PyCQA/bandit#753
- PyCQA/bandit#595

Reading from pyproject.toml not yet functional:
Must install "toml" package and use "-c pyproject.toml".
- PyCQA/bandit#758

INI file configuration and CLI usage is unclear:
- PyCQA/bandit#603
- PyCQA/bandit#467
- PyCQA/bandit#396
@ericwb
Copy link
Member

ericwb commented Jan 26, 2022

I know it's been quite a wait, but release 1.7.2 went out today.

https://github.com/PyCQA/bandit/releases/tag/1.7.2

@ericwb ericwb closed this as completed Jan 26, 2022
@ssbarnea
Copy link
Member

To be honest it is a share that TOML support is not implicit and that even after installing toml extra the pyproject.toml config is not loaded unless user adds extra arguments. It is just poor UX.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

5 participants