Merge pull request #9828 from sbidoul/release-21.1

Release 21.1
pypa · Apr 24, 2021 · a63fd65 · a63fd65
2 parents e46bdda + 4b0cddc
commit a63fd65
Show file tree

Hide file tree

Showing 63 changed files with 112 additions and 68 deletions.
diff --git a/AUTHORS.txt b/AUTHORS.txt
@@ -37,6 +37,7 @@ Andre Aguiar
 Andreas Lutro
 Andrei Geacar
 Andrew Gaul
+Andrey Bienkowski
 Andrey Bulgakov
 Andrés Delfino
 Andy Freeland
@@ -71,6 +72,7 @@ Barney Gale
 barneygale
 Bartek Ogryczak
 Bastian Venthur
+Ben Bodenmiller
 Ben Darnell
 Ben Hoyt
 Ben Rosser
@@ -85,6 +87,7 @@ Bernardo B. Marques
 Bernhard M. Wiedemann
 Bertil Hatt
 Bhavam Vidyarthi
+Blazej Michalik
 Bogdan Opanchuk
 BorisZZZ
 Brad Erickson
@@ -139,6 +142,7 @@ Cristina
 Cristina Muñoz
 Curtis Doty
 cytolentino
+Daan De Meyer
 Damian Quiroga
 Dan Black
 Dan Savilonis
@@ -154,28 +158,33 @@ Daniele Esposti
 Daniele Procida
 Danny Hermes
 Danny McClanahan
+Darren Kavanagh
 Dav Clark
 Dave Abrahams
 Dave Jones
 David Aguilar
 David Black
 David Bordeynik
 David Caro
+David D Lowe
 David Evans
+David Hewitt
 David Linke
 David Poggi
 David Pursehouse
 David Tucker
 David Wales
 Davidovich
 Deepak Sharma
+Denise Yu
 derwolfe
 Desetude
 Devesh Kumar Singh
 Diego Caraballo
 DiegoCaraballo
 Dmitry Gladkov
 Domen Kožar
+Dominic Davis-Foster
 Donald Stufft
 Dongweiming
 Douglas Thor
@@ -195,6 +204,7 @@ Emmanuel Arias
 Endoh Takanao
 enoch
 Erdinc Mutlu
+Eric Cousineau
 Eric Gillingham
 Eric Hanchrow
 Eric Hopper
@@ -254,7 +264,7 @@ Igor Kuzmitshov
 Igor Sobreira
 Ilan Schnell
 Ilya Baryshev
-INADA Naoki
+Inada Naoki
 Ionel Cristian Mărieș
 Ionel Maries Cristian
 Ivan Pozdeev
@@ -279,6 +289,7 @@ jenix21
 Jeremy Stanley
 Jeremy Zafran
 Jiashuo Li
+Jim Fisher
 Jim Garrison
 Jivan Amara
 John Paton
@@ -292,6 +303,7 @@ Jonas Nockert
 Jonathan Herbert
 Joost Molenaar
 Jorge Niedbalski
+Joseph Bylund
 Joseph Long
 Josh Bronson
 Josh Hansen
@@ -317,6 +329,7 @@ Kevin Frommelt
 Kevin R Patterson
 Kexuan Sun
 Kit Randel
+Klaas van Schelven
 KOLANICH
 kpinc
 Krishna Oza
@@ -325,6 +338,7 @@ Kyle Persohn
 lakshmanaram
 Laszlo Kiss-Kollar
 Laurent Bristiel
+Laurent LAPORTE
 Laurie O
 Laurie Opperman
 Leon Sasson
@@ -346,6 +360,8 @@ Mariatta
 Mark Kohler
 Mark Williams
 Markus Hametner
+Martin Häcker
+Martin Pavlasek
 Masaki
 Masklinn
 Matej Stuchlik
@@ -362,6 +378,7 @@ Matthew Trumbell
 Matthew Willson
 Matthias Bussonnier
 mattip
+Max W Chase
 Maxim Kurnikov
 Maxime Rouyrre
 mayeut
@@ -458,6 +475,7 @@ Preston Holmes
 Przemek Wrzos
 Pulkit Goyal
 Qiangning Hong
+Quentin Lee
 Quentin Pradet
 R. David Murray
 Rafael Caricio
@@ -577,7 +595,9 @@ William ML Leslie
 William T Olson
 Wilson Mo
 wim glenn
+Winson Luk
 Wolfgang Maier
+XAMES3
 Xavier Fernandez
 xoviat
 xtreak
@@ -592,3 +612,4 @@ Zhiping Deng
 Zvezdan Petkovic
 Łukasz Langa
 Семён Марьясин
+‮rekcäH nitraM‮
diff --git a/NEWS.rst b/NEWS.rst
@@ -1,3 +1,91 @@
+.. note
+
+    You should *NOT* be adding new change log entries to this file, this
+    file is managed by towncrier. You *may* edit previous change logs to
+    fix problems like typo corrections or such.
+
+    To add a new change log entry, please see
+        https://pip.pypa.io/en/latest/development/contributing/#news-entries
+
+.. towncrier release notes start
+
+21.1 (2021-04-24)
+=================
+
+Process
+-------
+
+- Start installation scheme migration from ``distutils`` to ``sysconfig``. A
+  warning is implemented to detect differences between the two implementations to
+  encourage user reports, so we can avoid breakages before they happen.
+
+Features
+--------
+
+- Add the ability for the new resolver to process URL constraints. (`#8253 <https://github.com/pypa/pip/issues/8253>`_)
+- Add a feature ``--use-feature=in-tree-build`` to build local projects in-place
+  when installing. This is expected to become the default behavior in pip 21.3;
+  see `Installing from local packages <https://pip.pypa.io/en/stable/user_guide/#installing-from-local-packages>`_
+  for more information. (`#9091 <https://github.com/pypa/pip/issues/9091>`_)
+- Bring back the "(from versions: ...)" message, that was shown on resolution failures. (`#9139 <https://github.com/pypa/pip/issues/9139>`_)
+- Add support for editable installs for project with only setup.cfg files. (`#9547 <https://github.com/pypa/pip/issues/9547>`_)
+- Improve performance when picking the best file from indexes during ``pip install``. (`#9748 <https://github.com/pypa/pip/issues/9748>`_)
+- Warn instead of erroring out when doing a PEP 517 build in presence of
+  ``--build-option``. Warn when doing a PEP 517 build in presence of
+  ``--global-option``. (`#9774 <https://github.com/pypa/pip/issues/9774>`_)
+
+Bug Fixes
+---------
+
+- Fixed ``--target`` to work with ``--editable`` installs. (`#4390 <https://github.com/pypa/pip/issues/4390>`_)
+- Add a warning, discouraging the usage of pip as root, outside a virtual environment. (`#6409 <https://github.com/pypa/pip/issues/6409>`_)
+- Ignore ``.dist-info`` directories if the stem is not a valid Python distribution
+  name, so they don't show up in e.g. ``pip freeze``. (`#7269 <https://github.com/pypa/pip/issues/7269>`_)
+- Only query the keyring for URLs that actually trigger error 401.
+  This prevents an unnecessary keyring unlock prompt on every pip install
+  invocation (even with default index URL which is not password protected). (`#8090 <https://github.com/pypa/pip/issues/8090>`_)
+- Prevent packages already-installed alongside with pip to be injected into an
+  isolated build environment during build-time dependency population. (`#8214 <https://github.com/pypa/pip/issues/8214>`_)
+- Fix ``pip freeze`` permission denied error in order to display an understandable error message and offer solutions. (`#8418 <https://github.com/pypa/pip/issues/8418>`_)
+- Correctly uninstall script files (from setuptools' ``scripts`` argument), when installed with ``--user``. (`#8733 <https://github.com/pypa/pip/issues/8733>`_)
+- New resolver: When a requirement is requested both via a direct URL
+  (``req @ URL``) and via version specifier with extras (``req[extra]``), the
+  resolver will now be able to use the URL to correctly resolve the requirement
+  with extras. (`#8785 <https://github.com/pypa/pip/issues/8785>`_)
+- New resolver: Show relevant entries from user-supplied constraint files in the
+  error message to improve debuggability. (`#9300 <https://github.com/pypa/pip/issues/9300>`_)
+- Avoid parsing version to make the version check more robust against lousily
+  debundled downstream distributions. (`#9348 <https://github.com/pypa/pip/issues/9348>`_)
+- ``--user`` is no longer suggested incorrectly when pip fails with a permission
+  error in a virtual environment. (`#9409 <https://github.com/pypa/pip/issues/9409>`_)
+- Fix incorrect reporting on ``Requires-Python`` conflicts. (`#9541 <https://github.com/pypa/pip/issues/9541>`_)
+- Make wheel compatibility tag preferences more important than the build tag (`#9565 <https://github.com/pypa/pip/issues/9565>`_)
+- Fix pip to work with warnings converted to errors. (`#9779 <https://github.com/pypa/pip/issues/9779>`_)
+- **SECURITY**: Stop splitting on unicode separators in git references,
+  which could be maliciously used to install a different revision on the
+  repository. (`#9827 <https://github.com/pypa/pip/issues/9827>`_)
+
+Vendored Libraries
+------------------
+
+- Update urllib3 to 1.26.4 to fix CVE-2021-28363
+- Remove contextlib2.
+- Upgrade idna to 3.1
+- Upgrade pep517 to 0.10.0
+- Upgrade vendored resolvelib to 0.7.0.
+- Upgrade tenacity to 7.0.0
+
+Improved Documentation
+----------------------
+
+- Update "setuptools extras" link to match upstream. (`#4822829F-6A45-4202-87BA-A80482DF6D4E <https://github.com/pypa/pip/issues/4822829F-6A45-4202-87BA-A80482DF6D4E>`_)
+- Improve SSL Certificate Verification docs and ``--cert`` help text. (`#6720 <https://github.com/pypa/pip/issues/6720>`_)
+- Add a section in the documentation to suggest solutions to the ``pip freeze`` permission denied issue. (`#8418 <https://github.com/pypa/pip/issues/8418>`_)
+- Add warning about ``--extra-index-url`` and dependency confusion (`#9647 <https://github.com/pypa/pip/issues/9647>`_)
+- Describe ``--upgrade-strategy`` and direct requirements explicitly; add a brief
+  example. (`#9692 <https://github.com/pypa/pip/issues/9692>`_)
+
+
 21.0.1 (2021-01-30)
 ===================
 
@@ -61,17 +149,6 @@ Improved Documentation
 - Fix broken email link in docs feedback banners. (`#9343 <https://github.com/pypa/pip/issues/9343>`_)
 
 
-.. note
-
-    You should *NOT* be adding new change log entries to this file, this
-    file is managed by towncrier. You *may* edit previous change logs to
-    fix problems like typo corrections or such.
-
-    To add a new change log entry, please see
-        https://pip.pypa.io/en/latest/development/contributing/#news-entries
-
-.. towncrier release notes start
-
 20.3.4 (2021-01-23)
 ===================
 

diff --git a/news/0a741827-049c-4d5d-b44d-daea0c2fd01a.trivial.rst b/news/0a741827-049c-4d5d-b44d-daea0c2fd01a.trivial.rst
diff --git a/news/11e1b2eb-6433-4f15-b70d-c2c514f72ebd.trivial.rst b/news/11e1b2eb-6433-4f15-b70d-c2c514f72ebd.trivial.rst
diff --git a/news/151a1e46-d005-46ca-b1ae-a3811357dba3.trivial.rst b/news/151a1e46-d005-46ca-b1ae-a3811357dba3.trivial.rst
diff --git a/news/1ab8f1c8-c115-4055-9a60-30a8f8eef7ba.trivial.rst b/news/1ab8f1c8-c115-4055-9a60-30a8f8eef7ba.trivial.rst
diff --git a/news/287c6463-d2a1-41f5-a2df-d11f8460551a.trivial.rst b/news/287c6463-d2a1-41f5-a2df-d11f8460551a.trivial.rst
diff --git a/news/40711960-12d9-4e58-8322-21e5975a804e.trivial.rst b/news/40711960-12d9-4e58-8322-21e5975a804e.trivial.rst
diff --git a/news/4390.bugfix.rst b/news/4390.bugfix.rst
diff --git a/news/4822829F-6A45-4202-87BA-A80482DF6D4E.doc.rst b/news/4822829F-6A45-4202-87BA-A80482DF6D4E.doc.rst
diff --git a/news/5B0A5B91-D0A3-4599-B3B4-129240A99B99.trivial.rst b/news/5B0A5B91-D0A3-4599-B3B4-129240A99B99.trivial.rst
diff --git a/news/5be04056-e1d6-4f9a-bf46-8938d1936d9e.trivial.rst b/news/5be04056-e1d6-4f9a-bf46-8938d1936d9e.trivial.rst
diff --git a/news/6409.bugfix.rst b/news/6409.bugfix.rst
diff --git a/news/6720.doc.rst b/news/6720.doc.rst
diff --git a/news/7269.bugfix.rst b/news/7269.bugfix.rst
diff --git a/news/76c758fb-6f07-4ec1-956b-d77c9f339773.trivial.rst b/news/76c758fb-6f07-4ec1-956b-d77c9f339773.trivial.rst
diff --git a/news/8090.bugfix.rst b/news/8090.bugfix.rst
diff --git a/news/8214.bugfix.rst b/news/8214.bugfix.rst
diff --git a/news/8253.feature.rst b/news/8253.feature.rst
diff --git a/news/8418.bugfix.rst b/news/8418.bugfix.rst
diff --git a/news/8418.doc.rst b/news/8418.doc.rst
diff --git a/news/855bfaed-4341-4d28-ab9e-e5ab43fb039f.trivial.rst b/news/855bfaed-4341-4d28-ab9e-e5ab43fb039f.trivial.rst
diff --git a/news/8597c433-9c0b-4bec-a1e8-afd31786eaeb.trivial.rst b/news/8597c433-9c0b-4bec-a1e8-afd31786eaeb.trivial.rst
diff --git a/news/8733.bugfix.rst b/news/8733.bugfix.rst
diff --git a/news/8785.bugfix.rst b/news/8785.bugfix.rst
diff --git a/news/8896.trivial.rst b/news/8896.trivial.rst
diff --git a/news/9091.feature.rst b/news/9091.feature.rst
diff --git a/news/9139.feature.rst b/news/9139.feature.rst
diff --git a/news/917ab6ff-72ea-4db5-846a-30273dac1c0c.trivial.rst b/news/917ab6ff-72ea-4db5-846a-30273dac1c0c.trivial.rst
diff --git a/news/9300.bugfix.rst b/news/9300.bugfix.rst
diff --git a/news/9348.bugfix.rst b/news/9348.bugfix.rst
diff --git a/news/9409.bugfix.rst b/news/9409.bugfix.rst
diff --git a/news/9541.bugfix.rst b/news/9541.bugfix.rst
diff --git a/news/9547.feature.rst b/news/9547.feature.rst
diff --git a/news/9565.bugfix.rst b/news/9565.bugfix.rst
diff --git a/news/9617.process.rst b/news/9617.process.rst
diff --git a/news/9647.doc.rst b/news/9647.doc.rst
diff --git a/news/9692.doc.rst b/news/9692.doc.rst
diff --git a/news/9748.feature.rst b/news/9748.feature.rst
diff --git a/news/9774.feature.rst b/news/9774.feature.rst
diff --git a/news/9779.bugfix.rst b/news/9779.bugfix.rst
diff --git a/news/9827.bugfix.rst b/news/9827.bugfix.rst
diff --git a/news/9976b528-bf43-4225-b96f-e066910f309c.trivial.rst b/news/9976b528-bf43-4225-b96f-e066910f309c.trivial.rst
diff --git a/news/9e768673-6079-491e-bbe0-d1593952f1c7.trivial.rst b/news/9e768673-6079-491e-bbe0-d1593952f1c7.trivial.rst
diff --git a/news/CVE-2021-28363.vendor.rst b/news/CVE-2021-28363.vendor.rst
diff --git a/news/a06e528d-1172-4012-a0a5-0fc42264a70d.trivial.rst b/news/a06e528d-1172-4012-a0a5-0fc42264a70d.trivial.rst
diff --git a/news/adba2b7a-af01-49c9-9b72-2d3d4a89b11a.trivial.rst b/news/adba2b7a-af01-49c9-9b72-2d3d4a89b11a.trivial.rst
diff --git a/news/afd07841-404a-4f2b-afee-c931a5aa7d54.trivial.rst b/news/afd07841-404a-4f2b-afee-c931a5aa7d54.trivial.rst
diff --git a/news/bca635a1-abe3-4532-8add-bf7491b0eea5.bugfix.rst b/news/bca635a1-abe3-4532-8add-bf7491b0eea5.bugfix.rst
diff --git a/news/contextlib2.vendor.rst b/news/contextlib2.vendor.rst
diff --git a/news/d0935419-2486-45dc-b8dc-d2a5b9197ca4.trivial.rst b/news/d0935419-2486-45dc-b8dc-d2a5b9197ca4.trivial.rst
diff --git a/news/d809028d-331a-4700-bfc1-485814e6c90e.trivial.rst b/news/d809028d-331a-4700-bfc1-485814e6c90e.trivial.rst
diff --git a/news/dfaa54d4-21e2-460f-9d80-455ff318c713.trivial.rst b/news/dfaa54d4-21e2-460f-9d80-455ff318c713.trivial.rst
diff --git a/news/f24d8f47-5750-4a13-b36f-d4a4622861cf.trivial.rst b/news/f24d8f47-5750-4a13-b36f-d4a4622861cf.trivial.rst
diff --git a/news/f8f0d057-9ed5-4d22-a877-50f2d5adcae0.trivial.rst b/news/f8f0d057-9ed5-4d22-a877-50f2d5adcae0.trivial.rst
diff --git a/news/fc6b6951-9a1a-453e-af98-bbb35f7c3e66.trivial.rst b/news/fc6b6951-9a1a-453e-af98-bbb35f7c3e66.trivial.rst
diff --git a/news/fd62a11c-018c-4fde-ac8d-f674c6d9d190.trivial.rst b/news/fd62a11c-018c-4fde-ac8d-f674c6d9d190.trivial.rst
diff --git a/news/idna.vendor.rst b/news/idna.vendor.rst
diff --git a/news/pep517.vendor.rst b/news/pep517.vendor.rst
diff --git a/news/resolvelib.vendor.rst b/news/resolvelib.vendor.rst
diff --git a/news/tenacity.vendor.rst b/news/tenacity.vendor.rst
diff --git a/src/pip/__init__.py b/src/pip/__init__.py
@@ -1,6 +1,6 @@
 from typing import List, Optional
 
-__version__ = "21.1.dev0"
+__version__ = "21.2.dev0"
 
 
 def main(args=None):

diff --git a/src/pip/_internal/resolution/resolvelib/resolver.py b/src/pip/_internal/resolution/resolvelib/resolver.py
@@ -184,7 +184,7 @@ def resolve(self, root_reqs, check_supported_wheels):
                     deprecated(
                         reason=reason,
                         replacement=replacement,
-                        gone_in="21.1",
+                        gone_in="21.2",
                         issue=8711,
                     )