pypa/pip-audit issues and pull requests

#791 - build(deps): bump github/codeql-action from 3.25.10 to 3.25.11

Pull Request - State: closed - Opened by dependabot[bot] about 2 hours ago
Labels: dependencies, github_actions

#790 - build(deps): update ruff requirement from <0.4.11 to <0.5.1

Pull Request - State: closed - Opened by dependabot[bot] 1 day ago
Labels: dependencies, python

#789 - workflows/release: cleanup

Pull Request - State: closed - Opened by woodruffw 7 days ago
Labels: chore

#788 - build(deps): update ruff requirement from <0.4.10 to <0.4.11

Pull Request - State: closed - Opened by dependabot[bot] 7 days ago
Labels: dependencies, python

#787 - build(deps): update ruff requirement from <0.4.9 to <0.4.10

Pull Request - State: closed - Opened by dependabot[bot] 14 days ago
Labels: dependencies, python

#786 - build(deps): bump actions/checkout from 4.1.6 to 4.1.7

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago
Labels: dependencies, github_actions

#785 - build(deps): bump github/codeql-action from 3.25.9 to 3.25.10

Pull Request - State: closed - Opened by dependabot[bot] 15 days ago
Labels: dependencies, github_actions

#784 - build(deps): bump github/codeql-action from 3.25.8 to 3.25.9

Pull Request - State: closed - Opened by dependabot[bot] 16 days ago
Labels: dependencies, github_actions

#783 - build(deps): update ruff requirement from <0.4.8 to <0.4.9

Pull Request - State: closed - Opened by dependabot[bot] 23 days ago
Labels: dependencies, python

#782 - build(deps): bump github/codeql-action from 3.25.6 to 3.25.8

Pull Request - State: closed - Opened by dependabot[bot] 24 days ago
Labels: dependencies, github_actions

#781 - build(deps): update ruff requirement from <0.4.6 to <0.4.8

Pull Request - State: closed - Opened by dependabot[bot] 25 days ago
Labels: dependencies, python

#780 - build(deps): bump github/codeql-action from 3.25.6 to 3.25.7

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago - 1 comment
Labels: dependencies, github_actions

#779 - build(deps): update ruff requirement from <0.4.6 to <0.4.7

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, python

#778 - build(deps): update ruff requirement from <0.4.5 to <0.4.6

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, python

#777 - build(deps): bump github/codeql-action from 2.13.4 to 3.25.6

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, github_actions

#776 - build(deps): bump actions/checkout from 4.1.5 to 4.1.6

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, github_actions

#775 - build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, github_actions

#774 - build(deps): update ruff requirement from <0.4.4 to <0.4.5

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, python

#773 - build(deps): bump actions/checkout from 4.1.4 to 4.1.5

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, github_actions

#772 - build(deps): update ruff requirement from <0.4.3 to <0.4.4

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, python

#771 - prep 2.7.3

Pull Request - State: closed - Opened by woodruffw about 2 months ago
Labels: chore

#770 - Bug: pre-commit hook failing when local pip-audit command works

Issue - State: closed - Opened by r-findley 2 months ago - 9 comments
Labels: bug-candidate, needs-response

#769 - build(deps): update ruff requirement from <0.4.2 to <0.4.3

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, python

#768 - build(deps): bump actions/checkout from 4.1.3 to 4.1.4

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions

#767 - build(deps): bump actions/upload-artifact from 4.3.2 to 4.3.3

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions

#766 - Support for optional dependencies/extras when auditing from pyproject.toml

Issue - State: open - Opened by albertodiazdorado 2 months ago - 4 comments
Labels: enhancement

#765 - build(deps): bump actions/checkout from 4.1.2 to 4.1.3

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions

#764 - build(deps): update ruff requirement from <0.3.8 to <0.4.2

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, python

#763 - build(deps): bump actions/upload-artifact from 4.3.1 to 4.3.2

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions

#762 - CHANGELOG: record #756

Pull Request - State: closed - Opened by woodruffw 3 months ago - 1 comment
Labels: chore

#761 - build(deps): update ruff requirement from <0.3.6 to <0.3.8

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, python

#760 - build(deps-dev): update cyclonedx-python-lib requirement from <7,>=5 to >=5,<8

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, python

#759 - README: fixup troubleshooting docs based on #742

Pull Request - State: closed - Opened by woodruffw 3 months ago
Labels: component:docs

#758 - build(deps-dev): update ruff requirement from <0.3.5 to <0.3.6

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, python

#757 - Many tests failing on Windows

Pull Request - State: closed - Opened by mathbou 3 months ago - 1 comment
Labels: needs-response

#756 - Fix pipe reading hanging indefinitely on Windows

Pull Request - State: closed - Opened by mathbou 3 months ago - 2 comments
Labels: bug, plat:windows

#755 - Allow environment variables to set CLI defaults

Pull Request - State: closed - Opened by bittner 3 months ago - 2 comments
Labels: enhancement, component:cli

#754 - Provide environment variables for CLI option defaults

Issue - State: closed - Opened by bittner 3 months ago - 3 comments
Labels: enhancement

#753 - Allow different output formats in parallel (e.g. for SBOM reports)

Issue - State: open - Opened by bittner 3 months ago - 4 comments
Labels: enhancement, help wanted, good first issue

#751 - build(deps-dev): update ruff requirement from <0.3.3 to <0.3.4

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, python

#750 - build(deps): bump actions/deploy-pages from 4.0.4 to 4.0.5

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#749 - 662 duplicates are not supported in requirements.txt when run with disable pip

Pull Request - State: open - Opened by mathbou 3 months ago - 1 comment
Labels: component:dep-sources, needs-response

#748 - build(deps): bump actions/checkout from 4.1.1 to 4.1.2

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#747 - build(deps-dev): update ruff requirement from <0.3.2 to <0.3.3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, python

#746 - build(deps-dev): update ruff requirement from <0.3.1 to <0.3.2

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, python

#745 - build(deps-dev): update ruff requirement from <0.2.3 to <0.3.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, python

#744 - prep 2.7.2

Pull Request - State: closed - Opened by woodruffw 4 months ago
Labels: chore

#743 - _virtual_env: allow pip to shell out to keyring

Pull Request - State: closed - Opened by woodruffw 4 months ago
Labels: component:dep-sources

#742 - Problems authenticating to a private index

Issue - State: closed - Opened by fgsalomon 4 months ago - 17 comments
Labels: bug, component:dep-sources, upstream

#741 - Replace issue templates with issue forms

Pull Request - State: closed - Opened by woodruffw 4 months ago
Labels: chore

#740 - build(deps-dev): update ruff requirement from <0.2.2 to <0.2.3

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, python

#739 - Possible race condition when using `AuditSpinner`

Issue - State: open - Opened by i386x 4 months ago - 4 comments
Labels: bug-candidate, needs-response

#738 - prep 2.7.1

Pull Request - State: closed - Opened by woodruffw 5 months ago
Labels: chore

#737 - _virtual_env: handle PermissionError

Pull Request - State: closed - Opened by woodruffw 5 months ago - 2 comments

#736 - build(deps): bump actions/upload-pages-artifact from 3.0.0 to 3.0.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#735 - build(deps): bump actions/deploy-pages from 4.0.3 to 4.0.4

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#734 - build(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#733 - build(deps-dev): update ruff requirement from <0.2.1 to <0.2.2

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, python

#732 - PermissionError: [Errno 13] Permission denied: '/tmp/tmpzrluurcb/bin/python3'

Issue - State: closed - Opened by rdinoff 5 months ago - 10 comments
Labels: bug, plat:linux

#731 - build(deps-dev): update ruff requirement from <0.1.16 to <0.2.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, python

#730 - cyclonedx-python-lib 6.0 and above breaks pip-audit

Issue - State: closed - Opened by neilkk 5 months ago - 3 comments
Labels: bug-candidate, needs-response

#729 - build(deps-dev): update ruff requirement from <0.1.15 to <0.1.16

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, python

#728 - build(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#726 - build(deps): bump actions/upload-artifact from 3.1.3 to 4.2.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#725 - build(deps): bump actions/upload-artifact from 3.1.3 to 4.1.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, github_actions

#724 - build(deps-dev): update ruff requirement from <0.1.12 to <0.1.14

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, python

#723 - build(deps): bump actions/deploy-pages from 4.0.2 to 4.0.3

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, github_actions

#722 - prep 2.7.0

Pull Request - State: closed - Opened by woodruffw 6 months ago
Labels: chore

#721 - Add aliases to output.

Pull Request - State: closed - Opened by pboulos 6 months ago

#720 - prep 2.6.3

Pull Request - State: closed - Opened by tetsuo-cpp 6 months ago

#719 - _cli: remove a misleading warning

Pull Request - State: closed - Opened by woodruffw 6 months ago
Labels: component:cli

#718 - --no-deps and --disable-pip give conflicting warnings

Issue - State: closed - Opened by cburroughs 6 months ago - 6 comments
Labels: bug, component:cli

#717 - build(deps-dev): update ruff requirement from <0.1.10 to <0.1.12

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, python

#716 - build(deps): bump actions/deploy-pages from 4.0.0 to 4.0.2

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, github_actions

#715 - Allow build with cyclonedx-python-lib 6.0.0+

Pull Request - State: closed - Opened by sunpoet 6 months ago - 1 comment

#714 - build(deps-dev): update ruff requirement from <0.1.9 to <0.1.10

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, python

#713 - build(deps): bump actions/upload-pages-artifact from 2.0.0 to 3.0.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, github_actions

#712 - build(deps): bump actions/deploy-pages from 3.0.1 to 4.0.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, github_actions

#711 - prep 2.6.2

Pull Request - State: closed - Opened by woodruffw 6 months ago
Labels: chore

#710 - build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 3 comments
Labels: dependencies, github_actions

#709 - build(deps-dev): update ruff requirement from <0.1.8 to <0.1.9

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, python

#708 - build(deps): bump sigstore/gh-action-sigstore-python from 2.1.0 to 2.1.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, github_actions

#707 - _virtual_env: add --no-input to all invocations

Pull Request - State: closed - Opened by woodruffw 7 months ago - 1 comment
Labels: component:dep-sources

#706 - pip-audit doesnt allow authenticating into an extra index

Issue - State: closed - Opened by nickanna42 7 months ago - 8 comments
Labels: bug, component:dep-sources

#705 - build(deps-dev): update cyclonedx-python-lib requirement from <6,>=4 to >=4,<7

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 2 comments
Labels: dependencies, python

#704 - build(deps): bump actions/deploy-pages from 3.0.0 to 3.0.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#703 - build(deps): bump actions/setup-python from 4 to 5

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#702 - bump minimum Python to 3.8

Pull Request - State: closed - Opened by woodruffw 7 months ago
Labels: chore

#701 - build(deps-dev): update ruff requirement from <0.1.7 to <0.1.8

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, python

#700 - build(deps): bump actions/deploy-pages from 2.0.5 to 3.0.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#699 - build(deps): bump actions/deploy-pages from 2.0.4 to 2.0.5

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#698 - Support for offline operation (e.g. using local copy of PyPA advisory repo as vulnerability service)

Issue - State: open - Opened by riwoodward 7 months ago - 6 comments
Labels: enhancement, upstream, component:vuln-sources

#697 - [chore] Python 3.12 support

Pull Request - State: closed - Opened by woodruffw 7 months ago
Labels: component:cicd, chore

#696 - build(deps-dev): update ruff requirement from <0.1.6 to <0.1.7

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, python

#695 - build(deps-dev): update ruff requirement from <0.1.5 to <0.1.6

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, python

#694 - Support pip-audit configuration from pyproject.toml

Issue - State: open - Opened by dnovvak 8 months ago - 6 comments
Labels: enhancement

#693 - build(deps-dev): update ruff requirement from <0.1.4 to <0.1.5

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, python

#692 - Replace `isort` and `black` with `ruff`

Pull Request - State: closed - Opened by woodruffw 8 months ago
Labels: component:cicd

#691 - build(deps-dev): update ruff requirement from <0.1.3 to <0.1.4

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, python

#690 - build(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago
Labels: dependencies, github_actions

GitHub / pypa/pip-audit issues and pull requests