Bump for release

pypa · Apr 24, 2021 · 2b2a268 · 2b2a268
1 parent ea761a6
commit 2b2a268
Show file tree

Hide file tree

Showing 61 changed files with 77 additions and 55 deletions.
diff --git a/NEWS.rst b/NEWS.rst
@@ -9,6 +9,82 @@
 
 .. towncrier release notes start
 
+21.1 (2021-04-24)
+=================
+
+Process
+-------
+
+- Start installation scheme migration from ``distutils`` to ``sysconfig``. A
+  warning is implemented to detect differences between the two implementations to
+  encourage user reports, so we can avoid breakages before they happen.
+
+Features
+--------
+
+- Add the ability for the new resolver to process URL constraints. (`#8253 <https://github.com/pypa/pip/issues/8253>`_)
+- Add a feature ``--use-feature=in-tree-build`` to build local projects in-place
+  when installing. This is expected to become the default behavior in pip 21.3;
+  see `Installing from local packages <https://pip.pypa.io/en/stable/user_guide/#installing-from-local-packages>`_
+  for more information. (`#9091 <https://github.com/pypa/pip/issues/9091>`_)
+- Bring back the "(from versions: ...)" message, that was shown on resolution failures. (`#9139 <https://github.com/pypa/pip/issues/9139>`_)
+- Add support for editable installs for project with only setup.cfg files. (`#9547 <https://github.com/pypa/pip/issues/9547>`_)
+- Improve performance when picking the best file from indexes during ``pip install``. (`#9748 <https://github.com/pypa/pip/issues/9748>`_)
+- Warn instead of erroring out when doing a PEP 517 build in presence of
+  ``--build-option``. Warn when doing a PEP 517 build in presence of
+  ``--global-option``. (`#9774 <https://github.com/pypa/pip/issues/9774>`_)
+
+Bug Fixes
+---------
+
+- Fixed ``--target`` to work with ``--editable`` installs. (`#4390 <https://github.com/pypa/pip/issues/4390>`_)
+- Add a warning, discouraging the usage of pip as root, outside a virtual environment. (`#6409 <https://github.com/pypa/pip/issues/6409>`_)
+- Ignore ``.dist-info`` directories if the stem is not a valid Python distribution
+  name, so they don't show up in e.g. ``pip freeze``. (`#7269 <https://github.com/pypa/pip/issues/7269>`_)
+- Only query the keyring for URLs that actually trigger error 401.
+  This prevents an unnecessary keyring unlock prompt on every pip install
+  invocation (even with default index URL which is not password protected). (`#8090 <https://github.com/pypa/pip/issues/8090>`_)
+- Prevent packages already-installed alongside with pip to be injected into an
+  isolated build environment during build-time dependency population. (`#8214 <https://github.com/pypa/pip/issues/8214>`_)
+- Fix ``pip freeze`` permission denied error in order to display an understandable error message and offer solutions. (`#8418 <https://github.com/pypa/pip/issues/8418>`_)
+- Correctly uninstall script files (from setuptools' ``scripts`` argument), when installed with ``--user``. (`#8733 <https://github.com/pypa/pip/issues/8733>`_)
+- New resolver: When a requirement is requested both via a direct URL
+  (``req @ URL``) and via version specifier with extras (``req[extra]``), the
+  resolver will now be able to use the URL to correctly resolve the requirement
+  with extras. (`#8785 <https://github.com/pypa/pip/issues/8785>`_)
+- New resolver: Show relevant entries from user-supplied constraint files in the
+  error message to improve debuggability. (`#9300 <https://github.com/pypa/pip/issues/9300>`_)
+- Avoid parsing version to make the version check more robust against lousily
+  debundled downstream distributions. (`#9348 <https://github.com/pypa/pip/issues/9348>`_)
+- ``--user`` is no longer suggested incorrectly when pip fails with a permission
+  error in a virtual environment. (`#9409 <https://github.com/pypa/pip/issues/9409>`_)
+- Fix incorrect reporting on ``Requires-Python`` conflicts. (`#9541 <https://github.com/pypa/pip/issues/9541>`_)
+- Make wheel compatibility tag preferences more important than the build tag (`#9565 <https://github.com/pypa/pip/issues/9565>`_)
+- Fix pip to work with warnings converted to errors. (`#9779 <https://github.com/pypa/pip/issues/9779>`_)
+- **SECURITY**: Stop splitting on unicode separators in git references,
+  which could be maliciously used to install a different revision on the
+  repository. (`#9827 <https://github.com/pypa/pip/issues/9827>`_)
+
+Vendored Libraries
+------------------
+
+- Update urllib3 to 1.26.4 to fix CVE-2021-28363
+- Remove contextlib2.
+- Upgrade idna to 3.1
+- Upgrade pep517 to 0.10.0
+- Upgrade vendored resolvelib to 0.7.0.
+- Upgrade tenacity to 7.0.0
+
+Improved Documentation
+----------------------
+
+- Update "setuptools extras" link to match upstream. (`#4822829F-6A45-4202-87BA-A80482DF6D4E <https://github.com/pypa/pip/issues/4822829F-6A45-4202-87BA-A80482DF6D4E>`_)
+- Improve SSL Certificate Verification docs and ``--cert`` help text. (`#6720 <https://github.com/pypa/pip/issues/6720>`_)
+- Add a section in the documentation to suggest solutions to the ``pip freeze`` permission denied issue. (`#8418 <https://github.com/pypa/pip/issues/8418>`_)
+- Add warning about ``--extra-index-url`` and dependency confusion (`#9647 <https://github.com/pypa/pip/issues/9647>`_)
+- Describe ``--upgrade-strategy`` and direct requirements explicitly; add a brief
+  example. (`#9692 <https://github.com/pypa/pip/issues/9692>`_)
+
 
 21.0.1 (2021-01-30)
 ===================

diff --git a/news/0a741827-049c-4d5d-b44d-daea0c2fd01a.trivial.rst b/news/0a741827-049c-4d5d-b44d-daea0c2fd01a.trivial.rst
diff --git a/news/11e1b2eb-6433-4f15-b70d-c2c514f72ebd.trivial.rst b/news/11e1b2eb-6433-4f15-b70d-c2c514f72ebd.trivial.rst
diff --git a/news/151a1e46-d005-46ca-b1ae-a3811357dba3.trivial.rst b/news/151a1e46-d005-46ca-b1ae-a3811357dba3.trivial.rst
diff --git a/news/1ab8f1c8-c115-4055-9a60-30a8f8eef7ba.trivial.rst b/news/1ab8f1c8-c115-4055-9a60-30a8f8eef7ba.trivial.rst
diff --git a/news/287c6463-d2a1-41f5-a2df-d11f8460551a.trivial.rst b/news/287c6463-d2a1-41f5-a2df-d11f8460551a.trivial.rst
diff --git a/news/40711960-12d9-4e58-8322-21e5975a804e.trivial.rst b/news/40711960-12d9-4e58-8322-21e5975a804e.trivial.rst
diff --git a/news/4390.bugfix.rst b/news/4390.bugfix.rst
diff --git a/news/4822829F-6A45-4202-87BA-A80482DF6D4E.doc.rst b/news/4822829F-6A45-4202-87BA-A80482DF6D4E.doc.rst
diff --git a/news/5B0A5B91-D0A3-4599-B3B4-129240A99B99.trivial.rst b/news/5B0A5B91-D0A3-4599-B3B4-129240A99B99.trivial.rst
diff --git a/news/5be04056-e1d6-4f9a-bf46-8938d1936d9e.trivial.rst b/news/5be04056-e1d6-4f9a-bf46-8938d1936d9e.trivial.rst
diff --git a/news/6409.bugfix.rst b/news/6409.bugfix.rst
diff --git a/news/6720.doc.rst b/news/6720.doc.rst
diff --git a/news/7269.bugfix.rst b/news/7269.bugfix.rst
diff --git a/news/76c758fb-6f07-4ec1-956b-d77c9f339773.trivial.rst b/news/76c758fb-6f07-4ec1-956b-d77c9f339773.trivial.rst
diff --git a/news/8090.bugfix.rst b/news/8090.bugfix.rst
diff --git a/news/8214.bugfix.rst b/news/8214.bugfix.rst
diff --git a/news/8253.feature.rst b/news/8253.feature.rst
diff --git a/news/8418.bugfix.rst b/news/8418.bugfix.rst
diff --git a/news/8418.doc.rst b/news/8418.doc.rst
diff --git a/news/855bfaed-4341-4d28-ab9e-e5ab43fb039f.trivial.rst b/news/855bfaed-4341-4d28-ab9e-e5ab43fb039f.trivial.rst
diff --git a/news/8597c433-9c0b-4bec-a1e8-afd31786eaeb.trivial.rst b/news/8597c433-9c0b-4bec-a1e8-afd31786eaeb.trivial.rst
diff --git a/news/8733.bugfix.rst b/news/8733.bugfix.rst
diff --git a/news/8785.bugfix.rst b/news/8785.bugfix.rst
diff --git a/news/8896.trivial.rst b/news/8896.trivial.rst
diff --git a/news/9091.feature.rst b/news/9091.feature.rst
diff --git a/news/9139.feature.rst b/news/9139.feature.rst
diff --git a/news/917ab6ff-72ea-4db5-846a-30273dac1c0c.trivial.rst b/news/917ab6ff-72ea-4db5-846a-30273dac1c0c.trivial.rst
diff --git a/news/9300.bugfix.rst b/news/9300.bugfix.rst
diff --git a/news/9348.bugfix.rst b/news/9348.bugfix.rst
diff --git a/news/9409.bugfix.rst b/news/9409.bugfix.rst
diff --git a/news/9541.bugfix.rst b/news/9541.bugfix.rst
diff --git a/news/9547.feature.rst b/news/9547.feature.rst
diff --git a/news/9565.bugfix.rst b/news/9565.bugfix.rst
diff --git a/news/9617.process.rst b/news/9617.process.rst
diff --git a/news/9647.doc.rst b/news/9647.doc.rst
diff --git a/news/9692.doc.rst b/news/9692.doc.rst
diff --git a/news/9748.feature.rst b/news/9748.feature.rst
diff --git a/news/9774.feature.rst b/news/9774.feature.rst
diff --git a/news/9779.bugfix.rst b/news/9779.bugfix.rst
diff --git a/news/9827.bugfix.rst b/news/9827.bugfix.rst
diff --git a/news/9976b528-bf43-4225-b96f-e066910f309c.trivial.rst b/news/9976b528-bf43-4225-b96f-e066910f309c.trivial.rst
diff --git a/news/9e768673-6079-491e-bbe0-d1593952f1c7.trivial.rst b/news/9e768673-6079-491e-bbe0-d1593952f1c7.trivial.rst
diff --git a/news/CVE-2021-28363.vendor.rst b/news/CVE-2021-28363.vendor.rst
diff --git a/news/a06e528d-1172-4012-a0a5-0fc42264a70d.trivial.rst b/news/a06e528d-1172-4012-a0a5-0fc42264a70d.trivial.rst
diff --git a/news/adba2b7a-af01-49c9-9b72-2d3d4a89b11a.trivial.rst b/news/adba2b7a-af01-49c9-9b72-2d3d4a89b11a.trivial.rst
diff --git a/news/afd07841-404a-4f2b-afee-c931a5aa7d54.trivial.rst b/news/afd07841-404a-4f2b-afee-c931a5aa7d54.trivial.rst
diff --git a/news/bca635a1-abe3-4532-8add-bf7491b0eea5.trivial.rst b/news/bca635a1-abe3-4532-8add-bf7491b0eea5.trivial.rst
diff --git a/news/contextlib2.vendor.rst b/news/contextlib2.vendor.rst
diff --git a/news/d0935419-2486-45dc-b8dc-d2a5b9197ca4.trivial.rst b/news/d0935419-2486-45dc-b8dc-d2a5b9197ca4.trivial.rst
diff --git a/news/d809028d-331a-4700-bfc1-485814e6c90e.trivial.rst b/news/d809028d-331a-4700-bfc1-485814e6c90e.trivial.rst
diff --git a/news/dfaa54d4-21e2-460f-9d80-455ff318c713.trivial.rst b/news/dfaa54d4-21e2-460f-9d80-455ff318c713.trivial.rst
diff --git a/news/f24d8f47-5750-4a13-b36f-d4a4622861cf.trivial.rst b/news/f24d8f47-5750-4a13-b36f-d4a4622861cf.trivial.rst
diff --git a/news/f8f0d057-9ed5-4d22-a877-50f2d5adcae0.trivial.rst b/news/f8f0d057-9ed5-4d22-a877-50f2d5adcae0.trivial.rst
diff --git a/news/fc6b6951-9a1a-453e-af98-bbb35f7c3e66.trivial.rst b/news/fc6b6951-9a1a-453e-af98-bbb35f7c3e66.trivial.rst
diff --git a/news/fd62a11c-018c-4fde-ac8d-f674c6d9d190.trivial.rst b/news/fd62a11c-018c-4fde-ac8d-f674c6d9d190.trivial.rst
diff --git a/news/idna.vendor.rst b/news/idna.vendor.rst
diff --git a/news/pep517.vendor.rst b/news/pep517.vendor.rst
diff --git a/news/resolvelib.vendor.rst b/news/resolvelib.vendor.rst
diff --git a/news/tenacity.vendor.rst b/news/tenacity.vendor.rst
diff --git a/src/pip/__init__.py b/src/pip/__init__.py
@@ -1,6 +1,6 @@
 from typing import List, Optional
 
-__version__ = "21.1.dev0"
+__version__ = "21.1"
 
 
 def main(args=None):