Release 2.4.0

[2.4.0]

Added

• Output formats: pip-audit now supports a Markdown format
  (--format=markdown) which renders results as a set of Markdown tables.
  (#312)

Release v2.3.4

version: v2.3.4

Release v2.3.3

Changed

• CLI: pip-audit now warns on the combination of -s osv and
  --require-hashes, notifying users that only the PyPI service
  can fully verify hashes
  (#298)

Fixed

• CLI/Dependency sources: --cache-dir=... and other flags that affect
  dependency resolver behavior now work correctly when auditing a
  pyproject.toml dependency source
  (#300)

Release v2.3.2

Changed

• CLI: pip-audit's progress spinner has been refactored to make it
  faster and more responsive
  (#283)

• CLI, Vulnerability sources: the error message used to report
  connection failures to vulnerability sources was improved
  (#287)

• Vulnerability sources: the OSV service is now more resilient
  to schema changes (#288)

• Vulnerability sources: the PyPI service provides a better
  error message during some cases of service degradation
  (#294)

Fixed

• Vulnerability sources: a bug stemming from an incorrect assumption
  about OSV's schema guarantees was fixed
  (#284)

• Caching: pip-audit now respects pip's PIP_NO_CACHE_DIR
  and will not attempt to use the pip cache if present
  (#290)

Release v2.3.1

2.3.1 - 2022-05-24

Fixed

• CLI: A bug causing the terminal's cursor to disappear on some versions of CPython was fixed (#280)

Release v2.3.0

2.3.0 - 2022-05-18

Added

CLI: The --ignore-vuln option has been added, allowing users to specify vulnerability IDs to ignore during the final report (#275)

CLI: The --no-deps flag has been added, allowing users to skip dependency resolution entirely when pip-audit is used in requirements mode (#255)

Release v2.2.1

CHANGELOG: 2.2.1

Release v2.2.0

2.2.0 - 2022-05-02

Added

• CLI: The --output option has been added, allowing users to specify
  a file to write output to. The default behavior of writing to stdout
  is unchanged (#262)

Fixed

• Vulnerability sources: A bug caused by insufficient version normalization
  was fixed (#263)

Release v2.1.1

2.1.1 - 2022-03-29

Fixed

• Dependency sources: A bug caused by ambiguous parses of source distribution
  files was fixed (#249)

Release v2.1.0

2.1.0 - 2022-03-11

Added

• CLI: The --skip-editable flag has been added, allowing users to skip local packages or parsed requirements (via -r) that are marked as editable (#244)

• CLI: pip-audit can audit projects that list their dependencies in pyproject.toml files, via pip-audit <dir> (#246)