1.5.0 | Improved Security, Validation, and UI Refactoring

1.5.0 | Improved Security, Validation, and UI Refactoring

Added

• Security Validation: Hardened requirement parsing with stricter regex and length validation.
• Security Enforcement: Enforced TLS 1.2 minimum version for secure communication.

Fixed

• Linting & Code Quality: Refactored class names to follow PEP 8 standards, removed unused exception variables, improved logging, and modernized operator references.

Changed

• Documentation: Removed SUGGESTIONS.md documentation file.
• Dependency Updates:
  • Bumped cryptography from 46.0.5 to 46.0.7.
  • Bumped pyasn1 from 0.4.8 to 0.6.3.
  • Bumped Pygments from 2.17.2 to 2.20.0.
  • Bumped PyJWT from 2.7.0 to 2.12.0.
  • Bumped pyOpenSSL from 23.2.0 to 26.0.0.
  • Bumped requests from 2.32.4 to 2.33.0.
  • Bumped Twisted from 24.7.0 to 26.4.0.
  • Bumped urllib3 from 2.6.3 to 2.7.0.

1.4.0 | Added Features and Fixes

Added

• Auto-Update System: Background checker that notifies the user when new versions of installed packages are available on PyPI.
• Administrator Mode Warning: Added prominent documentation in README regarding Windows permission requirements.

Fixed

• Security: Forced HTTPS protocol for all package URLs in _clean_url to prevent insecure communication.
• Search Reliability: Optimized PyPI search by fully transitioning to the JSON API with ETag support and robust caching, resolving issues with legacy HTML parsing.
• Linting & Code Quality:
  • Addressed various Pylint and Flake8 warnings including lazy logging formatting, PEP 8 spacing, and explicit subprocess safety.
  • Refactored UI drawing methods to static methods for better performance.
  • Added missing docstrings to internal helper functions.
• Workflow: Pinned Semgrep CI workflow to a specific version for better stability.

Changed

• Dependency Updates:
  • Bumped twisted from 24.3.0 to 24.7.0.
  • Bumped setuptools from 68.1.2 to 70.0.0.
  • Bumped cryptography from 41.0.7 to 43.0.1.
  • Bumped urllib3 from 2.0.7 to 2.2.2.
  • Bumped requests from 2.31.0 to 2.32.2.
  • Bumped jinja2 from 3.1.2 to 3.1.4.
  • Bumped idna from 3.6 to 3.7.

1.3.0

• Initial support for Blender 4.2 Extensions.
• Improved search UI with better metadata display.

1.2.1

• Bug fixes for package search and installation.
• Improved error handling for network timeouts.

Full Changelog: 1.4.0...1.5.0

1.4.0 | Added Features and Fixes

Added

• Auto-Update System: Background checker that notifies the user when new versions of installed packages are available on PyPI.
• Administrator Mode Warning: Added prominent documentation in README regarding Windows permission requirements.

Fixed

• Security: Forced HTTPS protocol for all package URLs in _clean_url to prevent insecure communication.
• Search Reliability: Optimized PyPI search by fully transitioning to the JSON API with ETag support and robust caching, resolving issues with legacy HTML parsing.
• Linting & Code Quality:
  • Addressed various Pylint and Flake8 warnings including lazy logging formatting, PEP 8 spacing, and explicit subprocess safety.
  • Refactored UI drawing methods to static methods for better performance.
  • Added missing docstrings to internal helper functions.
• Workflow: Pinned Semgrep CI workflow to a specific version for better stability.

Changed

• Dependency Updates:
  • Bumped twisted from 24.3.0 to 24.7.0.
  • Bumped setuptools from 68.1.2 to 70.0.0.
  • Bumped cryptography from 41.0.7 to 43.0.1.
  • Bumped urllib3 from 2.0.7 to 2.2.2.
  • Bumped requests from 2.31.0 to 2.32.2.
  • Bumped jinja2 from 3.1.2 to 3.1.4.
  • Bumped idna from 3.6 to 3.7.

1.3.0

• Initial support for Blender 4.2 Extensions.
• Improved search UI with better metadata display.

1.2.1

• Bug fixes for package search and installation.
• Improved error handling for network timeouts.

What's Changed

• style: format code with Autopep8 by @deepsource-autofix[bot] in #13
• style: format code with Autopep8 by @deepsource-autofix[bot] in #12
• Bump urllib3 from 2.2.2 to 2.6.3 by @dependabot[bot] in #14
• Bump virtualenv from 20.26.3 to 20.36.1 by @dependabot[bot] in #15
• Bump setuptools from 70.0.0 to 78.1.1 by @dependabot[bot] in #16
• Bump wheel from 0.42.0 to 0.46.2 by @dependabot[bot] in #17
• Bump cryptography from 43.0.1 to 46.0.5 by @dependabot[bot] in #18
• Bump certifi from 2023.11.17 to 2024.7.4 by @dependabot[bot] in #19
• build(deps): Bump filelock from 3.15.4 to 3.20.3 by @dependabot[bot] in #20
• build(deps): Bump jinja2 from 3.1.5 to 3.1.6 by @dependabot[bot] in #21
• build(deps): Bump requests from 2.32.2 to 2.32.4 by @dependabot[bot] in #22

New Contributors

• @deepsource-autofix[bot] made their first contribution in #13

Full Changelog: https://github.com/kents00/Package-Manager/commits/1.4.0

v1.2.1 | Fix bug/issue

The function search_pypi_html functionality returns None, which could potentially be an issue. Upon further investigation, it appears that the Pypi's JSON API is blocking the requests, resulting in a failure to establish a connection, which could be the root cause of the issue.

• searching package and installing/uninstalling packages in Blender requires to run as "Administrator" mode in order to run this add-on

update 1.2.1

What's Changed

• Bump twisted from 24.3.0 to 24.7.0 by @dependabot in #1
• Bump setuptools from 68.1.2 to 70.0.0 by @dependabot in #2
• Bump cryptography from 41.0.7 to 43.0.1 by @dependabot in #3
• Bump urllib3 from 2.0.7 to 2.2.2 by @dependabot in #4
• Bump requests from 2.31.0 to 2.32.2 by @dependabot in #5
• Bump jinja2 from 3.1.2 to 3.1.4 by @dependabot in #6
• Bump idna from 3.6 to 3.7 by @dependabot in #7

New Contributors

• @dependabot made their first contribution in #1

Full Changelog: https://github.com/kents00/Package-Manager/commits/v.1.2.1

v1.0.0 | First Official Release

Update README.md