v2.4.2

Fixed

• CLI: the --format=markdown and --format=columns output formats are no longer broken by long vulnerability descriptions from the OSV and PyPI vulnerability sources (#323)

Release 2.4.1

[2.4.1]

Fixed

• Fixed a breakage in hash-checking mode caused by a
  change to the PyPI JSON API
  (#318)

Release 2.4.0

[2.4.0]

Added

• Output formats: pip-audit now supports a Markdown format
  (--format=markdown) which renders results as a set of Markdown tables.
  (#312)

Release v2.3.4

version: v2.3.4

Release v2.3.3

Changed

• CLI: pip-audit now warns on the combination of -s osv and
  --require-hashes, notifying users that only the PyPI service
  can fully verify hashes
  (#298)

Fixed

• CLI/Dependency sources: --cache-dir=... and other flags that affect
  dependency resolver behavior now work correctly when auditing a
  pyproject.toml dependency source
  (#300)

Release v2.3.2

Changed

• CLI: pip-audit's progress spinner has been refactored to make it
  faster and more responsive
  (#283)

• CLI, Vulnerability sources: the error message used to report
  connection failures to vulnerability sources was improved
  (#287)

• Vulnerability sources: the OSV service is now more resilient
  to schema changes (#288)

• Vulnerability sources: the PyPI service provides a better
  error message during some cases of service degradation
  (#294)

Fixed

• Vulnerability sources: a bug stemming from an incorrect assumption
  about OSV's schema guarantees was fixed
  (#284)

• Caching: pip-audit now respects pip's PIP_NO_CACHE_DIR
  and will not attempt to use the pip cache if present
  (#290)

Release v2.3.1

2.3.1 - 2022-05-24

Fixed

• CLI: A bug causing the terminal's cursor to disappear on some versions of CPython was fixed (#280)

Release v2.3.0

2.3.0 - 2022-05-18

Added

CLI: The --ignore-vuln option has been added, allowing users to specify vulnerability IDs to ignore during the final report (#275)

CLI: The --no-deps flag has been added, allowing users to skip dependency resolution entirely when pip-audit is used in requirements mode (#255)

Release v2.2.1

CHANGELOG: 2.2.1

Release v2.2.0

2.2.0 - 2022-05-02

Added

• CLI: The --output option has been added, allowing users to specify
  a file to write output to. The default behavior of writing to stdout
  is unchanged (#262)

Fixed

• Vulnerability sources: A bug caused by insufficient version normalization
  was fixed (#263)