v1.5.2

Note: Vermin 1.6 will end support for running via py2.7

1.5.2:

• Union types (X | Y) detection turned into opt-in feature (#176 fixes #103)
  • See the caveats section for more information.
• Added missing rules and fixed some existing ones (#155 fixes #144)
  • Added 120 new rules
    • 31 modules
    • 68 members
    • 21 kwargs
  • Fixed 17 rules
  • Thanks to @cpAdm for reporting the rules issues!
• Fixed error reporting that broke parsable format (#156 fixes #150)
• Fixed reported versions for built-in type() (#172 fixes #171)
• Visit keyword values if not excluded/ignored (#173 fixes #168)
• Union types detection also considers attributes (#174 fixes #159)
• Improved usage section of README (#175 fixes #158)
• Fixed a typo in the --help documentation (#169, @Eutropios)
• [actions] Don't test using EOL Python 3.6 (#134)
• Security (does not affect Vermin in production, only deps for CI testing and analysis)
  • Upgrade certifi to 2022.12.07 (#135, GHSA-43fp-rhv2-5gv8)
  • Update GitPython to 3.1.30 (#157, GHSA-hcpj-qp55-gfph)

1.5.1:

• Make typing.NamedTuple a Python 3.5 feature (#126, @pyrco)
• Fix coveralls via forks (#127)

1.5.0:

• Python 3.11 support (#124)
  • Added 124 rules specific to Python 3.11
  • Detect except* (PEP-654)
  • Updated list of built-in generic annotation types
• More stringent rules for detecting union types (#108 fixes #103)
• Don't visit returns annotations if not evaluating annotations (#110 fixes #109)
• typing_extensions backport and versioned backports support (#111 fixes #100)
• Added --exclude-regex and --no-make-paths-absolute to exclude specific file paths (#115, @cosmicexplorer)
• Plurality method of results messages with overridability
• General project tweaks
  • Don't test using end-of-life Python versions (3.4 and 3.5)
  • Added security policy and vulnerability report template
  • Added CODEOWNERS file
  • Added CONTRIBUTING file
  • Added OpenSSF best practices emblem to README
  • Check GitHub Actions and Pip deps every sunday via dependabot
  • Check CodeQL on PRs and Sundays. Not when pushing to master because PRs are required and otherwise it'll run two times: once for the PR and again when the accepted PR is merged to master.